#查找所有调用MSHookFunction的地方 ea=LocByName("MSHookFunction") if None !=ea: refs = idautils.CodeRefsTo(ea, 0) for re in refs: print hex(re), GetDisasm(re)