tmr232

if (!$args)
{
    Write-Host "Usage: sudo <executable> [<arguments...>]"
    return
}

$arguments = $args[1..$args.Length]

if ($arguments) 
{

tmr232

The Problem

When writing and using IDA plugins, configurations tend to be quite a mess. With each plugin having it's own:

1. Color scheme
2. Hotkeys
3. Configuration file format
4. Configuration location

(And that's when you have a seprtate configuration, and not some variables in the plugin itself).

tmr232

<#
Easily find GUIDs in the classes root
#>

Param(
    [Parameter(Mandatory=$true)]
    [string]$GUID,

    [switch]
    $all

tmr232

Param(
    [Parameter(Mandatory=$true)]
    [string]$ExeName,

    [switch]
    $Disable
)

{
    New-Item -Path "HKLM:\Software\Microsoft\Windows NT\currentversion\image file execution options" -Name $ExeName -Force

tmr232

Building lldb on Mac

Create Codesign Certificate

First we need to create a certificate. The llvm provided a way to do that, but I found this way to work slightly better for me. Just substitute lldb_codesign for the certificate name, instead of gdb-cert.

Install swig dependency

tmr232

def get_bb_id(graph, ea):
    for block in graph:
        if block.startEA <= ea and block.endEA > ea:
            return block.id

start_ea = 0x15f9ad6
base_block_ea = 0x15f9a60

f = get_func(start_ea)
g = FlowChart(f, flags=FC_PREDS) #???

tmr232

tmr232

"""Bitmapper

Usage:
  bitmapper.py <input> <output> [<width>]

Options:
  -h --help     Show this screen.
  <input>       The input binary file.
  <output>      The output bitmap.
  <width>       The width of the bitmap in pixels. Optional.

tmr232

from easy_construct import cs, struct, Container

MyStruct = struct("MyStruct",
                  _0=cs.Magic("EZConstruct"),
                  variable=cs.UBInt32,
                  another_var=cs.UBInt16,
                  _1=cs.Padding(0x4),
                  array=cs.Bytes(13),
                  _2=cs.Magic("MagicEndsHere"),
                  )

tmr232

"""Attribute Abbreviation.

This file contains a metaclass that can be used to abbreviate attribute names for a class.

This is a POC made for fun.
Do yourself a favor and NEVER do this in actual code.
You've been warned.
"""

class AbbreviationError(Exception):