.Currently i am trying to reverse windows 8 through qemu and the integrated gdbserver. I already split the os memory into several segments that are containing all loaded modules. Is it possible to get idapro to analyse each segment as single PE file to get all exports and names from the PE header?
Greetz defragger
![[+] expand](/imagery/files/soysauce_blueprint.gif){kind=link}