1
简介
2
3
idapython脚本编写
import ida_xref
import ida_idc
import wingdbstub
wingdbstub.Ensure()
def ListXref(FuncAddr):
index = 0
for xref in XrefsTo(FuncAddr, 0):
FuncArg = find_function_arg(xref.frm)
FormatStr = '%02d, 0x%08X calls sub_800D40C(0x%02X)' % (index, xref.frm, FuncArg)
print(FormatStr)
index += 1
def find_function_arg(addr):
for i in range(20):
addr = PrevHead(addr)
if GetMnem(addr) == "MOVS" and "R0" in GetOpnd(addr, 0):
FuncArg = GetOpnd(addr, 1)
return int(FuncArg[1:],16)
return ""
if __name__=='__main__':
print('List the Xref to sub_800D40C')
ListXref(0x800D40C)
print('List end')
4
小结
作者:Yimi Hu & Light @ PwnMonkeyLabs
原文始发于微信公众号(胖猴实验室):【胖猴小玩闹】智能门锁与BLE设备安全番外 1:idapython编写和调试
- 左青龙
- 微信扫一扫
- 右白虎
- 微信扫一扫
评论