tmr232

tmr232

def get_bb_id(graph, ea):
    for block in graph:
        if block.startEA <= ea and block.endEA > ea:
            return block.id

start_ea = 0x15f9ad6
base_block_ea = 0x15f9a60

f = get_func(start_ea)
g = FlowChart(f, flags=FC_PREDS) #???

tmr232

Building lldb on Mac

Create Codesign Certificate

First we need to create a certificate. The llvm provided a way to do that, but I found this way to work slightly better for me. Just substitute lldb_codesign for the certificate name, instead of gdb-cert.

Install swig dependency

tmr232

Param(
    [Parameter(Mandatory=$true)]
    [string]$ExeName,

    [switch]
    $Disable
)

{
    New-Item -Path "HKLM:\Software\Microsoft\Windows NT\currentversion\image file execution options" -Name $ExeName -Force

tmr232

<#
Easily find GUIDs in the classes root
#>

Param(
    [Parameter(Mandatory=$true)]
    [string]$GUID,

    [switch]
    $all

tmr232

The Problem

When writing and using IDA plugins, configurations tend to be quite a mess. With each plugin having it's own:

1. Color scheme
2. Hotkeys
3. Configuration file format
4. Configuration location

(And that's when you have a seprtate configuration, and not some variables in the plugin itself).

tmr232

if (!$args)
{
    Write-Host "Usage: sudo <executable> [<arguments...>]"
    return
}

$arguments = $args[1..$args.Length]

if ($arguments) 
{

tmr232

// `using` directives

using System.Runtime.CompilerServices;


// Actual code

public static string GetLocation(
            [CallerFilePath] string filePath = null,
            [CallerLineNumber] int lineNumber = 0,

tmr232

import idaapi
import uuid

def read_guid(ea=None):
    if ea is None:
        ea = idaapi.get_screen_ea()
    # Pay attention to the endian!
    return '{{{}}}'.format(uuid.UUID(bytes_le=idaapi.get_many_bytes(ea, 16)))
Octotree is enabled on this page. Click this button or press cmd shift s (or ctrl shift s) to show it.

tmr232

import re
import idaapi
import sark
import abc


class IDATracker(idaapi.UI_Hooks):
    __metaclass__ = abc.ABCMeta

    def __init__(self):