search

hasherezade / pe-bear-releases

PE-bear (builds only)
https://hshrzd.wordpress.com/pe-bear/
767 stars 73 forks source link

GuardCFFunctionTable: parse all formats of entries #11

Closed hasherezade closed 3 years ago

hasherezade commented 4 years ago

Test case

Currently PE-bear don't parse correctly some of the entries' types. They should be displayed like in dumpbin. Example: cfg2_bearvsdb

IMAGE_GUARD_CF_EXPORT_SUPPRESSION_INFO_PRESENT flag

From: https://86hh.github.io/cfg2.html

hasherezade commented 3 years ago

Fixed since 0.5.3:

table