IDA内可双击跳转的地址形式

Updates the counter for the element tag. Args: tag: String representing element tag.

Returns the attribute value string. Args: element: XML element object. attr: String containing the a

Returns true if the XML element contains the named attribute. Args: element: XML element object attr

Outputs the start of a new element on a new indented line. Args: tag: String representing the element tag

Outputs an attribute (name and value) for an element. Args: name: String representing attribute name.

Closes the start tag for an XML element. Args: has_contents: Boolean indicating if the element has s

Returns the numeric attribute value. Args: element: XML element object. attr: String containing the

Outputs a numeric value attribute (name and value) for an element. Args: name: String representing the attribute

Writes the element end tag to the XML file. Args: tag: String containing the element name. newline:

Outputs an address attribute for an element. Args: name: String representing attribute name. addr: I

Returns the address value for an element. Args: element: XML element object. attr: String containing

Displays the processing status in the IDA window. Args: tag: String representing XML element tag

Displays the elapsed CPU time since the start time. Args: start: Floating-point value representing start time in

从addr逐字节获取字符

启动回溯

Writes the buffer to the XML file. Args: buf: String containg data to write to XML file.

Exports the regular comment for an item. Args: cmt: String containing the regular comment.

Exports the repeatable comment for an item. Args: cmt: String containing the repeatable comment.

Exports a <COMMENT> element with ADDRESS and TYPE attributes. The comment is exported as the element text (parsed character data).

printf系列函数漏洞分析

str操作类函数漏洞分析

Returns the translated logical address. The logical address is adjusted for the segment base address. For 16-bit segmented me

Exports comment containing type information for data and functions. Args: cmt: String containing type info.

获取操作符并去除末尾的 ".W"

mem系列函数漏洞分析

scanf系列函数漏洞分析

system系列函数漏洞分析

Outputs the parsed character text for an element. The text is checked for special characters. Args: text

处理输入目录的主函数 do_file: analyse_file/open_file/exec_ida_python_script 中的一个

获取所有断点的地址列表

获取内存中的字符串

Returns the datatype of a structure member. Args: m: IDA member instance. Returns:

Returns the memory space name associated with an address. Args: addr: Integer representing a program address.

A glob.iglob that include dot files and hidden files https://gist.github.com/polyvertex/b6d337fec7011a0f9292

Outputs the tag and text for a comment element. Comment elements can be REGULAR_CMT, REPEATABLE_CMT, or TYPEINFO_CMT.

添加临时sink函数 info_only: 在添加函数信息的同时是否添加断点

Checks all characters in a string for special XML characters. Args: text: String to check for special XML charac

创建树节点

Outputs debug message if debug flag is enabled. Args: message: String containing the debug message.

深度优先搜索 node: 当前节点 reg: 回溯寄存器 blk: 当前基本块

Displays summary in IDA output window.

在地址列表上执行 find_item 或 find_item q: lambda/function: f(cfunc_t, citem_t) 返回布尔值 ea_list: 地址列表 query_full: False -> 仅搜索 cexpr_t

Exports pre- and post- comments for an address. Args: addr: Integer representing the instruction address.

Exports name for an address as a SYMBOL element. If the name is a demangled name, add the mangled name as the MANGLED attribute.

获取addr所在的基本块

Returns the flags bitmask for the datatype. Args: datatype: String representing the datatype. size:

Returns the symbol name for the address. Args: ea: Integer representing the symbol address.

Returns a datatype string based on the item flags. Args: flags: IDA item flags. Returns:

获取寄存器的值

Processes REGULAR_CMT and REPEATABLE_CMT elements for structures. Args: element: XML element object containing a

Creates a member for a structure. Args: member: MEMBER XML element. sptr: defer: boolea

Add data members to a structure. Args: element: STRUCTURE XML element containing MEMBER sub-elements.

判读是否是一个函数调用指令

Returns true if the datatype represents a pointer. Args: dtype: String representing the datatype.

返回任意名称的地址：function, label, global...

解析格式字符串 %[parameter][flags][field width][.precision][length]type

提取块拷贝指令（LDM/STM）涉及的寄存器 # TODO 有待改进

在地址列表上执行 exec_query，可打印结果 q: lambda/function: f(cfunc_t, citem_t) 返回布尔值 ea_list: 地址列表 query_full: False -> 仅搜索 cexpr_t Tr

获取变长参数函数的寄存器信息