create_user_shared_data
summary: create a segment, and define (complex) data in it
- description:
The goal of this script is to demonstrate some usage of the type API. In this script, we show how to create, set type and name of a user shared data region in an ntdll IDB: * Load the _KUSER_SHARED_DATA data type from a type info
library shipped with IDA, and import it into the IDB’s “local types”
Create a data segment with UserSharedData as its name.
Apply the type to the start of the newly created segment base address.
Set the address name.
level: intermediate
Attributes
Module Contents
- create_user_shared_data.USE64 = 2
- create_user_shared_data.PERM_RW = 6
- create_user_shared_data.start_ea = 2147352576
- create_user_shared_data.tif
- create_user_shared_data.ntddk64
- create_user_shared_data.segm