Commit Graph

11 Commits

Author SHA1 Message Date
Michał Lach
c087d0008c Implemented basic Thumb2 PE files recognition
Documented ARM32 Windows syscall invoking convention. Still not
understanding how to properly parse the immediate values encoded in
movs. MSVC uses a different mov instruction for some of the functions
for some reason. Normal mov in Thumb2 takes a 12-bit imm, movw takes
full 16-bit imm. The weird thing is that immediates in those functions
that differ don't exceed the boundaries of the normal 12-bit mov. This
just seems like a shit codegen.
2022-08-10 12:45:42 +02:00
Michał Lach
60128be34d replaced regex crate with stdlib functions for string searching
Pulling an additional crate for finding syscall functions was definitely
unnecessary. Now we use a few conditionals to make sure we are getting
the correct functions with a slight speedup.
2022-08-09 16:45:49 +02:00
e35a219168 added alpha, itanium and ppc support 2022-07-25 22:45:43 +02:00
6659dedb3e documented source
this is likely to be the last commit, the tool is mostly finished.
2022-01-05 00:46:05 +01:00
04de49e108 added support for old x86 syscall format 2022-01-05 00:46:05 +01:00
7849d5fcb3 implemented parsing AArch64 and MIPS R4000 syscalls 2022-01-05 00:46:05 +01:00
453b61e481 print likely erroneus syscall numbers 2022-01-05 00:46:05 +01:00
7aeba126a6 bugfix 2022-01-05 00:46:05 +01:00
0a590085d8 final revision 2022-01-05 00:46:05 +01:00
1c83c584b6 complete implementation 2022-01-05 00:46:05 +01:00
caa48ad578 basic, unfinished pe parser implementation 2022-01-05 00:45:58 +01:00