首页
社区
课程
招聘
[原创]IDA小插件:一键导出所有函数的伪代码,方便搜索分析
2022-11-4 12:43 23327

[原创]IDA小插件:一键导出所有函数的伪代码,方便搜索分析

2022-11-4 12:43
23327
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
# -*- coding:utf-8 -*-
import os
from idaapi import plugin_t
from idaapi import PLUGIN_PROC
from idaapi import PLUGIN_OK
import ida_nalt
import idaapi
import idautils
import idc
import time
 
 
# 获取SO文件名和路径
def getSoPathAndName():
    fullpath = ida_nalt.get_input_file_path()
    filepath,filename = os.path.split(fullpath)
    return filepath,filename
 
# 获取代码段的范围
def getSegAddr():
    textStart = []
    textEnd = []
 
    for seg in idautils.Segments():
        if (idc.get_segm_name(seg)).lower() == '.text' or (
        idc.get_segm_name(seg)).lower() == 'text':
            tempStart = idc.get_segm_start(seg)
            tempEnd = idc.get_segm_end(seg)
 
            textStart.append(tempStart)
            textEnd.append(tempEnd)
 
    return min(textStart), max(textEnd)
 
 
class traceNatives(plugin_t):
    flags = PLUGIN_PROC
    comment = "export_func_code"
    help = ""
    wanted_name = "export_func_code"
    wanted_hotkey = ""
 
    def init(self):
        print("export_func_code(v0.1) plugin has been loaded.")
        return PLUGIN_OK
 
    def run(self, arg):
        # 查找需要的函数
        ea, ed = getSegAddr()
        so_path, so_name = getSoPathAndName()
        script_name = so_name.split(".")[0] + "_" + str(int(time.time())) +".cc"
        save_path = os.path.join(so_path, script_name)
        print(f"导出路径:{save_path}")
        F=open(save_path, "w+", encoding="utf-8")
        F.write("\n#####################################\n")
        for func in idautils.Functions(ea, ed):
            try:
                functionName = str(idaapi.ida_funcs.get_func_name(func))
                if len(list(idautils.FuncItems(func))) > 10:
                    # 如果是thumb模式,地址+1
                    arm_or_thumb = idc.get_sreg(func, "T")
                    if arm_or_thumb:
                        func += 1
                    code=str(idaapi.decompile(func))+"\n#####################################\n"
                    print(code)
                    F.write(code)
                    F.flush()
            except Exception as e:
                print(e)
        print(f"导出完成:{save_path}")
        F.close()
 
    def term(self):
        pass
 
 
def PLUGIN_ENTRY():
    return traceNatives()

基于trace_natives插件修改完成,仓库地址:Humenger/export_func_code


[培训]《安卓高级研修班(网课)》月薪三万计划,掌握调试、分析还原ollvm、vmp的方法,定制art虚拟机自动化脱壳的方法

最后于 2022-11-4 13:01 被逆向涉猎编辑 ,原因:
收藏
点赞4
打赏
分享
最新回复 (4)
雪    币: 1407
活跃值: (3201)
能力值: ( LV3,RANK:30 )
在线值:
发帖
回帖
粉丝
方向感 2022-11-6 17:54
2
0
导出后能直接编译不?
雪    币: 12
活跃值: (20)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
paofu88 2023-6-8 09:35
3
0
这个不错
雪    币: 216
能力值: ( LV1,RANK:0 )
在线值:
发帖
回帖
粉丝
小木马 2023-6-8 09:56
4
0
ctrl+F5就能导出啊
雪    币: 477
活跃值: (1412)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
mb_foyotena 2023-6-8 18:36
5
0
有没有一键出可编译项目文件啊
游客
登录 | 注册 方可回帖
返回