 hasherezade
|
6f8e2f4a49
|
[BUGFIX] In LdConfigDir: optimized too slow counting of fields
|
2021-02-18 17:29:24 +01:00 |
|
|
hasherezade
|
c703ff193d
|
[BUGFIX] Catch exception thrown by rvaToRaw
|
2021-02-18 16:53:43 +01:00 |
|
|
hasherezade
|
49ac9740ba
|
[FEATURE] In LdCondigDir: wrap subfields of GuardEHContinuationTable
|
2021-02-17 23:09:50 +01:00 |
|
|
hasherezade
|
fd69dd54cd
|
[FEATURE] In LdCondigDir: added new fields: GuardEHContinuation Table/Count
|
2021-02-17 21:26:10 +01:00 |
|
|
hasherezade
|
d0dafb2e66
|
[REFACT] In LdConfigDirWrapper: return NULL if field not available
|
2021-02-17 02:20:48 +01:00 |
|
|
hasherezade
|
e0bbb9f5ae
|
[FEATURE] Added support for VolatileMetadataPointer in LdConfigDir
|
2021-02-17 01:48:20 +01:00 |
|
|
hasherezade
|
49837f7be2
|
[REFACT] Get all the fields of LdConfigDir in one structure
|
2021-02-17 01:18:15 +01:00 |
|
|
hasherezade
|
938072e638
|
[REFACT] Refactored fetching fields from LD_CONFIG_DIRECTORY
|
2021-02-16 23:57:01 +01:00 |
|
|
hasherezade
|
0b56e88591
|
[REFACT] In LdConfigWrapper: added fuction getHdrDefinedSize
|
2021-02-16 21:49:24 +01:00 |
|
|
hasherezade
|
2ee7d454ce
|
[REFACT] Use asprintf instead of sprintf (obsolete)
|
2021-02-10 19:27:00 +01:00 |
|
|
hasherezade
|
6d94dd82fb
|
[FEATURE] In Executable: added a wrapper func: getImageSize
|
2021-02-10 11:52:04 +01:00 |
|
|
hasherezade
|
82c5eac1d6
|
[REFACT] In ExportDirWrapper: refactored printing ordinal
|
2021-02-09 01:37:49 +01:00 |
|
|
hasherezade
|
c389106605
|
[NOBIN] Removed commented out code
|
2021-02-08 15:25:16 +01:00 |
|
|
hasherezade
|
d3f266776b
|
[NOBIN] Normalized indentation
|
2021-02-08 15:23:24 +01:00 |
|
|
hasherezade
|
dd0e7f6e2c
|
[REFACT] In ExportsDirWrapper: refactored getting libName. Added Export keyword to the main name
|
2021-02-08 12:04:29 +01:00 |
|
|
hasherezade
|
1cb766732d
|
[FEATURE] In ExportsDirWrapper: print only DLL name (not the Export keyword)
|
2021-02-08 11:29:55 +01:00 |
|
|
hasherezade
|
1c312d9df8
|
[FEATURE] In RichHdr: enhanced id translation
|
2021-02-07 21:51:34 +01:00 |
|
|
hasherezade
|
be8b5f3e5b
|
[FEATURE] In RichHdr: add calculated checksum as one of the fields
|
2021-02-07 21:41:14 +01:00 |
|
|
hasherezade
|
84fca56770
|
[BUGFIX] In Util: fixed endsWith
|
2021-02-07 13:42:37 +01:00 |
|
|
hasherezade
|
9c9e6ce255
|
[REFACT] Removed unused files: AbstractFileBuffer.cpp/.h
|
2021-02-06 21:18:47 +01:00 |
|
|
hasherezade
|
3ee8c13b53
|
[FEATURE] In ExeElementWrapper: added hasSubfieldWrapper
|
2021-02-06 21:13:28 +01:00 |
|
|
hasherezade
|
f1b78a7f42
|
[BUGFIX] SEH Table Entries have no metadata
|
2021-01-16 01:13:22 +01:00 |
|
|
hasherezade
|
350a1cab05
|
[FEATURE] Print values of fields with supression info
|
2021-01-15 23:08:53 +01:00 |
|
|
hasherezade
|
588124d485
|
[FEATURE] In LdConfig: parse fields with suppression info
|
2021-01-15 22:44:30 +01:00 |
|
|
hasherezade
|
f8f5883767
|
[BUGFIX] RVAs between the headers and the first section are not mapped (Issue #11)
|
2020-11-25 14:42:10 +01:00 |
|
|
hasherezade
|
e0f9fdb758
|
[BUGFIX] Fixed renamed constant
|
2020-07-10 12:27:53 +02:00 |
|
|
hasherezade
|
0f8dda3582
|
[REFACT] pe_formats.h: removed unused Non-COFF header
|
2020-07-10 12:19:42 +02:00 |
|
|
hasherezade
|
ecf9005b0c
|
[REFACT] Refactored: win_types, pe_formats
|
2020-07-10 12:11:46 +02:00 |
|
|
hasherezade
|
5a8838ae0f
|
[BUGFIX] Fixed invalid VA/raw conversion, causing errors in parsing TLS callbacks (Issue #9)
|
2020-04-18 18:34:10 +02:00 |
|
|
hasherezade
|
633fd33a86
|
[BUGFIX] Removed redundant flag: Truncate, causing wiping files opened by FileBuffer.
