in functions/kernel32.py [0:0]
def __init__(self):
self.is_64bit = True if idaapi.BADADDR == 0xffffffffffffffff else False
self.total_func = {
# file
"CreateFileA" : self.CreateFileA,
"CreateFileW" : self.CreateFileW,
"ReadFile" : self.ReadFile,
"WriteFile" : self.WriteFile,
# thread & process
"CreateThread" : self.CreateThread,
"CreateProcessA": self.CreateProcessA,
"CreateProcessW": self.CreateProcessW,
# memory
"VirtualAlloc":self.VirtualAlloc,
"VirtualFree":self.VirtualFree,
"VirtualProtect":self.VirtualProtect,
# debug
"IsDebuggerPresent":self.IsDebuggerPresent
}