Find file History
Permalink
..
Failed to load latest commit information.
src [FEATURE][pe_unmapper] Truncate to raw size Dec 1, 2016
README.md Update README.md Nov 28, 2016

README.md

pe_unmapper

Small tool to convert a PE from a virtual format into a raw format
(useful in recovering executables dumped from the memory).

Usage:

pe_unmapper.exe [input_file] [load base: in hex] [*output_file]
* - optional

Example:

pe_unmapper.exe _02660000.mem 02660000 payload.dll


Compiled version: https://drive.google.com/file/d/0Bzb5kQFOXkiSc0J2Y0JXcGZuUFk