pedump 0.4.9.2 → 0.4.10

data/Gemfile

@@ -9,10 +9,10 @@ gem "awesome_print"
 # Add dependencies to develop your gem here.
 # Include everything needed to run rake, tests, features, etc.
 group :development do
-  gem "rspec", "~> 2.3.0"
-  gem "bundler", "~> 1.0.0"
-  gem "jeweler", "~> 1.6.4"
-  gem "rcov", ">= 0"
+  gem "rspec"
+  gem "bundler"
+  gem "jeweler"
+#  gem "rcov", ">= 0"
   gem "what_methods"
   gem "looksee"
 end

data/Gemfile.lock

@@ -1,26 +1,29 @@
 GEM
   remote: http://rubygems.org/
   specs:
-    awesome_print (1.0.2)
+    awesome_print (1.1.0)
     diff-lcs (1.1.3)
     git (1.2.5)
-    jeweler (1.6.4)
+    jeweler (1.8.4)
       bundler (~> 1.0)
       git (>= 1.2.5)
       rake
+      rdoc
+    json (1.7.5)
     looksee (1.0.3)
-    multipart-post (1.1.4)
+    multipart-post (1.1.5)
     progressbar (0.9.2)
-    rake (0.9.2.2)
-    rcov (0.9.11)
-    rspec (2.3.0)
-      rspec-core (~> 2.3.0)
-      rspec-expectations (~> 2.3.0)
-      rspec-mocks (~> 2.3.0)
-    rspec-core (2.3.1)
-    rspec-expectations (2.3.0)
-      diff-lcs (~> 1.1.2)
-    rspec-mocks (2.3.0)
+    rake (10.0.2)
+    rdoc (3.12)
+      json (~> 1.4)
+    rspec (2.12.0)
+      rspec-core (~> 2.12.0)
+      rspec-expectations (~> 2.12.0)
+      rspec-mocks (~> 2.12.0)
+    rspec-core (2.12.1)
+    rspec-expectations (2.12.0)
+      diff-lcs (~> 1.1.3)
+    rspec-mocks (2.12.0)
     what_methods (1.0.1)
 
 PLATFORMS
@@ -28,11 +31,10 @@ PLATFORMS
 
 DEPENDENCIES
   awesome_print
-  bundler (~> 1.0.0)
-  jeweler (~> 1.6.4)
+  bundler
+  jeweler
   looksee
   multipart-post (~> 1.1.4)
   progressbar (~> 0.9.2)
-  rcov
-  rspec (~> 2.3.0)
+  rspec
   what_methods

data/VERSION

@@ -1 +1 @@
-0.4.9.2
+0.4.10

data/lib/pedump.rb

@@ -587,7 +587,7 @@ class PEdump
   ##############################################################################
 
   #http://msdn.microsoft.com/en-us/library/ms809762.aspx
-  IMAGE_EXPORT_DIRECTORY = create_struct 'V2v2V7',
+  IMAGE_EXPORT_DIRECTORY = create_struct 'V2v2V2l2V3',
     :Characteristics,
     :TimeDateStamp,
     :MajorVersion,          # These fields appear to be unused and are set to 0.
@@ -639,7 +639,7 @@ class PEdump
           x.name = f.gets("\x00").chomp("\x00")
         end
       end
-      if x.NumberOfFunctions.to_i != 0
+      if x.NumberOfFunctions.to_i > 0
         if x.AddressOfFunctions.to_i !=0 && (ofs = va2file(x.AddressOfFunctions))
           f.seek ofs
           x.entry_points = []
@@ -663,7 +663,7 @@ class PEdump
           end
         end
       end
-      if x.NumberOfNames.to_i != 0 && x.AddressOfNames.to_i !=0 && (ofs = va2file(x.AddressOfNames))
+      if x.NumberOfNames.to_i > 0 && x.AddressOfNames.to_i !=0 && (ofs = va2file(x.AddressOfNames))
         f.seek ofs
         x.names = []
         x.NumberOfNames.times do
@@ -673,15 +673,31 @@ class PEdump
           end
           x.names << f.read(4).unpack('V').first
         end
-        x.names.map! do |va|
-          f.seek va2file(va)
-          f.gets("\x00").to_s.chomp("\x00")
+        nErrors = 0
+        x.names.size.times do |i|
+          begin
+            f.seek va2file(x.names[i])
+            x.names[i] = f.gets("\x00").to_s.chomp("\x00")
+          rescue
+            nErrors += 1
+            if nErrors > 100
+              logger.warn "[?] too many errors getting export names, stopped on #{i} of #{x.names.size}"
+              x.names = x.names[0,i]
+              break
+            end
+            nil
+          end
         end
       end
 
       ord2name = {}
       if x.names && x.names.any?
-        x.NumberOfNames.times do |i|
+        n = x.NumberOfNames
+        if n > 2048
+          logger.warn "[?] NumberOfNames too big (#{x.NumberOfNames}), limiting to 2048"
+          n = 2048
+        end
+        n.times do |i|
           ord2name[x.name_ordinals[i]] ||= []
           ord2name[x.name_ordinals[i]] << x.names[i]
         end

data/lib/pedump/version.rb

@@ -2,7 +2,7 @@ class PEdump
   module Version
     MAJOR = 0
     MINOR = 4
-    PATCH = 9
+    PATCH = 10
     BUILD = nil
 
     STRING = [MAJOR, MINOR, PATCH, BUILD].compact.join('.')

