hasherezade / libpeconv

A library to load, manipulate, dump PE files. See also: https://github.com/hasherezade/libpeconv_tpl
https://hasherezade.github.io/libpeconv
BSD 2-Clause "Simplified" License
1.07k stars 176 forks source link

pe_unmapper Drag & Drop menu bat wrapper #26

Open qwertzy-antonio-godinho opened 3 years ago

qwertzy-antonio-godinho commented 3 years ago

Hi, not sure if you'd consider this something useful, this short batch script allows a user to drag & drop a file calling pe_unmapper.exe and presents a simple menu from where the type of unmapping to be applied can be selected, the unmapped file is then saved on the user's desktop:

`@echo off for /f "tokens=2 delims==" %%a in ('wmic OS Get localdatetime /value') do set "dt=%%a" set "YY=%dt:~2,2%" & set "YYYY=%dt:~0,4%" & set "MM=%dt:~4,2%" & set "DD=%dt:~6,2%" set "HH=%dt:~8,2%" & set "Min=%dt:~10,2%" & set "Sec=%dt:~12,2%"

set "fullstamp=%YYYY%%MM%%DD%%HH%%Min%%Sec%"

echo File: "%~1" echo.

:start echo Options: echo -------- echo U : UNMAP (Virtual to Raw) echo M : MAP (Raw to Virtual) echo R : REALIGN (Virtual to Raw, where: Raw == Virtual) echo. set choice= set /p choice=Select your option [U, M, R]: if not "%choice%"=="" set choice=%choice:~0,1%

if "%choice%"=="U" goto main if "%choice%"=="M" goto main if "%choice%"=="R" goto main

echo "%choice%" is not valid, please try again. echo. goto start

:main echo. pe_unmapper.exe /in "%~1" /mode "%choice%" /out %USERPROFILE%\Desktop\%fullstamp%-peunmapper-mode%choice%-"%~n1".bin goto end

:end echo. pause

@echo on`

pe_unmapper