PDA

View Full Version : Fix DLL Dump


ULI-R0
June 13th, 2015, 01:59
Hello guys, I've come here because I've dumped a DLL from memory inside a process which loads this DLL, this DLL is packed with VMProtect, and so, I've gotten a successful dump... However when I try to replace the "Legit" DLL over the dumped one, the program does not works as expected...

I was wondering what causes this to happen? How do I fix the dumped image... If you need more information I used Process Hacker to find the DLL/handle and it gave me Information on where such DLL was located (image) I went ahead with PD32.exe (Process Dump PD) and did a dump at that image location, it gave me the successful dump of the DLL in question.

What I would have to do now?

Thanks.