RegionDumper
RegionDumper:
this tool comes with two features:
1. Dump memory from range (start - end)
Select for this the process, right click it and choose "Dump region"
2. Scan from jumps/call of outside of the module
Select for this the process, right click it and choose "Enum Modules"
then on desired module (like main exe) right click it and choose
"Outside search"
Note: some addresses reported are "decompilation errors".
|