Takes the symbol file produced by joker -j <kernelcache>
and imports any of the symbols that have been discovered by the program.
It does not import symbols labeled as _func_
Generate the symbol file using:
joker -j <kernelcache>
with a decrypted kernelcache
Then ensure that that file produced by is in the current working directory where IDA is analysing the kernelcache
Advised to rename the file to kernelcache.sym or something easier to remember
Now load the script into IDA with File->Script File
and select ida_load_joker_sym.py
The python utility will be imported as imp
Now run the script using imp.import_symbols("<kernelcache.sym File>")
If you have altered the python script while the file was already imported into IDA you can simply import it again using File->Script File
and select ida_load_joker_sym_reload.py