9 lines
301 B
Python
9 lines
301 B
Python
# Open the original binary .dmp file
|
|
with open("chall.dmp", "rb") as f:
|
|
# 1. Seek to the RVA identified in the memory list (e.g., 0x38e3df8b)
|
|
f.seek(0x74aff8b)
|
|
data = f.read(0x8001000) # Read the memory block
|
|
|
|
with open("virtual_machine_ram.bin", "wb") as r:
|
|
r.write(data)
|