#!/usr/bin/env python
#
# This script will create the needed structures, and label all syscalls from a FULL kernel dump
# OpenOrbis Project providing 100% free and open source development
# **** the pirates
#
# Created by: kiwidog (http://kiwidog.me)
# Started on: Febuary 14, 2019
#
def find_syscalls():
"""
Automatically finds and labels all of the syscalls in a kernel dump
:return: Nothing
"""
# Get the sysent_t structure
sysent_id = idaapi.get_struc_id("sysent_t")
if sysent_id == idaapi.BADNODE:
write_log("could not get the sysent_t structure.")
return
# Find the magic
magic_offset = idaapi.find_binary(idc.MinEA(), idc.MaxEA(), "4F 52 42 49 53 20 6B 65 72 6E 65 6C 20 53 45 4C 46", 16...