Skip to content

Instantly share code, notes, and snippets.

@michal-kapala
michal-kapala / main.go
Created August 4, 2023 14:43
LZSS compression example
package main
import (
"bytes"
"fmt"
"github.com/bovarysme/lzss"
)
func compressAndDisplay(name string, input []byte) {
@michal-kapala
michal-kapala / cheatsheet.md
Last active August 11, 2023 20:51
Advanced IDAPython cheatsheet

Advanced IDAPython cheatsheet

Gotta love Hex-Rays docs, don't you?

Functions

Get return type

def get_ret_type(ea):
  tif = idaapi.tinfo_t()
  ida_nalt.get_tinfo(tif, ea)
@michal-kapala
michal-kapala / metaeditor.md
Last active June 23, 2023 17:57
Debugging ICMarket's MetaEditor 5.00

Debugging MetaEditor

MetaEditor is used as an IDE integrated into MetaTrader. The binary is statically obfuscated, for which the below section are used:

  • .cod0
  • .cod1
  • .cod2
  • .reloc

The executable is standalone, only loads system DLLs initially.