Skip to content

Commit

Permalink
update the DTD and syntax docs
Browse files Browse the repository at this point in the history
  • Loading branch information
myk002 committed Feb 7, 2024
1 parent 5feafa5 commit a753f9b
Show file tree
Hide file tree
Showing 2 changed files with 6 additions and 2 deletions.
7 changes: 5 additions & 2 deletions SYNTAX.rst
Original file line number Diff line number Diff line change
Expand Up @@ -643,7 +643,7 @@ The definition syntax is as follows::
<global-address name='...' [value='0x...']/>
...

<vtable-address name='...' [value='0x...']/>
<vtable-address name='...' [value='0x...'] [base='...']/>
...
</symbol-table>

Expand All @@ -659,7 +659,10 @@ in order to match several executables; this is especially useful with
MD5 hashes, which change with patching.

Global object addresses are specified with ``<global-address>`` tags.
Virtual method table addresses may be pre-initialized with ``<vtable-address>`` tags.
Virtual method table addresses may be pre-initialized with ``<vtable-address>``
tags. If a ``base`` attribute is specified, it must be the name of a loaded
library. That is, the filename without any path components. The ``value`` will
then be interpreted as an offset from the load address of that library.

It is allowed to specify addresses for objects and vtables that are otherwise
not defined. Obviously, such values can only be used by directly quering the
Expand Down
1 change: 1 addition & 0 deletions data-definition.xsd
Original file line number Diff line number Diff line change
Expand Up @@ -643,6 +643,7 @@
<xs:complexType name="VTableAddress">
<xs:attribute name="name" use="required" />
<xs:attribute name="value" />
<xs:attribute name="base" />
<xs:attribute name="mangled" />
<xs:attribute name="offset" />
</xs:complexType>
Expand Down

0 comments on commit a753f9b

Please sign in to comment.