|
2020-03-10 00:36:21 +01:00 |
|
|
hasherezade
|
972a9210c2
|
[BUGFIX] Fixed Qt4 compatibility
|
2019-12-01 03:24:54 +01:00 |
|
|
hasherezade
|
b574cc97cd
|
[REFACT] Refactored includes. Include bearparser as <bearparser/bearparser.h>
|
2019-12-01 01:16:53 +01:00 |
|
|
hasherezade
|
a52bdd9b1e
|
[REFACT] Added directories to include path
|
2019-12-01 01:02:16 +01:00 |
|
|
hasherezade
|
e0f270a48a
|
[REFACT] Changed structure of includes
|
2019-12-01 00:43:54 +01:00 |
|
|
hasherezade
|
6b8c6f019d
|
[FEATURE] More flexible Formatter for AbstractByteBuffer
|
2019-11-29 02:20:10 +01:00 |
|
|
hasherezade
|
0b5f2c70e9
|
[FEATURE] List and name the entry points of the application
|
2019-11-27 22:16:17 +01:00 |
|
|
hasherezade
|
709b0648e3
|
[BUGFIX] Fixed recognizing forwarded exports
|
2019-11-24 23:16:13 +01:00 |
|
|
hasherezade
|
e8dddc9d42
|
[REFACT] Renamed field in DataDir (.NET header)
|
2019-11-24 22:19:44 +01:00 |
|
|
hasherezade
|
197d23a4fc
|
[BUGFIX] Set raw mapped address as invalid for out of scope sec. Fixed rounding up raw size
|
2019-11-24 20:09:46 +01:00 |
|
|
hasherezade
|
abd0a9bae2
|
[BUGFIX] Fixed mapping size of overlapped sections
|
2019-11-24 18:18:14 +01:00 |
|
|
hasherezade
|
f2970f9f4c
|
[BUGFIX] Remove truncate flag from file opening
|
2019-11-24 00:19:32 +01:00 |
|
|
hasherezade
|
a0bfc4a2de
|
[BUGFIX] Removed a truncate flag while opening the file. Enabled tests on Mac
|
2019-11-24 00:01:58 +01:00 |
|
|
hasherezade
|
2648596512
|
[FEATURE] Changes in the commander. Use only file supplied as an argument
|
2019-11-23 04:30:09 +01:00 |
|
|
hasherezade
|
d90c3787bc
|
[NOBIN] Set minimal CMake version: 3.12
|
2019-11-23 01:08:39 +01:00 |
|
|
hasherezade
|
1a08238448
|
[REFACT] Small refactoring following the LGTM report
|
2019-11-19 03:04:35 +01:00 |
|
|
@hasherezade
|
ca31b6177a
|
[BUGFIX] Added missing destructor for SectionHdrWrapper (Issue #7)
|
2019-09-03 07:06:54 +02:00 |
|
|
hasherezade
|
fc92d6c557
|
[REFACT] Set Qt5 as default. Changed flag to USE_QT4
|
2019-08-16 23:09:09 +02:00 |
|
|
hasherezade
|
9357df2f3e
|
[NOBIN] Add option in CMake to switch between Qt versions
|
2019-08-16 20:38:42 +02:00 |
|
|
hasherezade
|
23e5e228ed
|
[BUGFIX] Fixed NULL ptr dereference in PEFile::getRichHdrBgn (Issue #4)
|
2019-04-26 15:03:15 +02:00 |
|
|
hasherezade
|
a0392ed291
|
[REFACT] In RichHeader: cleaned checksum calculation (validate pointer, removed redundant lines)
|
2019-01-13 23:02:09 +01:00 |
|