huge commit

2026/srdnlen_quals/forensic/chapter2/extract_86box_ram.py

@@ -0,0 +1,8 @@
+# Open the original binary .dmp file
+with open("chall.dmp", "rb") as f:
+    # 1. Seek to the RVA identified in the memory list (e.g., 0x38e3df8b)
+    f.seek(0x74aff8b)
+    data = f.read(0x8001000) # Read the memory block
+    
+    with open("virtual_machine_ram.bin", "wb") as r:
+        r.write(data)