mirror of
https://github.com/youssefnoob003/SindriKit
synced 2026-07-07 21:57:09 +00:00
sibouzitoun
aea2eb6cfb
- Implement complete cross-process injection engine via snd_inj_ctx_t - Track explicit remote_entry_point for safe thread hijacking and PE execution - Refactor standalone syscall resolvers into a unified pipeline (scan/sort) - Perfect status code system by purging generic fallbacks in favor of highly-specific, domain-aware error codes - Fix minor pointer validation and parsing bugs in the reflective loader
1.3 KiB
1.3 KiB
PE Parser
In-memory Portable Executable parsing. Public headers under include/sindri/parsers/pe/, aggregated by include/sindri/parsers/pe.h.
Header map
| Header | Role |
|---|---|
parser.h |
snd_pe_parse, snd_pe_parser_t, bootstrap constants |
utils.h |
RVA translation, data directories, entry point, TLS, architecture check |
exports.h |
EAT resolution (name, hash, ordinal, forwarders) |
imports.h |
Import descriptor walk and IAT patching |
relocations.h |
Base relocation application |
section_utils.h |
Internal section helpers (loader engine use) |
Source map
| Source | Implements |
|---|---|
src/parsers/pe/parser.c |
snd_pe_parse |
src/parsers/pe/utils.c |
RVA, directories, TLS, entry point |
src/parsers/pe/exports.c |
Unified export resolver |
src/parsers/pe/imports.c |
Import resolution |
src/parsers/pe/relocations.c |
Relocation patching |
src/parsers/pe/section_utils.c |
Section helpers |
Table of Contents
- techniques.md — PE format, bounds model, export/import/reloc mechanics
- api_reference.md — full public PE API
Related documentation
- Parsers domain
- Env parser — PEB walking for forwarders and
snd_mod_nt