argp/iboot64helper

IDAPython loader to help with AArch64 iBoot, iBEC, and SecureROM reverse engineering

iboot64helper's Issues

Apparently incompatible with IDA 7.4

When trying to load a securerom with 7.4 IDA reports the following error message:

TypeError: in method 'find_imm', argument 1 of type 'ea_t'

in find_img4decodeinit [iBoot64helper.py: line 143]

ea, meh = ida_search.find_imm(cur_ea, ida_search.SEARCH_DOWN, 0x494D)

[request] Ghidra support

I need Ghidra support.
IDA-Pro Free isn't support arm64.

Can't get IDA to load modules

I've already downloaded the needed modules but I can't seem to get IDA to recognize them. Any thoughts?

P.S. I'm not super experienced with IDA

AttributeError: 'NoneType' object has no attribute 'start_ea'

Trying to load SecureROM for t8030si, iBoot-4479.0.0.100.4 with your loader.

Got those error:

/Applications/IDA Pro 7.0/ida.app/Contents/MacOS/loaders/iBoot64helper.py: Traceback (most recent call last):
  File "/Applications/IDA Pro 7.0/ida.app/Contents/MacOS/loaders/iBoot64helper.py", line 375, in load_file
    find_interesting(segment_start, segment_end)
  File "/Applications/IDA Pro 7.0/ida.app/Contents/MacOS/loaders/iBoot64helper.py", line 266, in find_interesting
    pk_ea = find_panic(base_ea)
  File "/Applications/IDA Pro 7.0/ida.app/Contents/MacOS/loaders/iBoot64helper.py", line 34, in find_panic
    print("\t[+] _panic = 0x%x" % (func.start_ea))
AttributeError: 'NoneType' object has no attribute 'start_ea'

Works well with SecureROM for t8020si, iBoot-3865.0.0.4.6

SecureROM can be found here: https://github.com/zzVertigo/SecureROMs

Environment:

IDA version: Version 7.0.170914, macOS Catalina

IDA 7.0 won't load module "undefined function PLUGIN_ENTRY"

/Applications/IDA Pro 7.0/ida64.app/Contents/MacOS/plugins/iBoot64helper.py: undefined function PLUGIN_ENTRY

Please advise how to fix, MacOS Mojave 10.14

ValueError: invalid null reference in method 'range_t___ne__', argument 2 of type 'range_t const &'

C:\Program Files\IDA 7.0\loaders\iBoot64helper.py: Traceback (most recent call last):
File "C:/Program Files/IDA 7.0/loaders/iBoot64helper.py", line 755, in load_file
find_interesting(segment_start, segment_end)
File "C:/Program Files/IDA 7.0/loaders/iBoot64helper.py", line 592, in find_interesting
go_ea = find_do_go(base_ea)
File "C:/Program Files/IDA 7.0/loaders/iBoot64helper.py", line 462, in find_do_go
if func != none:
File "C:\Program Files\IDA 7.0\python\ida_range.py", line 338, in ne
return ida_range.range_t___ne_(self, *args)
ValueError: invalid null reference in method 'range_t___ne__', argument 2 of type 'range_t const &'

I tried with iBoot.d11.RELEASE (iPhone 7 Plus, 13.3.1) and iBoot.d20.RELEASE (iPhone 8, 13.4.1) and the ida version is 7.0
But also I tried with t8010 SecureROM, and it works fine

Copied to plugins folder and get error

---

Warning

iBoot64helper.py: global name 'true' is not defined
Traceback (most recent call last):
File "C:\Program Files (x86)\IDA 6.8\python\idaapi.py", line 541, in IDAPython_ExecScript
execfile(script, g)
File "C:/Program Files (x86)/IDA 6.8/plugins/iBoot64helper.py", line 51, in
main()
File "C:/Program Files (x86)/IDA 6.8/plugins/iBoot64helper.py", line 13, in main
while(true):
NameError: global name 'true' is not defined

---

OK

script does not work for iPhone 7 iBoot

I got an issue while trying to get loading address for iBoot.d11.RELEASE.im4p which is iOS 11b6 iBoot for iPhone 7+
Scripts runs for few minutes but nothing happens, until I cancel it. Than I have this error message

[Question] Is it accepts im4p files?

Hi, I want to know if this loader accepts im4p files (which i get after iBoot decryption).
Do I need to cut off im4p header?