当前位置: 首页>>代码示例>>Python>>正文


Python idaapi.get_import_module_qty方法代码示例

本文整理汇总了Python中idaapi.get_import_module_qty方法的典型用法代码示例。如果您正苦于以下问题:Python idaapi.get_import_module_qty方法的具体用法?Python idaapi.get_import_module_qty怎么用?Python idaapi.get_import_module_qty使用的例子?那么, 这里精选的方法代码示例或许可以为您提供帮助。您也可以进一步了解该方法所在idaapi的用法示例。


在下文中一共展示了idaapi.get_import_module_qty方法的9个代码示例,这些例子默认根据受欢迎程度排序。您可以为喜欢或者感觉有用的代码点赞,您的评价将有助于系统推荐出更棒的Python代码示例。

示例1: driver_type

# 需要导入模块: import idaapi [as 别名]
# 或者: from idaapi import get_import_module_qty [as 别名]
def driver_type():

    implist = idaapi.get_import_module_qty()

    for i in range(0, implist):
        name = idaapi.get_import_module_name(i)
        idaapi.enum_import_names(i, cb)
    for name in names:
        if name == "FltRegisterFilter":
            return "Mini-Filter"
        elif name == "WdfVersionBind":
            return "WDF"
        elif name == "StreamClassRegisterMinidriver":
            return "Stream Minidriver"
        elif name == "KsCreateFilterFactory":
            return "AVStream"
        elif name == "PcRegisterSubdevice":
            return "PortCls"
    return "WDM" 
开发者ID:FSecureLABS,项目名称:win_driver_plugin,代码行数:21,代码来源:device_type.py

示例2: get_iat_data

# 需要导入模块: import idaapi [as 别名]
# 或者: from idaapi import get_import_module_qty [as 别名]
def get_iat_data(self):
        """
        Retrive data from IAT
        """
        imp_num = idaapi.get_import_module_qty()  # Number of imported modules

        for i in xrange(0,imp_num):
            name = idaapi.get_import_module_name(i).lower()
            if not name:
                #self.logger.error("Failed to get import module name for #%d", i)
                continue

            if not name in self.iat:
                self.iat[name]= []

            self.current_module = self.iat[name]
            idaapi.enum_import_names(i, self.imp_cb) 
开发者ID:ynvb,项目名称:DIE,代码行数:19,代码来源:DbgImports.py

示例3: _build_imports

# 需要导入模块: import idaapi [as 别名]
# 或者: from idaapi import get_import_module_qty [as 别名]
def _build_imports(self):
        '''Build imports table. (Was taken from examples.)'''

        tree = {}
        nimps = idaapi.get_import_module_qty()

        for i in xrange(0, nimps):
            name = idaapi.get_import_module_name(i)
            if not name:
                continue
            # Create a list for imported names
            self.tmp_items = []

            # Enum imported entries in this module
            idaapi.enum_import_names(i, self._imports_names_cb)

            if name not in tree:
                tree[name] = []
            tree[name].extend(self.tmp_items)

        return tree 
开发者ID:ax330d,项目名称:hrdev,代码行数:23,代码来源:__init__.py

示例4: compute_imports

# 需要导入模块: import idaapi [as 别名]
# 或者: from idaapi import get_import_module_qty [as 别名]
def compute_imports():
        imports = {}
        current = ""

        def callback(ea, name, ordinal):
            imports[current].append((ea, name, ordinal))
            return True

        nimps = idaapi.get_import_module_qty()
        for i in xrange(0, nimps):
            current = idaapi.get_import_module_name(i)
            imports[current] = []
            idaapi.enum_import_names(i, callback)
        return imports 
开发者ID:RobinDavid,项目名称:idasec,代码行数:16,代码来源:idasec_core.py

示例5: getImportTableData

# 需要导入模块: import idaapi [as 别名]
# 或者: from idaapi import get_import_module_qty [as 别名]
def getImportTableData(self):
        """
        Update rt_import_table with current import table data.
        """

        def imp_cb(ea, name, ord):
            """
            Import enumeration callback function. used by idaapi.enum_import_names .
            """
            tmpImports.append([self.current_module_name, ea, name, ord])
            return True

        tmpImports = []  # Contains static import table data (w\o real function addresses)
        imp_num = idaapi.get_import_module_qty()  # Number of imported modules

        for i in xrange(0, imp_num):
            self.current_module_name = idaapi.get_import_module_name(i).lower()
            idaapi.enum_import_names(i, imp_cb)

