(principleGet the prototype in the COM component through pywin32's pythoncom in IDAPython
Use a separate program to obtain the virtual table corresponding to the prototype in the COM component
Special attention: Since you need to get the virtual table after loading the dll, don't use it for malicious program analysis
InstallWhen installing IDA, check IDAPython
Use IDAPython's pip to install pywin32
By default, use the command: C:\python27-x64\Scripts\pip.exe install pywin32
Copy the three files in the bin directory to the plugin directory
By default, it is in this directory: C:\Program Files\IDA 7.0\plugins)
收藏
