stackscan.py 文件源码

def log_stack_addrs(stack_addrs):

    print len(stack_addrs)

    f = open("%s/%s" % (LOG_PATH, "stack_all"), "wb")

    for a in stack_addrs:
        #s = "[0x%08x] ret address 0x%08x to function %s" % (a, Dword(a), str(idc.GetFunctionName(Dword(a))))
        s = "[0x%08x] %s+0x%x" % (a, str(idc.GetFunctionName(Dword(a))), Dword(a) - idaapi.get_func(Dword(a)).startEA)
        f.write(s)
        f.write("\n")

    f.close()