search

erocarrera / pefile

pefile is a Python module to read and work with PE (Portable Executable) files
MIT License
1.88k stars 522 forks source link

Add parsing for IMAGE_DEBUG_TYPE_EX_DLLCHARACTERISTICS #365

Closed aursulis closed 3 months ago

aursulis commented 1 year ago

@erocarrera I've had a go at doing something for #303. This parses the IMAGE_DEBUG_TYPE_EX_DLLCHARACTERISTICS debug directory entry type according to what I've seen from self-built and Microsoft's own PE files. Their documentation at https://learn.microsoft.com/en-us/windows/win32/debug/pe-format#debug-type is a bit lacking so I've had to invent names for fields etc.

What this doesn't do is pretty print the flags from dump_info. I have another commit for that here: https://github.com/aursulis/pefile/commit/0ca80ed35d6034aa71a727287e24f3bc69203e72 however looking at the full output it is really out of place.

Let me know what you think.

erocarrera commented 3 months ago

This is great, thanks!