Exetools  

Go Back   Exetools > General > General Discussion
Reload this Page Some advice on how to load a windows process dump into IDA Pro?
Register Forum Rules FAQ Calendar

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 03-07-2025, 07:18
chants chants is offline
VIP
  
Join Date: Jul 2016
Posts: 826
Rept. Given: 47
Rept. Rcvd 50 Times in 31 Posts
Thanks Given: 737
Thanks Rcvd at 1,140 Times in 529 Posts
chants Reputation: 51
You have to load it as a Dump File, not as a Binary File for it to interpret the file correctly and presumably get the segment register mappings.
Reply With Quote
The Following User Says Thank You to chants For This Useful Post:
niculaita (03-09-2025)
  #2  
Old 03-08-2025, 00:09
rcer rcer is offline
Friend
  
Join Date: Dec 2008
Posts: 171
Rept. Given: 5
Rept. Rcvd 9 Times in 8 Posts
Thanks Given: 6
Thanks Rcvd at 30 Times in 22 Posts
rcer Reputation: 9
Quote:
Originally Posted by chants View Post
You have to load it as a Dump File, not as a Binary File for it to interpret the file correctly and presumably get the segment register mappings.
OK & understood. Looks like I will have to read the IDA book again, and this time pay more attention
Reply With Quote
Reply

« Previous Thread | Next Thread »

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
Windows Update Dump (WUA) [C++ source] HarrySpoofer Source Code 2 07-23-2022 23:14
How to find out what process issued a windows service start? DavidXanatos General Discussion 9 05-21-2020 18:46
Load and Execute unsigned code into kernel in Windows 10x64 TechLord General Discussion 1 03-12-2017 16:30


All times are GMT +8. The time now is 07:52.

Aaron's homepage - Top

Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )