RETools icon indicating copy to clipboard operation
RETools copied to clipboard

Create dump fix option for pedmpextractor

Open stevemk14ebr opened this issue 3 years ago • 0 comments
trafficstars

--fixdump flag should be added to overwrite each sections raw address with the virtual, and size too. This will 'unexpand' the binary so that IDA can correctly parse PE headers of an already expanded PE dumped from memory.

stevemk14ebr avatar May 24 '22 15:05 stevemk14ebr