From 4faaf0682e80fde0585530bc1eba80e68bd5c490 Mon Sep 17 00:00:00 2001 From: Dobin Date: Tue, 27 Dec 2022 08:37:38 +0100 Subject: [PATCH] doc: notes --- notes.txt | 70 +++++++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 70 insertions(+) diff --git a/notes.txt b/notes.txt index 50c399b..d22998e 100644 --- a/notes.txt +++ b/notes.txt @@ -644,3 +644,73 @@ def processProject(vbaParser, disasmOnly=False, verbose=False, output_file=sys.s result = pcodeDump(moduleData, vbaProjectData, dirData, identifiers, is64bit, disasmOnly, verbose, output_file=output_file) +----+------+-------+----------------------+-----+-----+-----+--------+------ +id |Status|Type |Name |Left |Right|Child|1st Sect|Size +----+------+-------+----------------------+-----+-----+-----+--------+------ +0 ||Root |Root Entry |- |- |13 |3 |9088 +1 ||Storage|VBA |- |- |4 |0 |0 +2 ||Stream |ThisDocument |- |8 |- |0 |1127 +3 ||Stream |__SRP_2 |11 |- |- |12 |356 +4 ||Stream |__SRP_3 |10 |5 |- |18 |106 +5 ||Stream |NewMacros |6 |2 |- |1A |1253 +6 ||Stream |__SRP_5 |7 |- |- |2E |169 +7 ||Stream |__SRP_4 |- |- |- |31 |156 +8 ||Stream |_VBA_PROJECT |- |- |- |34 |2564 +9 ||Stream |dir |- |- |- |5D |570 +10 ||Stream |__SRP_0 |9 |3 |- |66 |1746 +11 ||Stream |__SRP_1 |- |- |- |82 |186 +12 ||Stream |PROJECTwm |- |- |- |85 |71 +13 ||Stream |PROJECT |1 |12 |- |87 |405 +14 |unused|Empty | |- |- |- |0 |0 +15 |unused|Empty | |- |- |- |0 |0 + +----+----------------------------+------+-------------------------------------- +id |Name |Size |CLSID +----+----------------------------+------+-------------------------------------- +0 |Root Entry |- | +13 |PROJECT |405 | +12 |PROJECTwm |71 | +1 |VBA |- | +5 | NewMacros |1253 | +2 | ThisDocument |1127 | +8 | _VBA_PROJECT |2564 | +10 | __SRP_0 |1746 | +11 | __SRP_1 |186 | +3 | __SRP_2 |356 | +4 | __SRP_3 |106 | +7 | __SRP_4 |156 | +6 | __SRP_5 |169 | +9 | dir |570 | + + +FAT: ++--------+------------+--------+--------+ +|Sector #|Type |Offset |Next # | ++--------+------------+--------+--------+ +| 0|FAT Sector |00000200|FFFFFFFD| +| 1| |00000400| 6| +| 2| |00000600| 14| +| 3| |00000800| 4| in file: 0x800 = +0 +| 4| |00000A00| 5| +| 5| |00000C00| 7| +| 6| |00000E00| B| +| 7| |00001000| 8| in file: 0x1080 = +1664 +| 8| |00001200| 9| +| 9| |00001400| A| +| A| |00001600| C| +| B| |00001800| 17| +| C| |00001A00| D| +| D| |00001C00| E| +| E| |00001E00| F| +| F| |00002000| 10| +| 10| |00002200| 11| +| 11| |00002400| 12| +| 12| |00002600| 13| +| 13| |00002800| 15| +| 14|End of Chain|00002A00|FFFFFFFE| +| 15| |00002C00| 16| +| 16| |00002E00| 18| +| 17|End of Chain|00003000|FFFFFFFE| +| 18|End of Chain|00003200|FFFFFFFE| ++--------+------------+--------+--------+ +