Merge pull request #15 from zaddach/jonas/dataref_little_endian

Changed data ref in GetFuncInputSurrogate to return true little endian data
McGill-DMaS · Mar 31, 2017 · 2cdfe51 · 2cdfe51
2 parents 816d2ce + 1f6fff9
commit 2cdfe51
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/Kam1n0WinSetupProject/bin_release/plugins/Kam1n0/IDAutils.py b/Kam1n0WinSetupProject/bin_release/plugins/Kam1n0/IDAutils.py
@@ -20,6 +20,8 @@
 import idautils
 import os
 import inspect
+import binascii
+import struct
 
 ICON_SEARCH = "search"
 ICON_SEARCHMULTI = "searchs"
@@ -177,7 +179,7 @@ def GetFuncInputSurrogate(func):
             refdata = list(idautils.DataRefsFrom(head))
             if(len(refdata)>0):
                 for ref in refdata:
-                    dat[head] = format(idc.Qword(ref), 'x')[::-1]
+                    dat[head] = binascii.hexlify(struct.pack("<Q", idc.Qword(ref)))
 
         sblock['src'] = tlines