#1
|
|||
|
|||
RegionDumper
RegionDumper:
this tool comes with two features: 1. Dump memory from range (start - end) Select for this the process, right click it and choose "Dump region" 2. Scan from jumps/call of outside of the module Select for this the process, right click it and choose "Enum Modules" then on desired module (like main exe) right click it and choose "Outside search" Note: some addresses reported are "decompilation errors". |
The Following 3 Users Gave Reputation+1 to CodeCracker For This Useful Post: | ||
The Following 13 Users Say Thank You to CodeCracker For This Useful Post: | ||
alekine322 (05-08-2021), besoeso (05-01-2021), Doit (05-07-2021), Mahmoudnia (04-28-2021), Mendax47 (04-29-2021), Nacho_dj (04-28-2021), niculaita (04-29-2021), p4r4d0x (04-30-2021), sh3dow (05-15-2021), Sir.V65j (04-28-2021), wilson bibe (04-28-2021), yoza (04-28-2021) |
#2
|
|||
|
|||
fixed a bug
New: fixed Armadillo code splicing search ("Outside search" menu item) The bug came from strange PEOffset (PE Offset outside of main module), fixed now.
|
The Following 2 Users Gave Reputation+1 to CodeCracker For This Useful Post: | ||
MarcElBichon (06-23-2021), niculaita (06-24-2021) |
The Following 5 Users Say Thank You to CodeCracker For This Useful Post: | ||
hors (06-29-2021), LordGarfio (06-24-2021), Mendax47 (06-28-2021), niculaita (06-24-2021), wilson bibe (06-23-2021) |
|
|