給IDA用的一個簡單的symbian程序地址轉換工具

IDA在排查由D_EXC生成的symbian死屍現場時非常有用，

不過在下覺得用IDA來直接進行彙編調試也是有用而有趣的，尤其是要面對phone release編譯的情況。。

 

 

工具鏈生成的.map文件與IDA的地址不能直接對應，所以按函數下斷點非常麻煩，要自己算地址！god。

區區本可以用emacs寫個函數了事，考慮到在組內emacs普及度過低，所以編寫了一個perl的bat腳本：

 

裏面用的了perl正則裏的求值替換，因爲這個語言特性自己也不熟，把程序記下來備查：

 

@rem = '--*-Perl-*-- @echo off if "%OS%" == "Windows_NT" goto WinNT perl -x -S "%0" %1 %2 %3 %4 %5 %6 %7 %8 %9 goto endofperl :WinNT perl -x -S %0 %* if NOT "%COMSPEC%" == "%SystemRoot%/system32/cmd.exe" goto endofperl if %errorlevel% == 9009 echo You do not have Perl in your PATH. if errorlevel 1 goto script_failed_so_exit_with_non_zero_val 2>nul goto endofperl @rem '; #!perl #line 15 eval 'exec e:/green/sbperl/perl/bin/perl -S $0 ${1+"$@"}' if 0; my $base = hex($ARGV[0]); my $map_file = $ARGV[1]; my $map_new = do {my $cnt; open HOST, $map_file; read HOST, $cnt, -s HOST; close HOST; $cnt}; my $offset = hex($ARGV[2] || "0x8000"); $map_new =~ s/(/s)0x([0-9a-f]+)(/s)/sprintf("${1}0x%8x$3", hex($2) + $base - $offset);/sge; open HOST, ">${map_file}2"; print HOST $map_new; $map_file = $map_file . ".names.py"; open NAME, ">$map_file"; my @lines = split //n/, $map_new; print NAME "import idaapi/n"; for my $line (@lines) { if ($line =~ /([_0-9a-z~:*,&<>/[/]]+/([_0-9a-z~:/)/s*,&<>/[/]]+)/s+(0x[0-9a-f]+)/s/i) { my ($ea,$name) = ($2,$1); $name =~ s/[,<>~* ]/./g; print NAME "idaapi.set_name($ea, /"$name/", True)/n"; } if ($line =~ /(vtable/s+for/s+/w+)/s+(0x[0-9a-f]+)/s/i) { my ($ea,$name) = ($2,$1); $ea -= $offset % 4; # 32 bit align $name =~ s/[~* ]/./g; print NAME "idaapi.set_name($ea, /"$name/", True)/n"; } } __END__ :endofperl