OpenRCE: Blog

Exporting IDA function for IDC Script Usage

Fri, 19 Jun 2009 19:35:45 -0500

Sometimes you want to specify additional options or to call internal function of IDA plugin that you wrote. You can use "set_idc_func" API to achive this. Here's a sample skeleton code that is showing how to make a custom function that idc script can call.

char *OutputFilename;

static const char SendDiassemblyInfoArgs[]={VT_STR,0 };

static error_t idaapi SendDiassemblyInfo(value_t *argv,value_t *res)

{

	msg("%s is called with arg0=%s\n",argv[0].str);

	OutputFilename=strdup(argv[0].str);

	run(2);

	res->num=1;

	return eOk;

}



int idaapi init(void)

{

	if ( inf.filetype == f_ELF ) return PLUGIN_SKIP;



	set_idc_func("SendDiassemblyInfo",SendDiassemblyInfo,SendDiassemblyInfoArgs);

	return PLUGIN_KEEP;

}



void idaapi term(void)

{

	set_idc_func("SendDiassemblyInfo",NULL,NULL);

}

From idc script, you can call the defined function as if it's a builtin API like following.

static main()

{

	RunPlugin("DarunGrim2",1);

	SendDiassemblyInfo("disassembly.info");

	Exit(0);

}

Simple!

DarunGrim2 is up

Sat, 07 Feb 2009 19:03:18 -0600

Check this out: http://www.darungrim.org/
I also setup google groups to talk about darungrim and binary diffing related topics.

DarunGrim2 is coming!

Wed, 31 Dec 2008 15:43:57 -0600

I'm preparing DarunGrim2 release these days.
It's in C++ so using less memory and CPU than original DarunGrim which is implemented in Python. The original DarunGrim is always available at origianl page(http://research.eeye.com/html/tools/RT20060801-1.html). And it's stable and opensource.

During the time you can evaluate Binary Differ(http://code.google.com/p/binarydiffer/), which is opensource and implemented in C and has no external GUI. It's been there for few months and it's in GPL, so you can do whatever you want with it.

Here's some screenshots from Binary Differ.
http://lh5.ggpht.com/_WcidANaFFi4/RZXSkUB6pJI/AAAAAAAAAHE/9shuhWqEQHA/s800/MS06-070.jpg

BTW, DarunGrim2 will be provided as binary only. Basically the only differences between DarunGrim2 and "Binary Differ" are the language used(C/C++) and GUI parts, and also whether they are opensource or not.

Enjoy diffing and happy new year!

PS. I'm giving you some Korean tips here.
    DarunGrim=Darun+Grim
        Darun=Different
        Grim=Pictures