Skip to content

Instantly share code, notes, and snippets.

@2igosha
2igosha / idafix.md
Created April 21, 2021 22:29
Fix IDA 7.5/7.6 crashing on idapython3.dll in Wine

Description

For some reason IDA executes FreeLibrary() to the plugin immediately after getting its PLUGIN structure's address, so later invocations of the plugin lead to calls to nowhere (that was supposed to be python3.dll). Simply patching the location of the FreeLibrary() call fixes the issue. The location is easy to find: go by cross-references to a place where the call to FreeLibrary is followed by a reference to the string "%s: incompatible plugin version..." and NOP it away.

7.5

Keybase proof

I hereby claim:

  • I am 2igosha on github.
  • I am igosha (https://keybase.io/igosha) on keybase.
  • I have a public key ASBLUmCpxnESNvAT_S-plI_Riszi8ccE4-7NZuEgqsgytwo

To claim this, I am signing this object: