RETools
RETools copied to clipboard
Create dump fix option for pedmpextractor
trafficstars
--fixdump flag should be added to overwrite each sections raw address with the virtual, and size too. This will 'unexpand' the binary so that IDA can correctly parse PE headers of an already expanded PE dumped from memory.