https://github.com/nlitsme/idcinternals

IDA plugin investigating the internal representation of IDC scripts
https://github.com/nlitsme/idcinternals

ida-plugin ida-pro internals

Last synced: 3 months ago
JSON representation

IDA plugin investigating the internal representation of IDC scripts

• Host: GitHub
• URL: https://github.com/nlitsme/idcinternals
• Owner: nlitsme
• License: mit
• Created: 2013-12-29T19:29:16.000Z (almost 11 years ago)
• Default Branch: master
• Last Pushed: 2023-10-27T07:07:07.000Z (about 1 year ago)
• Last Synced: 2024-05-27T12:01:45.410Z (6 months ago)
• Topics: ida-plugin, ida-pro, internals
• Language: C++
• Size: 41 KB
• Stars: 13
• Watchers: 8
• Forks: 12
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        
ABOUT

=====

This is a small plugin i made for IDA Pro ( http://www.hex-rays.com/ )

It attempts to investigate the internals of IDA.

For older versions of IDA it could dump the internal netnode

representation of the `.idb` file. This no longer works.

What does work:

* print a list of all builtin IDC functions by enumerating `IDCFuncs`

* disassemble all compiled IDC functions by locating the internal pointer

   to the compiled functions list.

dbdump knows how to find the idc compiled bytecode for several ida

versions, but possibly not for all.

HOW TO USE

=====

* install

* startup ida

* type alt-2

* read the `dump_db.log` file in the directory from where ida was started.

BUILD REMARKS

=====

* This is known to build on OSX 10.9 - 10.12, the windows build has not been tested for quite a while.

* The boost library headers are expected in /opt/local/include

* No attempt has been made to make this very portable.

INSTALLATION

=====

* type make

* type make install

AUTHOR

=====

(C) 2003-2017 Willem Hengeveld