pefile and LOAD_CONFIG
 Ero Carrera (ero) <ero carrera gmailcom> |
Friday, January 23 2009 01:58.00 CST |
Following a conversation in twitter Ive noticed pefile was lacking support for parsing one data directory in the PE format that is rather interesting, the IMAGE_LOAD_CONFIG_DIRECTORY.
Ive added support for it and fixed a few small bugs and released it as pefile-1.2.10-60
Now one can access this structures fields like, for instance, pe.DIRECTORY_ENTRY_LOAD_CONFIG.struct.SecurityCookie or pe.DIRECTORY_ENTRY_LOAD_CONFIG.struct.SEHandlerTable and also modify their values and write the result to a new PE file, all the usual handling & mangling that pefile allows.
Comments
| Posted: Wednesday, December 31 1969 18:00.00 CST | |