IDA Plugin v0.1.1

Adding runtime mode

Starts a program by stopping execution before entering OEP and calls a function by its RVA, relying on the ABI in signature.
Much slower than emulation, but very good at hash mapping for specified symbols.
Covers most cases and copes where emulation can't: using third-party functions in hasher and so on.

IDA Plugin v0.1.0

Initial release of IDA integration for hash-resolver.

Usage:

• Right-click a hashing function (disasm or pseudocode)
• Choose "Resolve hash for this function"
• Select pattern, hash value and symbol list
• Boom.

Includes:

• Plugin loader (hashres_plugin.py)
• Full integration code (hashres/)
• Example signatures & symbols