 hakril
|
fc0c81eb70
|
Fix pe parsing for section with 8bytes name
|
2025-02-11 10:37:00 +01:00 |
|
|
hakril
|
2a1217e7b8
|
Implem current_thread.teb for ARM64 + recognize ARM64 PE in pe_parse
|
2025-02-04 20:00:58 +01:00 |
|
|
clement rouault
|
af7e64638c
|
Fixed pe_parse for non-standard SizeOfOptionalHeader + .NET PE32 mapped in 64b processes
|
2021-07-29 20:01:51 +02:00 |
|
|
hakril
|
6a74c83670
|
test_process pass for python3 + added some pe_parse test
|
2020-02-07 23:06:26 +01:00 |
|
|
hakril
|
c20d443c29
|
windows.com.init does not raise anymore if CoInitializeEx fails but return error code + cosmetic
|
2018-03-03 16:55:40 +01:00 |
|
|
hakril
|
4a75453a8b
|
Clean and Improve WMI query API that now accept a Timeout
|
2017-12-08 14:49:03 +01:00 |
|
|
hakril
|
d2b801cada
|
Fix handle_exit_process + detach in Debugger to prevent keeping ref on process + fix pe_parse IATHook: all test pass
|
2017-04-12 17:19:01 +02:00 |
|
|
hakril
|
8653c4c1e4
|
No-closure pe_parse pass the test of WindowsTestCase
|
2017-04-12 17:19:01 +02:00 |
|
|
hakril
|
bc7656da05
|
[WIP] pe_parse refactor, imports and exports works without closure by code in dirty
|
2017-04-12 17:19:01 +02:00 |
|
|
hakril
|
03aec90d63
|
WIP: fixing handle 'leak' in dbg that require manual garbare collection for now
|
2017-04-12 17:19:01 +02:00 |
|
|
Clement Rouault
|
1f6ffd043c
|
Better implementation of MemoryBP
|
2016-07-13 13:50:44 +02:00 |
|
|
Clement Rouault
|
0f5fce424b
|
Fix test_hook to disable the hook after test
|
2016-06-13 18:18:59 +02:00 |
|
|
Clement Rouault
|
0b32302591
|
Remove generate_callback_stub (only IATHook are impacted)
|
2016-06-09 18:51:48 +02:00 |
|
|
Clement Rouault
|
085c36c706
|
fix/simplify get_string in pe_parse / adapt syswow.py
|
2016-04-21 10:47:00 +02:00 |
|
|
Clement Rouault
|
cb3c0f20c0
|
pe_parse: fix read string PE32 in process 64b
|
2016-04-18 11:54:51 +02:00 |
|
|
Clement Rouault
|
18bba9b24e
|
Fix pe_parse to handle 32bits PE in 64bits process (PE32 .NET)
|
2016-04-08 16:11:55 +02:00 |
|
|
Clement Rouault
|
ef9b2486ec
|
fix + add some info in Section
|
2016-04-08 13:46:06 +02:00 |
|
|
Clement Rouault
|
b789a12040
|
Improve debugger + pe_parse 'guess' the PE type (32/64)
|
2016-02-10 16:27:53 +01:00 |
|
|
Clement Rouault
|
401db9c347
|
Working on debugger (str address + rewrite + test)
|
2016-02-10 11:53:13 +01:00 |
|
|
Clement Rouault
|
b459e291c4
|
More doc + regitry PyPhKey.get()
|
2016-01-07 19:26:40 +01:00 |
|
|
Clement Rouault
|
9c8a4dcfad
|
Adding more and more documentation
|
2016-01-06 20:11:20 +01:00 |
|
|
hakril
|
28eb4df2d0
|
Testing of project tree rewriting
|
2015-12-30 22:49:34 +01:00 |
|