View Single Post
  #1  
Old 06-03-2026, 09:14
Jasi2169's Avatar
Jasi2169 Jasi2169 is offline
Family
 
Join Date: Sep 2015
Location: India/TSRh
Posts: 326
Rept. Given: 3
Rept. Rcvd 75 Times in 50 Posts
Thanks Given: 47
Thanks Rcvd at 531 Times in 205 Posts
Jasi2169 Reputation: 75
v1.1 (02/Jun/2026)
- Now using --target, dumps main exe + all DLLs before any code runs, .data/.bss/CRT/Delphi RTL all in clean on-disk state, nothing initialized. Best for unpacked targets
- Now using --attach, dumps main exe + all DLLs from a running process, .data has runtime state (heap pointers, init flags, CRT tables). Before saving, cleans up BSS tail zero-fill regions and zeroes runtime pointers. Best for packed targets after unpacking, or any target that must run first to reach a dumpable state
Reply With Quote
The Following User Gave Reputation+1 to Jasi2169 For This Useful Post:
CodeCracker (06-03-2026)
The Following 2 Users Say Thank You to Jasi2169 For This Useful Post:
CodeCracker (06-03-2026), user_hidden (06-03-2026)