I've been using Dtrace off-and-on to diagnose and debug problems on macOS for some years. Unfortunately, some of the scripts that are included with macOS itself have gone rather stale, or didn't survive the port from Solaris/BSD particularly well. This includes the all-important dtruss script for tracing processes' syscalls, which doesn't seem to have changed since Mac OS X 10.5, and where many of its options simply don't work as advertised. While I was doing some development under contract for Microsoft in their attempt at porting VFS for Git to macOS, we needed a passable option for tracing, so I was able to update Mac dtruss and fix many of its issues as part of that engagement. The patches were originally applied on that repo but it's not a good long-term home for them, especially as the Mac port for VFS for Git was stopped when Apple deprecated the APIs used in a subsequent macOS release, so that entire subtree has been removed from recent revisions of the repository. I'll keep up
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
; Autohotkey Capslock Remapping Script | |
; - Deactivates capslock for normal (accidental) use. | |
; - Hold Capslock and drag anywhere in a window to move it (not just the title bar). | |
; - Access the following functions when pressing Capslock: | |
;Cursor keys - h, j, k, l | |
;Home,End - N, ; | |
;Page up,down - - = | |
;Esc - CapsLock only | |
;CapsLock - Space |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
#NoEnv ; Recommended for performance and compatibility with future AutoHotkey releases. | |
;#NoTrayIcon | |
Menu, Tray, Icon, accessibilitycpl.dll, 6 ; Keyboard Icon | |
;#Persistent https://www.autohotkey.com/docs/commands/_Persistent.htm | |
SendMode Input ; Recommended for new scripts due to its superior speed and reliability. | |
SetWorkingDir %A_ScriptDir% ; Ensures a consistent starting directory. | |
#SingleInstance force | |
; Debugging | |
#Warn All, OutputDebug ; Show Warnings on DebugView |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
; Colemak layout for AutoHotkey (MS Windows) | |
; 2006-01-01 Shai Coleman, http://colemak.com/ . Public domain. | |
; See http://www.autohotkey.com/ for more information | |
; For this to work you have to make sure that the US (QWERTY) layout is installed, | |
; that is set as the default layout, and that it is set as the current layout. | |
; Otherwise some of the key mappings will be wrong. | |
; | |
; This is mainly useful for those who don't have privileges to install a new layout | |
; This doesn't support the international features of the Colemak layout. | |
#MaxHotkeysPerInterval 20000 |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
;; Change the basic layout of the keyboard a little bit | |
; Use just the Home key for Win Tab | |
Home::#Tab | |
; Use the End key to quit programs | |
End::!F4 | |
; Switch between virtual desktops with Page Up and Page Down | |
PgUp::#^Left |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
<!-- put this to IDEA keymaps config folder. For v13 it is <userdir>\.IntelliJIdea13\config\keymaps\ --> | |
<?xml version="1.0" encoding="UTF-8"?> | |
<keymap version="1" name="Mac OS X 10.5+ Windows Ctrl" parent="Mac OS X 10.5+"> | |
<action id="$Copy"> | |
<keyboard-shortcut first-keystroke="meta C" /> | |
<keyboard-shortcut first-keystroke="meta INSERT" /> | |
<keyboard-shortcut first-keystroke="control C" /> | |
<keyboard-shortcut first-keystroke="control INSERT" /> | |
</action> | |
<action id="$Cut"> |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
; | |
; AutoHotkey Version: 1.x | |
; | |
; | |
; -------------------------------------------------------------- | |
; Emulate OSX keymap layout | |
; on Windows | |
; -------------------------------------------------------------- | |
#NoEnv ; Recommended for performance and compatibility with future AutoHotkey releases. |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
#!/usr/bin/env python | |
import r2pipe | |
import sys | |
r2 = r2pipe.open() | |
# r2 base address | |
delta = 0x400000 |
I started with a Windows 10 Enterprise Evaluation VM, version 1809, from here: https://developer.microsoft.com/en-us/microsoft-edge/tools/vms/ Then I installed the needed tools:
- Install Visual Studio Community 2019 Edition from https://visualstudio.microsoft.com/downloads/, version 16.4.2. Make sure to install the Desktop development for C++ workload.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
""" | |
@file patmake.py | |
@brief Creates a pattern file from a database | |
@author neat | |
""" | |
import os | |
import idautils | |
import ida_bytes | |
import ida_funcs |