peview: Add hex for timestamp on Win10
@@ -545,10 +545,26 @@ VOID PvpSetPeImageTimeStamp(
RtlSecondsSince1970ToTime(PvMappedImage.NtHeaders->FileHeader.TimeDateStamp, &time);
PhLargeIntegerToLocalSystemTime(&systemTime, &time);
+ if (WindowsVersion >= WINDOWS_10)
+ {
+ // "the timestamp to be a hash of the resulting binary"
+ // https://devblogs.microsoft.com/oldnewthing/20180103-00/?p=97705
+ string = PhFormatDateTime(&systemTime);
+ PhSwapReference(&string, PhFormatString(
+ L"%s (%lx)",
+ string->Buffer,
+ PvMappedImage.NtHeaders->FileHeader.TimeDateStamp
+ ));
+ PhSetDialogItemText(WindowHandle, IDC_TIMESTAMP, string->Buffer);
+ PhDereferenceObject(string);
+ }
+ else
+ {
string = PhFormatDateTime(&systemTime);
PhSetDialogItemText(WindowHandle, IDC_TIMESTAMP, string->Buffer);
PhDereferenceObject(string);
}
+}
VOID PvpSetPeImageBaseAddress(
_In_ HWND WindowHandle