data/pedump.gemspec

@@ -5,11 +5,11 @@
 
 Gem::Specification.new do |s|
   s.name = "pedump"
-  s.version = "0.4.9.2"
+  s.version = "0.4.10"
 
   s.required_rubygems_version = Gem::Requirement.new(">= 0") if s.respond_to? :required_rubygems_version=
   s.authors = ["Andrey \"Zed\" Zaikin"]
-  s.date = "2012-05-31"
+  s.date = "2012-12-10"
   s.description = "dump headers, sections, extract resources of win32 PE exe,dll,etc"
   s.email = "zed.0xff@gmail.com"
   s.executables = ["pedump"]
@@ -90,20 +90,18 @@ Gem::Specification.new do |s|
       s.add_runtime_dependency(%q<multipart-post>, ["~> 1.1.4"])
       s.add_runtime_dependency(%q<progressbar>, ["~> 0.9.2"])
       s.add_runtime_dependency(%q<awesome_print>, [">= 0"])
-      s.add_development_dependency(%q<rspec>, ["~> 2.3.0"])
-      s.add_development_dependency(%q<bundler>, ["~> 1.0.0"])
-      s.add_development_dependency(%q<jeweler>, ["~> 1.6.4"])
-      s.add_development_dependency(%q<rcov>, [">= 0"])
+      s.add_development_dependency(%q<rspec>, [">= 0"])
+      s.add_development_dependency(%q<bundler>, [">= 0"])
+      s.add_development_dependency(%q<jeweler>, [">= 0"])
       s.add_development_dependency(%q<what_methods>, [">= 0"])
       s.add_development_dependency(%q<looksee>, [">= 0"])
     else
       s.add_dependency(%q<multipart-post>, ["~> 1.1.4"])
       s.add_dependency(%q<progressbar>, ["~> 0.9.2"])
       s.add_dependency(%q<awesome_print>, [">= 0"])
-      s.add_dependency(%q<rspec>, ["~> 2.3.0"])
-      s.add_dependency(%q<bundler>, ["~> 1.0.0"])
-      s.add_dependency(%q<jeweler>, ["~> 1.6.4"])
-      s.add_dependency(%q<rcov>, [">= 0"])
+      s.add_dependency(%q<rspec>, [">= 0"])
+      s.add_dependency(%q<bundler>, [">= 0"])
+      s.add_dependency(%q<jeweler>, [">= 0"])
       s.add_dependency(%q<what_methods>, [">= 0"])
       s.add_dependency(%q<looksee>, [">= 0"])
     end
@@ -111,10 +109,9 @@ Gem::Specification.new do |s|
     s.add_dependency(%q<multipart-post>, ["~> 1.1.4"])
     s.add_dependency(%q<progressbar>, ["~> 0.9.2"])
     s.add_dependency(%q<awesome_print>, [">= 0"])
-    s.add_dependency(%q<rspec>, ["~> 2.3.0"])
-    s.add_dependency(%q<bundler>, ["~> 1.0.0"])
-    s.add_dependency(%q<jeweler>, ["~> 1.6.4"])
-    s.add_dependency(%q<rcov>, [">= 0"])
+    s.add_dependency(%q<rspec>, [">= 0"])
+    s.add_dependency(%q<bundler>, [">= 0"])
+    s.add_dependency(%q<jeweler>, [">= 0"])
     s.add_dependency(%q<what_methods>, [">= 0"])
     s.add_dependency(%q<looksee>, [">= 0"])
   end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: pedump
 version: !ruby/object:Gem::Version
-  version: 0.4.9.2
+  version: 0.4.10
   prerelease: 
 platform: ruby
 authors:
@@ -9,7 +9,7 @@ authors:
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2012-05-31 00:00:00.000000000 Z
+date: 2012-12-10 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: multipart-post
@@ -64,51 +64,35 @@ dependencies:
   requirement: !ruby/object:Gem::Requirement
     none: false
     requirements:
-    - - ~>
+    - - ! '>='
       - !ruby/object:Gem::Version
-        version: 2.3.0
+        version: '0'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     none: false
     requirements:
-    - - ~>
+    - - ! '>='
       - !ruby/object:Gem::Version
-        version: 2.3.0
+        version: '0'
 - !ruby/object:Gem::Dependency
   name: bundler
   requirement: !ruby/object:Gem::Requirement
     none: false
     requirements:
-    - - ~>
+    - - ! '>='
       - !ruby/object:Gem::Version
-        version: 1.0.0
+        version: '0'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     none: false
     requirements:
-    - - ~>
+    - - ! '>='
       - !ruby/object:Gem::Version
-        version: 1.0.0
+        version: '0'
 - !ruby/object:Gem::Dependency
   name: jeweler
-  requirement: !ruby/object:Gem::Requirement
-    none: false
-    requirements:
-    - - ~>
-      - !ruby/object:Gem::Version
-        version: 1.6.4
-  type: :development
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    none: false
-    requirements:
-    - - ~>
-      - !ruby/object:Gem::Version
-        version: 1.6.4
-- !ruby/object:Gem::Dependency
-  name: rcov
   requirement: !ruby/object:Gem::Requirement
     none: false
     requirements:
@@ -237,7 +221,7 @@ required_ruby_version: !ruby/object:Gem::Requirement
       version: '0'
       segments:
       - 0
-      hash: 437507218408314467
+      hash: 1643171094839400469
 required_rubygems_version: !ruby/object:Gem::Requirement
   none: false
   requirements: