Welcome to IDA-Minsc

IDA-Minsc is a plugin for IDA Pro that assists a user with scripting the IDAPython plugin that is bundled with the disassembler. This plugin groups the different aspects of the IDAPython API into a simpler format which allows a reverse engineer to script different aspects of their work with very little investment.

A number of capabilities are introduced such as an indexed tagging system, support for multi-case functions which utilize pattern matching based on the parameter type, and filtering with the intention that most search and annotation tasks can (and should be) performed with just a few lines of Python. This should enable a user to write quick, temporary scripts that can be used to augment their reversing endeavors for exchanging information with other instances of Python be it in a debugger or running standalone.

This plugin is (of course) dependent upon IDAPython, and supports each of the platforms that IDA supports which includes Windows, Linux, and MacOS. This also implies that both IDA Headless and its text user interface (based on Turbo Vision) is also still usable.

If your instance of IDA was not installed with Python, or you wish to switch between Python 3.x or the Python 2.x series, then please refer to the instructions at section 1.6.2 for how to change the Python runtime that IDAPython uses for your installation. At the present time, only IDA Pro 6.8 to IDA 8.0.220729 are currently supported with Python v3.10.6.

Table of Contents

• 1. Installation of IDA-Minsc
  • 1.1. Software Requirements
  • 1.2. Installing the actual plugin
  • 1.3. Using the actual plugin
  • 1.4. Help with scripting or reporting issues
  • 1.5. Compatibility with other plugins
  • 1.6. Alternative installation methodologies
• 2. Concepts
  • 2.1. Multicased functions and classes as namespaces
  • 2.2. Tagging and the querying of the tag cache
  • 2.3. Matching/Filtering of IDA types
  • 2.4. Functional combinators
  • 2.5. Types in IDA
• 3. Modules
  • 3.1. Available modules
  • 3.2. Miscellaneous modules
  • 3.3. Tools module
• 4. Tutorials
  • 4.1. Disassembling the current address
  • 4.2. Setting breakpoints (WinDbg) on all labels in a function
  • 4.3. Tagging all dynamic calls in the database
  • 4.4. Marking all functions that are “leaves”
  • 4.5. Using the user-interface (ui) module to map hotkeys to a function
  • 4.6. Conclusion

Index

• Module Index
• Index