zadanie3.py

zadanie3.py

from unicorn import *
from unicorn.x86_const import *
import struct

 
def read(name):
    with open(name) as f:
        return f.read()
        
def u32(data): #zamien ciag 4 bajtow na liczbe w formacie little-endian
    return struct.unpack("I", data)[0]
    
def p32(num): #zamien liczbe w formacie little-endian na ciag 4 bajtow
    return struct.pack("I", num)

BASE = 0x08048000
STACK_ADDR = 0x0
STACK_SIZE = 1024*1024

mu = Uc (UC_ARCH_X86, UC_MODE_32)

mu.mem_map(BASE, 1024*1024)
mu.mem_map(STACK_ADDR, STACK_SIZE)

 
mu.mem_write(BASE, read("./function"))

r_esp = STACK_ADDR + (STACK_SIZE/2)

STRING_ADDR = 0x0
mu.mem_write(STRING_ADDR, "zegnam\x00")

mu.reg_write(UC_X86_REG_ESP, r_esp)
mu.mem_write(r_esp+4, p32(5))
mu.mem_write(r_esp+8, p32(STRING_ADDR))


mu.emu_start(0x08048464, 0x0804849A)
r_eax = mu.reg_read(UC_X86_REG_EAX)
print r_eax