784 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Matt Nadareski	1d6fa06e97	Placeholder for section table trailer data	2025-09-11 12:24:56 -04:00
Matt Nadareski	2c22924239	Seek to section table to match docs	2025-09-11 12:17:48 -04:00
Matt Nadareski	eb01dd1e25	Add note for later	2025-09-11 12:14:07 -04:00
Matt Nadareski	0a3cb79b1c	Fix issue found in encrypted and obfuscated PE	2025-09-11 12:07:22 -04:00
Matt Nadareski	da9eace8cc	Slight tweak to printing again	2025-09-11 11:47:07 -04:00
Matt Nadareski	526a02b8b6	Slight tweak to printing again	2025-09-11 11:44:58 -04:00
Matt Nadareski	658c7a1c3b	Add another safeguard?	2025-09-11 11:10:11 -04:00
Matt Nadareski	af84474795	Fix invalid base relocation table parsing	2025-09-11 10:58:15 -04:00
Matt Nadareski	42913c6732	Invalid export should be null, not empty	2025-09-11 10:49:01 -04:00
Matt Nadareski	2cdf544518	Fix an oddly-reading format	2025-09-11 10:45:17 -04:00
Matt Nadareski	652ec58238	Fix certificate table info printing	2025-09-11 10:41:09 -04:00
Matt Nadareski	f8531daa5c	Ensure overlay accounts for certificates properly	2025-09-11 10:40:09 -04:00
Matt Nadareski	e9e89b0b43	This has been consistently wrong	2025-09-11 10:33:10 -04:00
Matt Nadareski	55e788a894	Ignore invalid certificate entries	2025-09-11 10:21:51 -04:00
Matt Nadareski	b28bb93ccb	Handle non-section data with valid RVA	2025-09-11 10:11:05 -04:00
Matt Nadareski	367aab0f83	Add placeholder for figuring something out later	2025-09-11 09:59:42 -04:00
Matt Nadareski	9dcf3b9e0a	The offset needs to be passed all the way	2025-09-11 09:42:48 -04:00
Matt Nadareski	3c514110ce	The offset needs to be passed fully	2025-09-11 09:29:46 -04:00
Matt Nadareski	c9b0c2dace	Deliberately don't retain position	2025-09-11 09:27:56 -04:00
Matt Nadareski	d575b6977e	Correctly parse resource data	2025-09-11 09:21:31 -04:00
Matt Nadareski	a00e6a5e2d	Start cleaning up resource parsing more	2025-09-11 09:09:56 -04:00
Matt Nadareski	1b9ae83e8c	Don't pad most tables to aligned size	2025-09-11 08:35:49 -04:00
Matt Nadareski	8b91eb1caf	Bound the import and export tables	2025-09-11 08:33:59 -04:00
Matt Nadareski	2a6a7b5e9a	Pass in the correct data	2025-09-11 08:14:24 -04:00
Matt Nadareski	a85943866e	Start using table data only in already-bounded tables	2025-09-11 08:12:27 -04:00
Matt Nadareski	797fb519c1	Pass table data in, mostly unused	2025-09-11 07:49:17 -04:00
Matt Nadareski	3ba9d56363	Read table data directly	2025-09-11 07:44:28 -04:00
Matt Nadareski	04cd4e4056	Start wiring through size bounding on table reads	2025-09-11 07:41:17 -04:00
Matt Nadareski	348e170654	There	2025-09-10 21:54:10 -04:00
Matt Nadareski	f5a4ca6276	Finally figure out what I was doing	2025-09-10 21:37:05 -04:00
Matt Nadareski	672c010aa7	Fix a stupid issue	2025-09-10 21:04:09 -04:00
Matt Nadareski	2459d88951	Found the real issue	2025-09-10 20:46:32 -04:00
Matt Nadareski	350d1c8d31	I guess this can be null?	2025-09-10 20:29:26 -04:00
Matt Nadareski	98a3842a3e	Fixx off-by-one error	2025-09-10 20:26:17 -04:00
Matt Nadareski	b52a4469ee	Remove alignment, add TODO and comments	2025-09-10 11:21:34 -04:00
Matt Nadareski	e3143e21ba	Fix comment to be more accurate	2025-09-10 11:18:53 -04:00
Matt Nadareski	1bf2181fd3	Make check a little nicer	2025-09-09 18:56:50 -04:00
Matt Nadareski	1460635aab	Move hidden resources parsing to make method nicer	2025-09-09 18:52:35 -04:00
Matt Nadareski	935ec00c86	Notes about hidden resources	2025-09-09 17:15:25 -04:00
Matt Nadareski	473b6de09b	Slight cleanup	2025-09-09 16:42:50 -04:00
Matt Nadareski	ba75f2ac2c	Try to fix weird resource parsing	2025-09-09 14:54:54 -04:00
Matt Nadareski	a230b39fbc	Make relocation block parsing safer	2025-09-09 13:51:40 -04:00
Matt Nadareski	8e963ac62a	Fix a couple of potential logic bugs	2025-09-09 13:42:36 -04:00
Matt Nadareski	eaaa89847d	Rename to pex and nex for readability	2025-09-09 13:11:27 -04:00
Matt Nadareski	ef76166978	Clean up a few more PE things	2025-09-09 13:11:09 -04:00
Matt Nadareski	72912586a1	Clean up COFF symbol table parsing	2025-09-09 12:18:46 -04:00
Matt Nadareski	fb241a4036	Make things easier to read, add some helpers	2025-09-09 09:57:53 -04:00
Matt Nadareski	368c8b0533	Add section table note	2025-09-09 09:37:03 -04:00
Matt Nadareski	4010325e65	Make note from Models	2025-09-09 09:31:53 -04:00
Matt Nadareski	11dd75ad95	Make import table easier to read	2025-09-08 23:21:45 -04:00