memwrite.py

import angr
import analysis

class MemoryWrite(analysis.Analysis):
    def __init__(self, option):
        super(MemoryWrite, self).__init__(option)
        self.mem_write_check()

    def mem_write_check(self):
        print("[+] Initializing memory write analysis")

        def write_addr_check(state):
            write_addr = state.inspect.mem_write_address
            print(state.ip)
            for var in write_addr.variables:
                if "file_" in var:
                    print("Mem write @ {} using {} for dst".format(state.ip, var))

        state = self.start_state

        state.inspect.b('mem_write', action=write_addr_check)

        path_group = self.project.factory.path_group(state)
        while len(path_group.active) > 0:
            path_group.step()

angr.register_analysis(MemoryWrite, "MemoryWrite")