进程内存自卸车（Windows x86）的C / C++、Delphi和Python

MDmp MDmp is an open-source process memory dumper for Windows. It is able to dump the executable images from the memory space of a process, as well as arbitrary memory areas (stacks, heaps, areas with eXecute bit set, explicit address & size etc.). It is written in C and has bindings included for Python (bindings for Delphi are planned). The purpose of this library/tool is to assist in reverse engineering (particularly malware). mdmp.exe A tool called mdmp.exe (built on libmdmp) is available in the downloads and described here. pymdmp.pyd The binding for Python (currently Python 2.7) documented here.

mdmp-0.2.5-beta-binaries
gpl.txt
libmdmp.dll
libmdmp.h
libmdmp.lib
mdmp.exe
mdmp64.exe
python26
python27