diff options
| author | Pierre LALET <pierre.lalet@cea.fr> | 2019-02-27 20:29:44 +0100 |
|---|---|---|
| committer | Fabrice Desclaux <fabrice.desclaux@cea.fr> | 2019-03-05 16:52:51 +0100 |
| commit | d3a42fa5dcdb0c467586eb6b92271fa4dbeb648b (patch) | |
| tree | b5ca14f60ad2a10148990ffc30e4bad8f49c9283 /example/elfesteem/test_pe.py | |
| parent | 944806c506446c918eb74c17a605f5f56d4b75e0 (diff) | |
| download | miasm-d3a42fa5dcdb0c467586eb6b92271fa4dbeb648b.tar.gz miasm-d3a42fa5dcdb0c467586eb6b92271fa4dbeb648b.zip | |
Include elfesteem fork in miasm
Diffstat (limited to 'example/elfesteem/test_pe.py')
| -rw-r--r-- | example/elfesteem/test_pe.py | 31 |
1 files changed, 31 insertions, 0 deletions
diff --git a/example/elfesteem/test_pe.py b/example/elfesteem/test_pe.py new file mode 100644 index 00000000..e9cff0b4 --- /dev/null +++ b/example/elfesteem/test_pe.py @@ -0,0 +1,31 @@ +#! /usr/bin/env python + +import miasm.elfesteem.pe as pe +from miasm.elfesteem.pe_init import PE +import rlcompleter +import readline +import pdb +import sys +from pprint import pprint as pp +readline.parse_and_bind("tab: complete") + + +e_ = PE() +mysh = b"\xc3" +s_text = e_.SHList.add_section( + name="text", addr=0x1000, rawsize=0x1000, data=mysh) +e_.Opthdr.AddressOfEntryPoint = s_text.addr +new_dll = [({"name": "kernel32.dll", + "firstthunk": s_text.addr + 0x100}, + ["CreateFileA", "SetFilePointer", "WriteFile", "CloseHandle"] + ), + ({"name": "USER32.dll", + "firstthunk": None}, + ["SetDlgItemInt", "GetMenu", "HideCaret"] + ) + ] +e_.DirImport.add_dlldesc(new_dll) + +s_myimp = e_.SHList.add_section(name="myimp", rawsize=0x1000) +e_.DirImport.set_rva(s_myimp.addr) +open('uu.bin', 'wb').write(bytes(e_)) |