Skip to content

Instantly share code, notes, and snippets.

@ntddk

ntddk/gist:eae184a7473bbfa3d306

Created September 6, 2014 17:33
Show Gist options
  • Save ntddk/eae184a7473bbfa3d306 to your computer and use it in GitHub Desktop.
Save ntddk/eae184a7473bbfa3d306 to your computer and use it in GitHub Desktop.
Download ZIP
WinDbg
Raw
gistfile1.txt
!for_each_module !chkimg @#ModuleName -d
u [addr]
!address [jmp dest addr]
s -a [base addr] L?[end addr]/4 "MZ"
!dh -a [base addr]
.writemem [file] [base addr] [end addr]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment