-
-
[下载]Process Memory Dumper .3
-
发表于: 2008-6-14 11:37 2555
-
Process Memory Dumper .3
.NET Framework 2.0 or later required
Usage: dump /n <Process name> [/x]
Or: dump /i <PID> [/x]
To exclude loaded modules use /x, to only dump private memory use /p
To list process IDs: dump /list
64 bit compatible.
Process Memory Dumper's main objective is to get the working memory of the target process.
It works by getting the page size of the system and walks through allocated memory page by page. If any committed page (or region of pages) is protected it's protection is disabled before the memory is dumped. There is support for dumping 32 bit and 64 bit processes in a 64 bit environment. Process Memory Dumper aims to dump every last bit of memory used by the target process.
/X will avoid dumping the memory of loaded modules.
/P will only dump regions of private memory.
Errors should be rare, but if they do occur just try again. VirtualProtectEx errors can be ignored if there are no ReadProcessMemory errors.
Changelog:
.3 - Fixes, added /x and /p
赞赏
他的文章
谁下载
deanlh
loveaixing
周二两
cwx
脱壳请教
dphant
wangbin
william_xia
xuexi
redacker
crystalxp
looyoo
lclee
logkiller
niuhacker
rhinoceros
峰回路转
shinesi
fatalgod
jacklymin
liaoao
cnzjhz
xacker
popeylj
musics
honghan
darkjack
kimkundo
gagemel
墮落
SamChow
谢大人
hacktrace
tintinhehe
rst
weiyifei
haras
zjwsl
skykrnl
Hasby
guoxiaohua
dpcmsx
pwttech
704088
mb_qwggbwik
看原图
赞赏
雪币:
留言: