View Single Post
  #3  
Old 07-21-2004, 05:08
Lunar_Dust
 
Posts: n/a
I also unpacked Reason demo, really all you have to do it look thru memory, every file needed is unpacked in memory. PE Files start with "MZ", just keep looking for PE headers, and when you find one, get the PE size, and then select the whole memory block that you need. Them dump it using LordPE. The filename will usually be contained inside the particular EXE / DLL you are dumping as well, so you can name it correctly.

So with Olly or SoftICE (SoftICE might be easier) you can just scroll up thru memory of the Reason process and see each seperate EXE/DLL and dump them one at a time.

-Lunar
Reply With Quote