Open ricnar456 opened 2 years ago
Thank you, it would be a really good idea to have something like that! I do not have any timeframe yet to implement that but I'll try.
Enums
Macro IRP
Structs
DRIVERSTATUS
DRIVER_OBJECT
IRP
IO_STACK_LOCATION
IRP_MJ_XXX already declared as MACRO_IRP in ntddkxx_yyy .til type libraries of IDA xxx = 64 or not yyy = win7, win8, win81, vista, win10 When open an .sys file on IDA, IDA auto import on of til file above. We can auto import MACRO_IRP to IDA by a line of code: idaapi.import_type(idaapi.cvar.idati, 0, "MACRO_IRP") Same as another structs: idaapi.import_type(idaapi.cvar.idati, 0, "DRIVERSTATUS") ....
It will be useful add the enumeration of
MajorCodes
If this enumeration exists in localtypes and is syncronized, you can press M in the code numbers and add the MJ function name.
This can be converted from
to
Thanks for a good tool