build_pe Namespace Reference

Variables
	pe_object = PE()
string	payload = b"\xc3"
	s_text
	AddressOfEntryPoint
list	new_dll
	s_myimp = pe_object.SHList.add_section(name="myimp", rawsize=0x1000)

Variable Documentation

AddressOfEntryPoint

build_pe.AddressOfEntryPoint

new_dll

list build_pe.new_dll

Initial value:

=  [
    ({"name": "kernel32.dll",
      "firstthunk": s_text.addr + 0x100},
     ["CreateFileA", "SetFilePointer", "WriteFile", "CloseHandle"]
    ),
    ({"name": "USER32.dll",
      "firstthunk": None},
     ["SetDlgItemInt", "GetMenu", "HideCaret"]
    )
]

payload

string build_pe.payload = b"\xc3"

pe_object

build_pe.pe_object = PE()

s_myimp

build_pe.s_myimp = pe_object.SHList.add_section(name="myimp", rawsize=0x1000)

s_text

build_pe.s_text

Initial value:

=  pe_object.SHList.add_section(
    name="text", addr=0x1000, rawsize=0x1000, data=payload
)