Loading

idapython实现dump内存

版本:IDA pro 7.7

import idc

def main():
    begin = 0xCD956000; #需对应修改
    size = 0x2FB000  # #需对应修改
    byte_tmp = idc.get_bytes(begin,size)
    print('collect over')
    file = "/home/t/tmpkqk13.so" #需对应修改
    with open(file, 'wb') as fw:
        fw.write(byte_tmp)
    print('write over')

if __name__=='__main__':
    main()
posted @ 2024-01-19 14:52  yuhury  阅读(123)  评论(0编辑  收藏  举报