Lyxica

Fix block of data symbol names

Oct 3rd, 2020 (edited)
245
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
Python 1.84 KB | None | 0 0
  1. names = ["GetModuleHandleA", "lstrlenW", "TlsSetValue", "TlsGetValue", "CreateProcessW", "GetProcessId", "CreateProcessA", "Sleep", "GetLastError", "SetLastError", "lstrcatW", "RtlEnterCriticalSection", "OpenEventW", "HeapDestroy", "RtlLeaveCriticalSection", "ResetEvent", "HeapCreate", "WaitForSingleObject", "CloseHandle", "SetEvent", "lstrcpyW", "RtlRemoveVectoredExceptionHandler", "CreateMutexW", "RtlAddVectoredExceptionHandler", "CreateEventW", "RtlExitUserThread", "GetProcAddress", "lstrcpyA", "SleepEx", "lstrcmp", "lstrlen", "RtlInitializeCriticalSection", "GetModuleHandleExW", "GetCurrentThreadId", "VirtualFree", "ReadFile", "CancelIo", "GetOverlappedResult", "WaitNamedPipeW", "WriteFile", "CreateEventA", "GetModuleFileNameW", "lstrcmpiA", "GetSystemTimeAsFileTime", "LoadLibraryA", "SetThreadContext", "CreateThread", "GetThreadContext", "WaitForMultipleObjects", "ProcessIdToSessionId", "GetCurrentProcessId", "RtlReAllocateHeap", "HeapFree", "RtlAllocateHeap", "SetFilePointer", "ResumeThread", "CheckRemoteDebuggerPresent", "TlsAlloc", "OpenProcess", None, "NtOpenKey", "ZwCreateKey", "ZwDeleteValueKey", "ZwSetValueKey", "ZwQueryValueKey", "RtlCopyMemory", "memcmp",
  2.  
  3. "mbstowcs", "NtQueryInformationToken", "ZwOpenProcessToken", "RtlImageNtHeader", "wcstombs", "_strupr", "_wcsupr", "ZwQueryVirtualMemory", "ZwProtectVirtualMemory", "ZwAllocateVirtualMemory", "memset", "ZwOpenFile", "ZwUnmapViewOfSection", "ZwSetInformationProcess", "ZwQueryInformationProcess", "NtOpenSection", "NtQuerySection", "ZwMapViewOfSection", "RtlNtStatusToDosError", "_snwprintf", "strchr", "LdrFindEntryForAddress", "wcsrchr", "NtClose", "RtlInitUnicodeString", "RtlCopyMemory", "__C_specific_handler"]
  4. addr = 0x23174cef000
  5.  
  6. for i, name in enumerate(names):
  7.     if name == None:
  8.         continue
  9.     s = Symbol(SymbolType.DataSymbol, addr + (i * 8), name)
  10.     bv.define_user_symbol(s)
  11.    
Add Comment
Please, Sign In to add comment