Exetools  

Go Back   Exetools > General > Community Tools

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 06-22-2016, 22:22
FoxB FoxB is offline
VIP
 
Join Date: Jan 2002
Location: Earth...
Posts: 1,064
Rept. Given: 15
Rept. Rcvd 139 Times in 95 Posts
Thanks Given: 23
Thanks Rcvd at 882 Times in 346 Posts
FoxB Reputation: 100-199 FoxB Reputation: 100-199
also we can use

------------------------------
Process Dump v1.4
Copyright й 2015, Geoff McDonald
http://www.split-code.com/

Process Dump (pd.exe) is a tool used to dump both 32 and 64 bit executable modules back to disk from memory within a process address space. This tool is able to find and dump hidden modules, and it uses a clean hash database to exclude dumping of known clean files. This tool uses an aggressive import reconstruction approach that links all DWORD/QWORDs that point to an export in the process to the corresponding export function.
------------------------------
Reply With Quote
The Following User Says Thank You to FoxB For This Useful Post:
niculaita (06-22-2016)
  #2  
Old 06-24-2016, 09:19
TechLord TechLord is offline
Banned User
 
Join Date: Mar 2005
Location: 10 Steps Ahead of You
Posts: 759
Rept. Given: 384
Rept. Rcvd 247 Times in 112 Posts
Thanks Given: 789
Thanks Rcvd at 2,022 Times in 571 Posts
TechLord Reputation: 200-299 TechLord Reputation: 200-299 TechLord Reputation: 200-299
Quote:
Originally Posted by FoxB View Post
also we can use

------------------------------
Process Dump v1.4
Copyright й 2015, Geoff McDonald
http://www.split-code.com/

...
Now actually v1.5 is available...

Direct download link of compiled v1.5 :

http://split-code.com/files/pd_latest.zip
Reply With Quote
The Following User Says Thank You to TechLord For This Useful Post:
FoxB (06-24-2016)
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



All times are GMT +8. The time now is 13:19.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )