search

VoidSec / DriverBuddyReloaded

Driver Buddy Reloaded is an IDA Pro Python plugin that helps automate some tedious Windows Kernel Drivers reverse engineering tasks
https://voidsec.com/driver-buddy-reloaded
GNU General Public License v3.0
313 stars 46 forks source link

[BUG] find opcodes #11

Closed VoidSec closed 2 years ago

VoidSec commented 2 years ago

Bug

[>] Searching for interesting opcodes...
    - Found jnz     short loc_15862 in sub_15820 at 0x00015852

Fix

filter out uninteresting results if the opcode we are looking for (from the list at https://github.com/VoidSec/DriverBuddyReloaded/blob/2aa360d1a70add799386ac884cd82ab5c997629e/DriverBuddyReloaded/utils.py#L199) are not in the string