examiner (0.5-1) unstable; urgency=low * Has rudementary detection of burneye via 7350 sig. * Can detect crippled ELF header files (optionally uncripple) * Added a TUTORIAL file * Modified default working dir to $HOME\examiner-data * Can cross-reference .data pointers to .rodata sections * Now records pushl calls * Fixed '-H' to dump headers instead of -R * Added '-o' to specify an output file or STDOUT with '-' * Added '-c' to specify a comment character * Added a new util 'xhierarchy' to print function call hierarchy -- Craig Smith <craig@AcademicUnderground.org> Mon, 28 Jul 2002 10:00:00 +0200 v0.4 * Now will pull symbol/function information from dynamic shared libs. * Now uses symbols when available to determine function names * Will use dress(1) from the fenris suite if stripped and static * Displays a function percent ratio in summary * Comment symbol can be easily modified (might default to ';') * Fixed a upx decoding bug. * Added a man page * Updated the Makefile to support clean,uninstall installs the man page * Some minor bugfixes v0.3 * Added a basic Makefile * Added some more error checking * Added UPX support for decompression * Prints UPX header information and some diagnostics * Recognizes bogus version information for UPX * Added some integration support for/with TCT * return_rostring does a much better job at displaying binary strings * Now supports header files hashes to be loaded as a seperate but optional library instead of parsing from disk. * Includes a util to convert headers into perl hashes v0.2 * Added getopts * Added stack_states * lots of code cleanups and optoins added v0.1 * Proof of concept