deREferencing
deREferencing copied to clipboard
unable to find disassembly on x64
The plugin is not able to find disassembly window when running a x64 sample.
Solution is as follows - patch function find_disass_view
in file custom.py
:
def find_disass_view(self):
ip_name: str = dbg.registers.pc
# if on x64 arch, the ip register is called RIP, but the view is NOT called IDA View-RIP, but IDA View-EIP
# thus need to change RIP to EIP, for this purpose
if ip_name == "RIP":
ip_name = "EIP"
widget = idaapi.find_widget("IDA View-%s" % ip_name)
if widget:
return widget
for c in map(chr, range(65, 75)):
widget = idaapi.find_widget("IDA View-%s" % c)
if widget:
return widget
return None
Feel free to pull request / update code, I'm too lazy to pull request.