Quote:
when i dump the exe i lose memory map where those calls are made.
|
I assume that it is using VirtualAlloc for allocating...
I am working currently on a tool which will redirect allocations to only one memory block being able after to easy save that and add a new section to the PE file.