        #  Get runtime function addresses and store in self.rt_import_table
        if not idaapi.is_debugger_on():
            raise RuntimeError("Debugger is not currently active.")

        for module_name, ea, name, ord in tmpImports:
            func_real_adrs = get_adrs_mem(ea)
            self.rt_import_table[func_real_adrs] = (module_name, ea, name, ord) 
开发者ID:ynvb,项目名称:DIE,代码行数:28,代码来源:DbgImports.py

示例6: get_imports

# 需要导入模块: import idaapi [as 别名]
# 或者: from idaapi import get_import_module_qty [as 别名]
def get_imports():
        for i in xrange(0, idaapi.get_import_module_qty()):
            name = idaapi.get_import_module_name(i)
            if name:
                yield name 
开发者ID:tintinweb,项目名称:ida-batch_decompile,代码行数:7,代码来源:ida_batch_decompile.py

示例7: getApiMap

# 需要导入模块: import idaapi [as 别名]
# 或者: from idaapi import get_import_module_qty [as 别名]
def getApiMap(self):
        self._api_map = {}
        num_imports = ida_nalt.get_import_module_qty()
        for i in range(0, num_imports):
            self._import_module_name = ida_nalt.get_import_module_name(i)
            ida_nalt.enum_import_names(i, self._cbEnumImports)
        return self._api_map 
开发者ID:danielplohmann,项目名称:smda,代码行数:9,代码来源:IdaInterface.py

示例8: get_imports

# 需要导入模块: import idaapi [as 别名]
# 或者: from idaapi import get_import_module_qty [as 别名]
def get_imports(library_calls, library_addr):
    """ Populate dictionaries with import information. """
    import_names_callback = make_import_names_callback(library_calls,
                                                       library_addr)
    for i in xrange(0, idaapi.get_import_module_qty()):
        idaapi.enum_import_names(i, import_names_callback) 
开发者ID:fireeye,项目名称:flare-ida,代码行数:8,代码来源:__init__.py

示例9: find_pool_tags

# 需要导入模块: import idaapi [as 别名]
# 或者: from idaapi import get_import_module_qty [as 别名]
def find_pool_tags():
	""" Dirty hack around IDA's type information, find references to tag using functions then the comment marking the tag 
	then add the function caller/tag to output dictionary.
	"""
	
	funcs = [
		'ExAllocatePoolWithTag',
		'ExFreePoolWithTag',
		'ExAllocatePoolWithTagPriority'
	]

	tags = {}

	def imp_cb(ea, name, ord):
		if name in funcs:
			for xref in idautils.XrefsTo(ea):
				call_addr = xref.frm
				caller_name = idc.GetFunctionName(call_addr)
				prev = idc.PrevHead(call_addr)
				for _ in range(10):
					if idc.Comment(prev) == 'Tag' and idc.GetOpType(prev, 1) == 5:
						tag_raw = idc.GetOperandValue(prev, 1)
						tag = ''
						for i in range(3, -1, -1):
							tag += chr((tag_raw >> 8 * i) & 0xFF)
						if tag in tags.keys():
							tags[tag].add(caller_name)
						else:
							tags[tag] = set([caller_name])
						break
					prev = idc.PrevHead(prev)
		return True
	
	nimps = idaapi.get_import_module_qty()

	for i in xrange(0, nimps):
		name = idaapi.get_import_module_name(i)
		if not name:
			continue

		idaapi.enum_import_names(i, imp_cb)
	return tags 
开发者ID:FSecureLABS,项目名称:win_driver_plugin,代码行数:44,代码来源:dump_pool_tags.py


注:本文中的idaapi.get_import_module_qty方法示例由纯净天空整理自Github/MSDocs等开源代码及文档管理平台,相关代码片段筛选自各路编程大神贡献的开源项目,源码版权归原作者所有,传播和使用请参考对应项目的License;未经允许,请勿转载。