This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
### Keybase proof | |
I hereby claim: | |
* I am udgover on github. | |
* I am udgover (https://keybase.io/udgover) on keybase. | |
* I have a public key ASAKRK3L9kp37lPEU6GPOaDhetnLfSJz3Yb_kU5Ek-065Qo | |
To claim this, I am signing this object: |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
import libarchive.public | |
import libarchive.constants | |
import libarchive.adapters.archive_read | |
import hashlib | |
import os | |
import shutil | |
# from https://stackoverflow.com/a/1094933 | |
def sizeof_fmt(num, suffix='B'): |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
class Win10Tcpip(obj.ProfileModification): | |
before = ['Win8Tcpip'] | |
conditions = {'os': lambda x: x == 'windows', | |
'memory_model': lambda x: x == '32bit', | |
'major': lambda x : x == 6, | |
'minor': lambda x : x >= 4} | |
def modification(self, profile): | |
profile.merge_overlay({ | |
'_ADDRINFO' : [ None, { | |
'Local' : [ 0x0, ['pointer', ['_LOCAL_ADDRESS']]], |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
from dff.api.types.libtypes import Parameter, Argument, typeId, Variant, VMap, VList | |
from dff.api.module.module import Module | |
from dff.api.module.script import Script | |
from dff.api.events.libevents import EventHandler | |
from dff.api.filters.libfilters import Filter | |
from dff.api.vfs.libvfs import ABSOLUTE_ATTR_NAME | |
class DemoExport(Script, EventHandler): | |
def __init__(self): |