Page 2 of 2

Re: [IDAPython] VirtualAlloc of ctypes returns 0

PostPosted:Thu May 30, 2019 10:00 am
by ekt0
I contacted them on their support address, we'll see !

Re: [IDAPython] VirtualAlloc of ctypes returns 0

PostPosted:Mon Jun 03, 2019 5:49 pm
by ekt0
Up, Igor Skochinsky from Hex-Rays answered me - quickly after my message to the support - and here are his thoughts about the issue :
At a guess it happens because you try to pass parameters intended for an x86 process to an x64 API
(remember that IDA is x64 now so you're calling an x64 API). Possibly without an explicit prototype ctypes
passes arguments in wrong locations. I don't know why it succeeds on win7, however.
Perhaps it's missing some of the checks present in later versions. In any case, it's not an issue in IDA itself.

He also recommended me to use Appcall [1] in order to achieve my original task.

[1]: ... ppcall.pdf