VoidSec/DriverBuddyReloaded

[FEATURE] Print the address where DeviceName has been found

VoidSec opened this issue · 1 comments

At the moment the output does not contain the function/address where the DeviceName has been found. Adding it to the output will improve the navigability and augment the information value

In device_name_finder.py source file, extract_unicode_strings function.
You can yield an extra offset in buf at the location where the unicode string was found.
That offset is the file offset in IDA
Below code goto that file offset
image