# Open the original binary .dmp file with open("chall.dmp", "rb") as f: # 1. Seek to the RVA identified in the memory list (e.g., 0x38e3df8b) f.seek(0x74aff8b) data = f.read(0x8001000) # Read the memory block with open("virtual_machine_ram.bin", "wb") as r: r.write(data)