Dump memory regions of a process using NtQueryVirtualMemory and NtReadVirtualMemory - View it on GitHub