• Unfortunately, we have experienced significant hard drive damage that requires urgent maintenance and rebuilding. The forum will be a state of read only until we install our new drives and rebuild all the configurations needed. Please follow our Facebook page for updates, we will be back up shortly! (The forum could go offline at any given time due to the nature of the failed drives whilst awaiting the upgrades.) When you see an Incapsula error, you know we are in the process of migration.

Web Unpacking??

J

jadeling

Elite Diviner
10 Happy Years
Joined
Jul 2, 2008
Messages
469
Reaction score
42
Can anyone help me to get a mem dump or teach me how to get a mem dump for v149 Msea?? I want to use it for IDA...


Sorry for my bad English.
Thank you.
 
Sort by date Sort by votes

Hilia

BloopBloop
Joined
Aug 9, 2012
Messages
892
Reaction score
275
a way would be to use process-hacker, and pause the MapleStory.exe , then attach ollydbg or some other debugger and use a dump plugin.
 
Upvote 0

Hilia

BloopBloop
Joined
Aug 9, 2012
Messages
892
Reaction score
275
You must be registered to see links
Ollydump should do it. When maplestory is "loaded" into ollydbg, right click and select dump etc.
 
Upvote 0

Hilia

BloopBloop
Joined
Aug 9, 2012
Messages
892
Reaction score
275
I have never had this, did you launch process hacker as admin? (also the error is a STATUS_INFO_LENGTH_MISMATCH error.)
 
Upvote 0
J

jadeling

Elite Diviner
10 Happy Years
Joined
Jul 2, 2008
Messages
469
Reaction score
42
yeap...I did launch it with admin...



erm...I managed to load the MapleStory.exe into olly...but I don't get what you mean by right click it and dump??
 
Upvote 0
S

souravipc53

Junior Spellweaver
10 Happy Years
Joined
Dec 9, 2011
Messages
156
Reaction score
39
your best bet is to 1. run and let it go to the big play button screen (game launcher screen). Then add CE to it. and do a memory dump . Search google how to dump memory using CE. make a full dump of lets say 400000~2500000
 
Upvote 0
You must log in or register to reply here.