Jasi PE Builder v1.1 - Memory Dump to Valid Disk PE Rebuilder
Jasi PE Builder v1.1 - Memory Dump to Valid Disk PE Rebuilder
JasiPEBuilder is a command-line tool for reconstructing valid executable PE files from raw memory dumps produced by JasiNativeDumper or any other dumper that captures a flat SizeOfImage byte copy of a loaded module. It handles the full pipeline of transformations needed to turn a dump that the Windows loader can map back into a file that tools like IDA Pro, Ghidra, x64dbg, CFF Explorer and DetectitEasy can open cleanly.
