Compare commits
3 commits
a93a2fc63a
...
b5afe0e2a5
Author | SHA1 | Date | |
---|---|---|---|
b5afe0e2a5 | |||
685e0b9e53 | |||
d8f4339d7b |
1 changed files with 58 additions and 0 deletions
58
tools/ghidra_scripts/callbacks_to_md.py
Normal file
58
tools/ghidra_scripts/callbacks_to_md.py
Normal file
|
@ -0,0 +1,58 @@
|
||||||
|
from ghidra.app.decompiler import DecompileOptions
|
||||||
|
from ghidra.app.decompiler import DecompInterface
|
||||||
|
from ghidra.util.task import ConsoleTaskMonitor
|
||||||
|
|
||||||
|
TARGET_FUNC = "add_callback"
|
||||||
|
|
||||||
|
def xref_params(target_func):
|
||||||
|
target_addr = 0
|
||||||
|
callers = []
|
||||||
|
funcs = getGlobalFunctions(target_func)
|
||||||
|
for func in funcs:
|
||||||
|
if func.getName() == target_func:
|
||||||
|
target_addr = func.getEntryPoint()
|
||||||
|
references = getReferencesTo(target_addr)
|
||||||
|
for xref in references:
|
||||||
|
call_addr = xref.getFromAddress()
|
||||||
|
caller = getFunctionContaining(call_addr)
|
||||||
|
callers.append(caller)
|
||||||
|
break
|
||||||
|
callers = list(set(callers))
|
||||||
|
options = DecompileOptions()
|
||||||
|
monitor = ConsoleTaskMonitor()
|
||||||
|
ifc = DecompInterface()
|
||||||
|
ifc.setOptions(options)
|
||||||
|
ifc.openProgram(currentProgram)
|
||||||
|
with open("callbacks.md", "w") as file:
|
||||||
|
res = "|Callback setup address|Callback name|Callback funcion|Callback address|"
|
||||||
|
print(res)
|
||||||
|
file.write(res + "\n")
|
||||||
|
res = "|-----|----|----|--------|"
|
||||||
|
print(res)
|
||||||
|
file.write(res + "\n")
|
||||||
|
for caller in callers:
|
||||||
|
callback_setup_addr = caller.getEntryPoint()
|
||||||
|
res = ifc.decompileFunction(caller, 60, monitor)
|
||||||
|
code = str(res.getDecompiledFunction().getC())
|
||||||
|
code = code.split(target_func)[1]
|
||||||
|
code = code.split(';')[0]
|
||||||
|
code = code.strip()
|
||||||
|
code = code.split(',')
|
||||||
|
callback_name = code[1].strip()
|
||||||
|
callback_func = code[2].strip()[:-1].strip().replace('_', '.')
|
||||||
|
res = ifc.decompileFunction(caller, 60, monitor)
|
||||||
|
hf = res.getHighFunction()
|
||||||
|
opiter = hf.getPcodeOps()
|
||||||
|
callback_addr = "not found"
|
||||||
|
while opiter.hasNext():
|
||||||
|
op = opiter.next()
|
||||||
|
mnemonic = op.getMnemonic()
|
||||||
|
if mnemonic == "CALL":
|
||||||
|
core_func = op.getInput(3)
|
||||||
|
callback_addr = toAddr(core_func.getDef().getInput(1).getOffset())
|
||||||
|
res = "|`{}`|{}|`{}`|`{}`|".format(callback_setup_addr, callback_name, callback_func, callback_addr)
|
||||||
|
print(res)
|
||||||
|
file.write(res + "\n")
|
||||||
|
|
||||||
|
|
||||||
|
xref_params(TARGET_FUNC)
|
Loading…
Reference in a new issue