anterior lines


Author: David Zimmer
Date: 07.15.17 - 8:27am



here is a small little idapython snip to add anterior comments to an idb. these are the comments that appear at the very top of a disassembly and are limited to 500 lines max. Note: may not show up immediately in the UI

def embed_in_anterior_comments(lst):
    #find last anterior comment
    #Note: ExtLinA is broken in IDA 6.95 (no attribute doExtra in ida_bytes) so we just manually do what it did...
    #      https://github.com/idapython/src/search?utf8=%E2%9C%93&q=doExtra&type=
    
    base = SegStart(MinEA());
    for i in range(0,500):
        x = LineA(base, i)
        if x is None: 
            break
        
        #print x    
        
    for n,msg in enumerate(lst):
        try:
            ExtLinA(base,i+n, msg)    #ida 6.7 does not have ida_lines...yay
        except:
            try:
                import ida_lines
                import ida_bytes                
                ida_lines.update_extra_cmt(base, ida_lines.E_PREV + i+n, msg)
                ida_bytes.setFlags(base, ida_bytes.get_flags_novalue(base) | ida_bytes._ida_bytes.FF_LINE)
            except:
                print "Could not embed in anterior lines"





Comments: (0)

 
Leave Comment:
Name:
Email: (not shown)
Message: (Required)
Math Question: 81 + 27 = ? followed by the letter: P 



Twitter
RSS
About Me
More Blogs
Main Site
Posts: (All)
2020 ( 6 )
2019 ( 12 )
2017 (5)
     IDA python over IPC
     dns wildcard blocking
     64bit IDA Plugins
     anterior lines
     misc news/updates
2016 (4)
     KANAL Mod
     Decoders again
     CDO.Message Breakpoints
     SysAnalyzer Updates
2015 (6)
     SysAnalyzer and Site Updates
     crazy decoder
     ida js w/dbg
     flash patching #2
     JS Graphing
     packet reassembly
2014 ( 5 )
2013 ( 9 )
2012 ( 13 )
2011 ( 19 )
2010 ( 11 )
2009 ( 1 )