TransWikia.com

IDAPython, parse IDA DB as PE file

Reverse Engineering Asked by BlackRussian on May 20, 2021

enter image description here

I have buffer loaded into IDA with IDAPython in a costume loader script, I want to now to be parsed as a PE, or in fact, it would be better if IDA will try to reparse it as a PE, is it possible without opening a new IDA instance / another DB?
As you can see I have the right raw data loaded, but for some reason, there is no processing on the data that a loaded.

One Answer

I don't think IDA handle multiple PE instance, one of the solution I used in the past was to create a new segment, load the .text and ask IDA to decompile this segment.

Answered by Nyx__o on May 20, 2021

Add your own answers!

Ask a Question

Get help from others!

© 2024 TransWikia.com. All rights reserved. Sites we Love: PCI Database, UKBizDB, Menu Kuliner, Sharing RPP