Hmm why not just dump the mapped memory when it started up? Or did it do this even after loading?