Skip to content

Commit

Permalink
Update Documentation
Browse files Browse the repository at this point in the history
  • Loading branch information
Arker123 committed Jun 26, 2024
1 parent 606d01a commit 3fdef6c
Showing 1 changed file with 2 additions and 3 deletions.
5 changes: 2 additions & 3 deletions floss/language/utils.py
Original file line number Diff line number Diff line change
Expand Up @@ -475,8 +475,7 @@ def get_struct_string_candidates(pe: pefile.PE) -> Iterable[StructString]:

def get_raw_xrefs_rdata_i386(pe: pefile.PE, buf: bytes) -> Iterable[VA]:
"""
scan for raw xrefs in .rdata section.
raw xrefs are 32-bit absolute addresses to strings in .rdata section (i386).
scan for raw xrefs that are 32-bit absolute addresses in the PE file (i386).
They are not encoded as struct String instances.
example:
Expand All @@ -488,7 +487,7 @@ def get_raw_xrefs_rdata_i386(pe: pefile.PE, buf: bytes) -> Iterable[VA]:
From the disassembly, they are called as follows:
.text:00498E56 push ds:off_4D61E0[ecx*4]
The above are not struct String instances, but are references to strings in .rdata section.
The above are not struct String instances, but are references to strings in the PE file.
They can be used to divide the string blobs into smaller chunks.
"""
format = "I"
Expand Down

0 comments on commit 3fdef6c

Please sign in to comment.