0

How do I create a minidump of a user-mode application (containing all the mapped memory for said usermode application) on the Windows Mobile or Pocket PC 2003 platforms?

user314104
  • 1,528
  • 14
  • 31

1 Answers1

0

Itsutils offers a memory dump tool (see itsme on xda-developers.com). But you need to know the start address.what is the intention for making this dump?

josef
  • 5,951
  • 1
  • 13
  • 24
  • The intention is to dump what's in virtual memory for a single process in order to search for a saved (but forgotten) password. I was hoping to avoid having to dump the entirety of physical memory. – user314104 Aug 10 '14 at 22:58
  • You do not need to dump the whole memory, you only need to dump the slot memory where the process is located. If the app is a .net one you can use an IDL viewer to look for the password. See for example: http://sebug.net/paper/Meeting-Documents/Xcon-2005/Xcon2005_Hacking_Windows_CE.pdf – josef Aug 11 '14 at 17:21
  • I caved in and gave this method a try. I got back `ERROR: Source/host file does not exist 'C:\Win32\itsutils\enablerapi.exe'` from trying to run pmemdump.exe and pmemmap.exe. Where does enablerapi.exe come from? – user314104 Aug 22 '14 at 02:55
  • I never had issues with the itsutils. Supporting that is done at different place. – josef Aug 22 '14 at 03:59
  • @user314104 I have the same question, I cannot find "enablerapi.exe". Did you ever find it? – still_dreaming_1 Aug 04 '22 at 19:06
  • enabler.api is not part of itsutils: see https://itsme.home.xs4all.nl/projects/xda/tools.html – josef Aug 05 '22 at 20:58