How can I extract DLL file from memory dump?

前端 未结 3 528
深忆病人
深忆病人 2020-12-19 03:12

I have a memory dump (unmanaged process) . How can I extract (using windbg) one of the dlls loaded into the process ? I mean actually saving the dll file into the disk

3条回答
  •  情话喂你
    2020-12-19 03:49

    Yes, it's true. calc.exe will also pull up its multi user language interface information and attach it in memory, as will a lot of Windows programs like mspaint, photoviewer, etc.

提交回复
热议问题