vmmap in the right way - Githubissues

season-lab / bluepill

BluePill: Neutralizing Anti-Analysis Behavior in Malware Dissection (Black Hat Europe 2019, IEEE TIFS 2020)

GNU Lesser General Public License v3.0

121 stars 22 forks source link

Open andreafioraldi opened 4 years ago

andreafioraldi commented 4 years ago

ugly camel case API is not supported in recent IDA versions. They were deprected in IDA 7.0 and abandoned later.
vmmap is intended to be parsed as a json. json.loads(idc.send_dbg_command("vmmap")) is better than hand crafted stuffs
idaapi.SEGPERM* may not be consistent with the permissions in vmmap. idaapi.SEGPERM are the right constants, not SEGPROT

andreafioraldi commented 4 years ago

I didn't tested the changes (don't force me to install Visual Studio plis)