def find_functions():
'''
yields all functions in the form a 2-tuple:
(function_address, function_name)
function_address is a RELATIVE offset from the
image base.
'''
# get image base from IDA
image_base = idaapi.get_imagebase()
# iterate through all functions in the executable.
for func_ea in Functions(MinEA(), MaxEA()):
# craft the routine record
func_name = GetFunctionName(func_ea)
funcaddr = func_ea - image_base
yield funcaddr, func_name
评论列表
文章目录