| January 13, 2007 | ||
|---|---|---|
 |
View ce323ef
Fix for cli_rebuildpe call in mew unpacker. Code is not yet 100% ready. Please only use for debugging purposes.aCaB authored on 2007/01/13 05:22:13 |
|
|
View 4aa4a05
MEW support code added (enabled via configure option) Merge not complete, please don't freeze yet.aCaB authored on 2007/01/13 02:53:44 |
|
| January 10, 2007 | ||
|---|---|---|
 |
View bc93eda
dynamic configuration supportTomasz Kojm authored on 2007/01/10 05:06:51 |
|
| December 10, 2006 | ||
|---|---|---|
|
View 1ff5f3b
Memory leaksaCaB authored on 2006/12/10 23:23:08 |
|
| December 5, 2006 | ||
|---|---|---|
|
View e287514
Remove debug lineaCaB authored on 2006/12/05 03:09:57 |
|
|
View a9b1e8d
fix newpe merge bugs (bb#171, bb#172)aCaB authored on 2006/12/05 03:05:16 |
|
| November 28, 2006 | ||
|---|---|---|
|
View 5f9d4c3
detect damaged infections of MagistrTomasz Kojm authored on 2006/11/28 09:49:50 |
|
|
View b3c5eb9
Fix newpe merge bug in cli_peheader (header32 was read twice)aCaB authored on 2006/11/28 00:54:00 |
|
| November 27, 2006 | ||
|---|---|---|
|
View c1df0e6
use unaligned section's virtual size in Magistr detectionTomasz Kojm authored on 2006/11/27 19:38:52 |
|
|
View 82d4c98
Stuff forgotten in my previous commitaCaB authored on 2006/11/27 07:31:16 |
|
|
View 57866af
New PE parsing model - Accurate virtual and raw size and offset calculations - Proper parsing of executables with weird/handcrafted/uncommon headers - Proper handling (or skipping) of ghost sections at various places in the code - Rebuild improvements for various unpackers - Adjusted alignment on rebuilt executables - Proper handling of out of sections offsets - Broken exe detection now mimics the XPSP2 loader (*) - Lots of misc improvements and fixesaCaB authored on 2006/11/27 07:23:11 |
|
| November 20, 2006 | ||
|---|---|---|
|
View 841161e
cache target file info in pattern matchersTomasz Kojm authored on 2006/11/20 09:03:16 |
|
| November 10, 2006 | ||
|---|---|---|
|
View 3b82c17
fix incorrect comparisonTomasz Kojm authored on 2006/11/10 06:16:47 |
|
| November 5, 2006 | ||
|---|---|---|
|
View 6b16969
don't report I/O error when EP is near (less than 200 bytes) to the end of fileTomasz Kojm authored on 2006/11/05 23:13:25 |
|
|
View 752f17a
RVA broken.executable checks skip checks on virtual-only sectionsaCaB authored on 2006/11/05 10:35:40 |
|