belf
belf copied to clipboard
Further info of setup
Hi dude, and thank you very much for this contribution.
Can you give some further info, or step by step sample of how to use it?
I mean, this works as a IDA plugin? So I have to copy into my /home/user/.idapro folder?
When opening binary, like elf or maybe kernel dump, may I do something? Should I see something?
Thank you.
In short: Toss the XML and DLL into your IDA loaders directory and it should pop up, ensure you are running at least IDA 7.0...
With regards to building:
Download the IDA 7.1 SDK, it resolves a lot of the header dependencies (but not all of them), also grab this specific fork of TinyXML.
I downloaded VS2017 along with the target Windows SDK (10.0.17134.0) and edited the include/lib directories (as currently they are hardcoded to a location on his drive), and the IDA 7.1 SDK (so mimic'ing his exact build...)
There was only one change I had to do in order to get it to compile, the dyninfo.jmprel() was not defined, so I created the entry, and it was able to compile!
Next I tried just using the IDA 7.0 SDK, unfortunately this wouldn't compile, as in the belf_loader.cpp, dyninfo.jmprel(), ELFOSABI_NAC, ELFOSABI_CELLOSLV2 are missing (defined in elf.h for IDA 7.1 SDK)... and the reader.cpp is pretty much completely broken cause of it.
When I point to the IDA 7.1 SDK elf folder, then it can compile fine...
Build Requirements/Dependencies: Visual Studio 2017 Windows SDK 10.0.17134.0 Proper include/lib directories defined IDA 7.1 SDK
this doesnt load when trying to load a decrypted eboot.elf