[ CLIENT ]
client: RRG/Iceman/master/v4.9237-2613-gc828caff3 2020-12-19 23:43:12
compiled with MinGW-w64 10.2.0 OS:Windows (64b) ARCH:x86_64
hf 14a raw -k -a -b 7 40
hf 14a raw -k -a 43
hf 14a raw -k -a e0 00 39 f7
mariodon
mariodon
/ pedump.cpp
Created
September 22, 2018 23:23
Dump main module of an executable using WINAPI
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| void dumpModule() { | |
| int i = 0x400000; | |
| // Get memory info of exe module | |
| MEMORY_BASIC_INFORMATION mbi; | |
| VirtualQuery((LPCVOID)i, &mbi, sizeof(mbi)); | |
| ofstream outfile; | |
| HANDLE moduleHandle = GetModuleHandle(NULL); | |
| if (moduleHandle) { | |
| cout << "Opened main module" << endl; |