Skip to content

a parser for the .map file included in the aimware leak

Notifications You must be signed in to change notification settings

unknowntrojan/mapparse

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

6 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

mapparse

a utility I wrote to parse the map file included with the recent aimware self-leak. there is also an IDAPython script to import the symbol information into IDA.

to do that, run cargo test export_ida, and select the produced ida.sym when running the idapython script. ignore all the errors, those are from me not deduplicating symbols. you could either deduplicate in the code, or add a suffix to duplicate symbols if they have different rva's. you obviously have to have the leak's dll loaded in ida.

i included the map file from the leak so you can fuck around with the parsing.

After applying symbols

About

a parser for the .map file included in the aimware leak

Resources

Stars

Watchers

Forks