oodlescan
a simple oodle stream scanner i made. 99% of the logic is taken from xtool source code. built with gcc on windows x64. the only reason i made this and difference between this and Razor12911's oo2scan_7_win64 is that this one uses chunk based data loading. oo2scan_7_win64 tries to occupy the entire size of the file on memory to store and scan it from there, in cases where the data is huge it would fail. oodlescan copies small chunks from the file to memory and scans from there, eliminating the memroy allocation issue. i will add the source code here after some polishing
.
Code:
SYMM's Oodle Stream Scanner
- Scans files for Oodle streams
Usage: H:\test\ooscan\oodlescan.exe [options] <file>
Options:
-cN size of chunks (e.g. -c16M)
-v show valid streams only
-vv show valid and invalid streams
-h show this help message
edit: added source code