search

danielplohmann / apiscout

This project aims at simplifying Windows API import recovery on arbitrary memory dumps
BSD 2-Clause "Simplified" License
241 stars 41 forks source link

ported to IDA 7.4 #18

Closed jenfrie closed 4 years ago

jenfrie commented 4 years ago

Edited idc calls in IdaTools.py to reflect new library function names in IDA 7.4 (no backwards compatibility with IDA 6.x).

The following changes were necessary for ida_scout.py to run in IDA 7.4: idc.SegEnd -> idc.get_segm_end idc.SegStart -> idc.get_segm_start idc.Byte -> idc.get_wide_byte idc.MakeNameEx -> idc.set_name idc.MakeDword -> ida_bytes.create_data(ea, FF_DWORD, 4, ida_idaapi.BADADDR) idc.MakeQword -> ida_bytes.create_data(ea, FF_QWORD, 8, ida_idaapi.BADADDR) ida_typeinf.add_til(name) -> ida_typeinf.add_til(name, idaapi.ADDTIL_DEFAULT)

see https://www.hex-rays.com/products/ida/support/ida74_idapython_no_bc695_porting_guide/

danielplohmann commented 4 years ago

Thanks a lot! I've tested it with IDA 7.3 + Python 2.7, as well as IDA 7.4 + Python 3.6. Had to adjust a couple more things but seems to work fine now!