页面

2012年9月12日星期三

The Rename of Dynamic Function

Recently I reversed a program about Apple. This software have lots of dynamic functions to call the official function. Such as below:
......
aaa = (int (__cdecl *)(_DWORD))GetProcAddress(hModule, "aaa");
if ( aaa )
{
    bbb = (int)GetProcAddress(hModule,"bbb");
    if ( bbb )
......

But in default in IDA, aaa or bbb may show as dword_xxxxxxx. It's more different to identify all of them. So I decide to write a script to help to rename from dword_xxxxxxxx to aaa/bbb.
Just like below:

没有评论:

发表评论