Re: [IDAPython] VirtualAlloc of ctypes returns 0
PostPosted:Thu May 30, 2019 10:00 am
I contacted them on their support address, we'll see !
A forum for reverse engineering, OS internals and malware analysis
At a guess it happens because you try to pass parameters intended for an x86 process to an x64 API
(remember that IDA is x64 now so you're calling an x64 API). Possibly without an explicit prototype ctypes
passes arguments in wrong locations. I don't know why it succeeds on win7, however.
Perhaps it's missing some of the checks present in later versions. In any case, it's not an issue in IDA itself.