From 1f6fff9964640637b6d73412039511b418d67726 Mon Sep 17 00:00:00 2001
From: Jonas Zaddach <jonas@zaddach.org>
Date: Fri, 31 Mar 2017 17:01:18 +0200
Subject: [PATCH] Change data ref in GetFuncInputSurrogate to return true
 little endian data

---
 Kam1n0WinSetupProject/bin_release/plugins/Kam1n0/IDAutils.py | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/Kam1n0WinSetupProject/bin_release/plugins/Kam1n0/IDAutils.py b/Kam1n0WinSetupProject/bin_release/plugins/Kam1n0/IDAutils.py
index 19d1469b8..64ac63744 100644
--- a/Kam1n0WinSetupProject/bin_release/plugins/Kam1n0/IDAutils.py
+++ b/Kam1n0WinSetupProject/bin_release/plugins/Kam1n0/IDAutils.py
@@ -20,6 +20,8 @@
 import idautils
 import os
 import inspect
+import binascii
+import struct
 
 ICON_SEARCH = "search"
 ICON_SEARCHMULTI = "searchs"
@@ -177,7 +179,7 @@ def GetFuncInputSurrogate(func):
             refdata = list(idautils.DataRefsFrom(head))
             if(len(refdata)>0):
                 for ref in refdata:
-                    dat[head] = format(idc.Qword(ref), 'x')[::-1]
+                    dat[head] = binascii.hexlify(struct.pack("<Q", idc.Qword(ref)))
 
         sblock['src'] = tlines