Commit Graph

18 Commits

Author SHA1 Message Date
Michał Lach c087d0008c Implemented basic Thumb2 PE files recognition
Documented ARM32 Windows syscall invoking convention. Still not
understanding how to properly parse the immediate values encoded in
movs. MSVC uses a different mov instruction for some of the functions
for some reason. Normal mov in Thumb2 takes a 12-bit imm, movw takes
full 16-bit imm. The weird thing is that immediates in those functions
that differ don't exceed the boundaries of the normal 12-bit mov. This
just seems like a shit codegen.
2022-08-10 12:45:42 +02:00
Michał Lach 60128be34d replaced regex crate with stdlib functions for string searching
Pulling an additional crate for finding syscall functions was definitely
unnecessary. Now we use a few conditionals to make sure we are getting
the correct functions with a slight speedup.
2022-08-09 16:45:49 +02:00
Michał Lach 8b284aeeb6 regex: update to version 1.5.6 2022-07-25 22:46:02 +02:00
Michał Lach be71553e69 added license 2022-07-25 22:46:02 +02:00
cocateh e35a219168 added alpha, itanium and ppc support 2022-07-25 22:45:43 +02:00
cocateh 6659dedb3e documented source
this is likely to be the last commit, the tool is mostly finished.
2022-01-05 00:46:05 +01:00
cocateh 04de49e108 added support for old x86 syscall format 2022-01-05 00:46:05 +01:00
cocateh 3adc61fbab it now supports ARM!! 2022-01-05 00:46:05 +01:00
cocateh e43b41b64f Added limitations information 2022-01-05 00:46:05 +01:00
cocateh 7849d5fcb3 implemented parsing AArch64 and MIPS R4000 syscalls 2022-01-05 00:46:05 +01:00
cocateh 60fb7018df updated readme 2022-01-05 00:46:05 +01:00
cocateh 453b61e481 print likely erroneus syscall numbers 2022-01-05 00:46:05 +01:00
cocateh 7aeba126a6 bugfix 2022-01-05 00:46:05 +01:00
cocateh de41735568 readme typo 2022-01-05 00:46:05 +01:00
cocateh 3529a87458 added readme 2022-01-05 00:46:05 +01:00
cocateh 0a590085d8 final revision 2022-01-05 00:46:05 +01:00
cocateh 1c83c584b6 complete implementation 2022-01-05 00:46:05 +01:00
cocateh caa48ad578 basic, unfinished pe parser implementation 2022-01-05 00:45:58 +01:00