Katy Coe
|
e260a92f1b
|
PE: Fix calculation of GlobalOffset
|
2019-10-29 01:15:48 +01:00 |
|
Katy Coe
|
55ffc12348
|
PE32+: Get function table correctly
|
2019-10-28 23:23:07 +01:00 |
|
Katy Coe
|
f178acccbd
|
Clarify file format output names
|
2019-10-28 22:42:02 +01:00 |
|
Katy Coe
|
1496bbb623
|
PE32+: Initial support
|
2019-10-28 22:13:20 +01:00 |
|
Katy Coe
|
94b87fa6f0
|
Match PE field names with official documentation
|
2019-10-28 21:40:23 +01:00 |
|
Katy Coe
|
b863cf74b8
|
MachO: Read __mod_init_func instead of LC_FUNCTION_STARTS
|
2019-10-27 22:00:48 +01:00 |
|
Katy Coe
|
1616699977
|
Separate TWord conversion logic from ElfReader.cs
|
2019-10-27 22:00:13 +01:00 |
|
Katy Coe
|
9ee2e7567c
|
Fix x86 analysis based on ELF PLT
|
2019-10-26 15:18:55 +02:00 |
|
Katy Coe
|
2236764715
|
Fix incorrect use of GlobalOffset in ELF (WARNING: breaks some binaries from resolving)
|
2019-10-26 05:39:54 +02:00 |
|
Katy Coe
|
baf11e517a
|
Add ELF64 support (load, relocations, symbol table, function table)
|
2019-10-26 00:42:08 +02:00 |
|
Katy Coe
|
dda58af124
|
Add Mach-O relocation processing stub
|
2019-10-22 23:41:18 +02:00 |
|
Katy Coe
|
8299414fba
|
Handle 64-bit Mach-O virtual address mapping correctly
|
2019-10-22 22:35:20 +02:00 |
|
Katy Coe
|
490736f68e
|
Add Mach-O static symbol table analysis
|
2019-10-22 22:19:12 +02:00 |
|
Katy Coe
|
298db65a71
|
Add 64-bit Mach-O support
|
2019-10-22 15:42:11 +02:00 |
|
Katy Coe
|
e036151f4d
|
Prepare for 64-bit support
|
2019-10-22 15:33:43 +02:00 |
|
Katy Coe
|
c88f058a39
|
Process ELF32 relocations
|
2019-10-22 00:37:16 +02:00 |
|
Katy Coe
|
a8aa618aee
|
Refactor ElfReader
|
2019-10-21 17:15:19 +02:00 |
|
Katy Coe
|
fde19c8972
|
Detect x64 and AArch64 ISAs in all binary formats
|
2019-10-21 14:31:09 +02:00 |
|
Katy Coe
|
e46cca08e0
|
All readers report format, endianness, word size and instruction set
|
2019-10-21 14:00:13 +02:00 |
|
Katy Coe
|
982b4b168d
|
Tidy up ElfReader
|
2019-10-21 00:12:51 +02:00 |
|
Katy Coe
|
bebfba4f46
|
Add symbol table search scaffolding and ELF32 implementation
|
2019-10-21 00:00:05 +02:00 |
|
Katy Coe
|
41d6b45f3b
|
Correctly handle valid virtual addresses not mapped to the image file
|
2019-10-16 18:30:30 +02:00 |
|
Katy Coe
|
950c2d6f16
|
Remove FinalizeInit
|
2019-10-16 16:41:36 +02:00 |
|
Katy Coe
|
79ac482d72
|
Fix 1-off function pointers in PE files
|
2018-03-18 05:42:52 +01:00 |
|
Katy Coe
|
5890b0a1c1
|
Update copyright notices and using statements
|
2017-11-07 05:41:32 +01:00 |
|
Katy Coe
|
0ab1b75ef4
|
Additional refactoring
|
2017-10-23 16:12:40 +02:00 |
|
Katy Coe
|
474faa009c
|
Re-factor Metadata and file format code
|
2017-10-23 14:03:41 +02:00 |
|