From 639abbe623a5d04d173495f29aff698e80577d8a Mon Sep 17 00:00:00 2001 From: Ajax Date: Thu, 9 May 2019 10:40:26 +0200 Subject: Example: rename elfesteem -> loader --- example/loader/test_pe.py | 31 +++++++++++++++++++++++++++++++ 1 file changed, 31 insertions(+) create mode 100644 example/loader/test_pe.py (limited to 'example/loader/test_pe.py') diff --git a/example/loader/test_pe.py b/example/loader/test_pe.py new file mode 100644 index 00000000..543cbea5 --- /dev/null +++ b/example/loader/test_pe.py @@ -0,0 +1,31 @@ +#! /usr/bin/env python + +import miasm.loader.pe as pe +from miasm.loader.pe_init import PE +import rlcompleter +import readline +import pdb +import sys +from pprint import pprint as pp +readline.parse_and_bind("tab: complete") + + +e_ = PE() +mysh = b"\xc3" +s_text = e_.SHList.add_section( + name="text", addr=0x1000, rawsize=0x1000, data=mysh) +e_.Opthdr.AddressOfEntryPoint = s_text.addr +new_dll = [({"name": "kernel32.dll", + "firstthunk": s_text.addr + 0x100}, + ["CreateFileA", "SetFilePointer", "WriteFile", "CloseHandle"] + ), + ({"name": "USER32.dll", + "firstthunk": None}, + ["SetDlgItemInt", "GetMenu", "HideCaret"] + ) + ] +e_.DirImport.add_dlldesc(new_dll) + +s_myimp = e_.SHList.add_section(name="myimp", rawsize=0x1000) +e_.DirImport.set_rva(s_myimp.addr) +open('uu.bin', 'wb').write(bytes(e_)) -- cgit 1.4.1