IDA python Use Notes

Pattern= ' E5 40 00 '
Addr=minea ()
For x in range (0,5):
ADDR=IDC. Findbinary (Addr,search_down,pattern)
If ADDR!=IDC. BADADDR:
Print hex (addr), IDC. Getdisasm (addr)

#搜寻制定的字符串

#将其保存到指定的脚步文件中.

3.1. Use of shortcut keys

• Run the Ida script file: (ALT-F7)
• Single-line execution Python (ctrl-f3)
• View existing Ida script files (alt+f9)

Script 2: Look for the address of the cross-reference that made the function and print the address.

from idaapi import *danger_funcs = ["IsProcessorFeaturePresent"]  # 需要寻找的函数名for func in danger_funcs:    addr = LocByName( func )     if addr != BADADDR:       #找到交叉引用的地址        cross_refs = CodeRefsTo( addr, 0 )        print "Cross References to %s" % func         print "-------------------------------"        for ref in cross_refs:             print "%08x" % ref

IDA python Use Notes