Skip to content

Instantly share code, notes, and snippets.

@kmdnet

kmdnet/ida_dump.py

Created January 29, 2017 12:33
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save kmdnet/ce9e3eec8d154f6b60568ca004fae51b to your computer and use it in GitHub Desktop.
Save kmdnet/ce9e3eec8d154f6b60568ca004fae51b to your computer and use it in GitHub Desktop.
Download ZIP
Raw
ida_dump.py
from idaapi import *
from idautils import *
from idc import *
b_addr = 0x003021AA
LoadDebugger("windbg", 1)
add_bpt(b_addr,0,BPT_SOFT)
enable_bpt(b_addr,True)
StartDebugger("","","")
GetDebuggerEvent(WFNE_SUSP, -1)
addr = GetRegValue("ESI")
print "ESI : ",hex(addr)
print GetString(addr,-1,0)
continue_process()
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment