Well recently I got really intrested in Patching / Adding functions / debugging somewhere that's not mine. So I only have the elf or pe from. And I like to read most of the things rabin takes care of. Enlarge/Slim down sections and auto fill them w/ Padding. Recalculate checksums. entrypoiny changing all that kind of stuff.
I already thought radare would have it hidden somehwere.. seriously though. Finish radare2, write a nice book about it. Get it published. Ikk be the first buyer. I want to unlock all the secrets of radare. Cheers, Robin On Jul 21, 2009 1:25 PM, "pancake" <[email protected]> wrote: Robin Vossen wrote: > > Hello, > > I am wondering.. > Will most of the functions from LordPE be in R... Section resizer is already implemented in r1 and r2 for ELF. Nibble has been working on the refactoring of r_bin library for elf and pe and managed to remove about 700LOC and keeping the functionality. But the new api has not been tested, and needs some more work to refactor the resizing stuff that has changed. The new r_bin api allows to read binary structures from any backend supported by r_io. this is local files, mapped files, process memory, remote files, sockets, etc.. For this reason we need to work a bit more on the r_io library to properly support the resizing for non-files (like allocating memory on child processes, etc..). The plans for r_bin are to split the reading and writing functionalities for binary formats in two separate layers (we already decided to break the API as much as possible to do it well) so no plans for backporting to r1 at this point. The writting api will allow to add/remove/resize sections,symbols, imports, libraries, etc. in a simple and portable way between file formats and architectures. The main reason why this is not yet done is because the lack of free time :) The need to split all the writting stuff in a separate module is because the bin library will need more information from external sources to properly reallocate sections and symbols, this is, the r_anal (code analysis module), and so on. If you look at rabin -o help you will get something like: $ rabin -o help Operation string: -o r/.text/1024 -o d/s/10 -o d/S/.text These operations are: 'r' : resize section 'd/s' : dump symbol 'd/S' : dump section They are also implemented in rabin2. Which other kind of features would you like to have in radare2 for binary manipulation? --pancake _______________________________________________ radare mailing list [email protected] http://lists.nopcode.org/listinfo.cgi/radare-nopcode.org
_______________________________________________ radare mailing list [email protected] http://lists.nopcode.org/listinfo.cgi/radare-nopcode.org
