Lyxica

Fix HLIL_CALL's showing a fake pointer (0xff00) instead of resolved import names

Oct 3rd, 2020
313
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
Python 0.34 KB | None | 0 0
  1. addr = 0x23174dbf000
  2. r = BinaryReader(bv)
  3. r.seek(addr)
  4. while addr <= 0x23174dbf2e8:
  5.     try:
  6.         name = bv.get_symbol_at(addr).name
  7.     except:
  8.         addr += 8
  9.         continue
  10.     target = r.read64()
  11.     if target == 0x0:
  12.         addr += 8
  13.         continue
  14.    
  15.     s = Symbol(SymbolType.LibraryFunctionSymbol, target, "_{0}".format(name))
  16.     bv.define_user_symbol(s)   
  17.     addr += 8
Advertisement
Add Comment
Please, Sign In to add comment