mirror of
https://github.com/kimd155/WerWolf
synced 2026-06-06 16:04:29 +00:00
ac1c29f3fd
RtlReportSilentProcessExit is async, it sends an ALPC message and returns immediately. The loader was freeing memory and the process was exiting before WerFault finished writing the dump. Changes: - Add 5s delay after BOF execution before freeing VirtualAlloc memory - Add dump file polling in main.py (waits up to 60s for lsass*.dmp) - Print unresolved symbols visibly so missing imports are obvious