miasm
Reverse engineering framework
|
Variables | |
minidump = Minidump(open(sys.argv[1], 'rb').read()) | |
pe = PE() | |
name = str(memory.name) | |
protect = memory.pretty_protect | |
int | protect_mask = 0x20 |
addr | |
address | |
rawsize | |
data | |
content | |
flags | |
entry_point = minidump.threads.Threads[0].ThreadContext.Eip[0] | |
AddressOfEntryPoint | |
Minidump to PE example
minidump_to_pe.addr |
minidump_to_pe.address |
minidump_to_pe.AddressOfEntryPoint |
minidump_to_pe.content |
minidump_to_pe.data |
minidump_to_pe.entry_point = minidump.threads.Threads[0].ThreadContext.Eip[0] |
minidump_to_pe.flags |
minidump_to_pe.minidump = Minidump(open(sys.argv[1], 'rb').read()) |
string minidump_to_pe.name = str(memory.name) |
minidump_to_pe.pe = PE() |
minidump_to_pe.protect = memory.pretty_protect |
int minidump_to_pe.protect_mask = 0x20 |
minidump_to_pe.rawsize |