lib/pedump/loader.rb
# load MS Minidump (*.dmp) file, that can be created in Task Manager via
# right click on process -> save memory dump
load MS Minidump (*.dmp) file, that can be created in Task Manager via
right click on process -> save memory dump
load MS Minidump ( * . dmp ) file that can be created in Task Manager via right click on process - > save memory dump
def load_minidump io, options = {}
    @sections ||= []
    md = Minidump.new io
    options[:merge] = true unless options.key?(:merge)
    md.memory_ranges(options).each do |mr|
      hdr = PEdump::IMAGE_SECTION_HEADER.new(
        :VirtualAddress   => mr.va,
        :PointerToRawData => mr.file_offset,
        :SizeOfRawData    => mr.size,
        :VirtualSize      => mr.size            
      )
      @sections << Section.new( hdr, :deferred_load_io => io )
    end
  end
def load_minidump io , options = { } @sections ||= [ ] md = Minidump . new io options [ :merge ] = true unless options . key? ( :merge ) md . memory_ranges ( options ) . each do | mr | hdr = PEdump :: IMAGE_SECTION_HEADER . new ( :VirtualAddress => mr . va , :PointerToRawData => mr . file_offset , :SizeOfRawData => mr . size , :VirtualSize => mr . size ) @sections << Section . new ( hdr , :deferred_load_io => io ) end end
load MS Minidump (*.dmp) file, that can be created in Task Manager via
right click on process -> save memory dump
load MS Minidump ( * . dmp ) file that can be created in Task Manager via right click on process - > save memory dump
# XXX may be larger than SizeOfRawData
io
options