IDAPython project for Hex-Ray's IDA Pro
Go to file
elias.bachaalany@gmail.com fbb5bfabd6 IDA Pro 6.6 support
What's new:
- added the decompiler bindings
- Expose simpleline_t type to IDAPython. That lets the user to set the bgcolor & text for each line in the decompilation.
- Wrapped new functions from the IDA SDK

Various fixes:
for non-code locations, idc.GetOpnd() would create instructions instead of returning empty result
- idb_event::area_cmt_changed was never received in IDB_Hooks (and descendants)
- idb_event::ti_changed, and idb_event::op_ti_changed notifications were not accessible in IDAPython
- op_t.value was truncated to 32 bits under IDA64.
- print_tinfo() wouldn't return a valid string.
- readsel2() was not usable.
- read_selection() was buggy for 64-bit programs.
- StructMembers() considered holes in structures, and didn't properly iterate through the whole structure definition.
- There was no way to call calc_switch_cases() from IDAPython.
- when using multi-select/multi-edit choosers, erroneous event codes could be sent at beginning & end of batch deletion of lines.
- When, in a PluginForm#OnCreate, the layout of IDA was requested to change (for example by starting a debugging session), that PluginForm could be deleted and create an access violation.
- tinfo_t objects created from IDAPython could cause an assertion failure at exit time.
- Usage of IDAPython's DropdownListControl was broken.
2014-07-04 22:02:42 +00:00
docs Initial SVN commit of version 0.9.54 sources. 2007-10-20 07:03:51 +00:00
examples IDA Pro 6.6 support 2014-07-04 22:02:42 +00:00
python IDA Pro 6.6 support 2014-07-04 22:02:42 +00:00
pywraps IDA Pro 6.6 support 2014-07-04 22:02:42 +00:00
Scripts IDA Pro 6.5 support 2013-12-30 01:34:23 +00:00
swig IDA Pro 6.6 support 2014-07-04 22:02:42 +00:00
tools - IDA Pro 6.3 support 2012-06-24 20:49:11 +00:00
AUTHORS.txt IDA Pro 6.6 support 2014-07-04 22:02:42 +00:00
basetsd.h Initial SVN commit of version 0.9.54 sources. 2007-10-20 07:03:51 +00:00
build.py IDA Pro 6.6 support 2014-07-04 22:02:42 +00:00
BUILDING.txt - Experimental: integrated Hex-Rays Decompiler bindings that were contributed by EiNSTeiN: 2013-07-03 01:40:54 +00:00
CHANGES.txt - Experimental: integrated Hex-Rays Decompiler bindings that were contributed by EiNSTeiN: 2013-07-03 01:40:54 +00:00
COPYING.txt IDAPython 1.4.0 - IDA Pro 5.7 support 2010-06-28 12:36:40 +00:00
idapython.sln Added VS2012 solution files 2013-06-28 22:32:32 +00:00
idapython.vcxproj IDA Pro 6.6 support 2014-07-04 22:02:42 +00:00
idapython.vcxproj.filters - Experimental: integrated Hex-Rays Decompiler bindings that were contributed by EiNSTeiN: 2013-07-03 01:40:54 +00:00
python.cfg IDA Pro 6.5 support 2013-12-30 01:34:23 +00:00
python.cpp IDA Pro 6.6 support 2014-07-04 22:02:42 +00:00
pywraps.hpp IDA Pro 6.6 support 2014-07-04 22:02:42 +00:00
README.txt IDAPython 1.5.3 2011-10-14 14:24:38 +00:00
STATUS.txt IDAPython 1.4.0 - IDA Pro 5.7 support 2010-06-28 12:36:40 +00:00

------------------------------------------------------
IDAPython - Python plugin for Interactive Disassembler
------------------------------------------------------

What is IDAPython?
------------------

IDAPython is an IDA plugin which makes it possible to write scripts
for IDA in the Python programming language. IDAPython provides full
access to both the IDA API and any installed Python module.

Check the scripts in the examples directory to get an quick glimpse.


Availability
------------

Latest stable versions of IDAPython are available from
  http://code.google.com/p/idapython/downloads/list

Development builds are available from
  http://code.google.com/p/idapython/


Resources
---------

The full function cross-reference is readable online at
  http://www.hex-rays.com/idapro/idapython_docs/

Bugs and enhancement requests should be submitted to
  http://code.google.com/p/idapython/issues/list

Mailing list for the project is hosted by Google Groups at
  http://groups.google.com/group/idapython


Installation from binaries
--------------------------

1. Install 2.6 or 2.7 from http://www.python.org/
2. Copy the whole "python" directory to %IDADIR%
3. Copy the contents of the "plugins" directory to the %IDADIR%\plugins\
4. Copy "python.cfg" to %IDADIR%\cfg

Usage
-----

 - Run script: File / Script file (Alt-F7)
 - Execute Python statement(s) (Ctrl-F3)
 - Run previously executed script again: View / Recent Scripts (Alt+F9)


* Batch mode execution:

Start IDA with the following command line options:

 -A -OIDAPython:yourscript.py file_to_work_on
or
-Syourscript.py
or
-S"yourscript.py arg1 arg2 arg3"

(Please see http://www.hexblog.com/?p=128)

If you want fully unattended execution mode, make sure your script
exits with a qexit() call.

By default scripts run after the database is opened. Extended option
format is:

  -OIDAPython:[N;]script.py

Where N can be:
  0: run script after opening database (default)
  1: run script when UI is ready
  2: run script immediately on plugin load (shortly after IDA starts and before processor modules and loaders)

* User init file

You can place your custom settings to a file called 'idapythonrc.py'
that should be placed to

${HOME}/.idapro/

or

%AppData%\Hex-Rays\IDA Pro

The user init file is read and executed at the end of the init process.

Please note that IDAPython can be configured with "python.cfg" file.

* Invoking Python from IDC

The IDAPython plugin exposes a new IDC function "RunPythonStatement(string idc_code)" that allows execution
of Python code from IDC

* Invoking IDC from Python

It is possible to use the idc.Eval() to evaluate IDC expressions from Python

* Making Python the default language

By default, IDA will use IDC to evaluate expressions. It is possible to change the default language to use
Python instead of IDC.

In order to do that, please use the following IDC code:

RunPlugin("python", 3)

To disable Python language and revert back to IDC:
RunPlugin("python", 4)