From 5c6b3d0c002cbdf5665cc90aed43e0687cfc1672 Mon Sep 17 00:00:00 2001 From: Ajax Date: Mon, 9 Nov 2015 13:35:23 +0100 Subject: Example/UnpackUPX: PR #256 comments (creds @p-l-, @fmonjalet) --- example/jitter/unpack_upx.py | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) (limited to 'example') diff --git a/example/jitter/unpack_upx.py b/example/jitter/unpack_upx.py index 09bd801e..eb03209b 100644 --- a/example/jitter/unpack_upx.py +++ b/example/jitter/unpack_upx.py @@ -13,10 +13,10 @@ if filename and os.path.isfile(filename): # User defined methods def kernel32_GetProcAddress(jitter): - """Hook on GetProcAddress to note where UPX store imports pointer""" + """Hook on GetProcAddress to note where UPX stores import pointers""" ret_ad, args = jitter.func_args_stdcall(["libbase", "fname"]) - # When the function is called, EBX is a pointer on the destination buffer + # When the function is called, EBX is a pointer to the destination buffer dst_ad = jitter.cpu.EBX logging.info('EBX ' + hex(dst_ad)) @@ -28,7 +28,7 @@ def kernel32_GetProcAddress(jitter): # Get the generated address of the library, and store it in memory to dst_ad ad = sb.libs.lib_get_add_func(args.libbase, fname, dst_ad) # Add a breakpoint in case of a call on the resolved function - # NOTE: never append in UPX, just for skeleton + # NOTE: never happens in UPX, just for skeleton jitter.handle_function(ad) jitter.func_ret_stdcall(ret_ad, ad) -- cgit 1.4.1