OllyDumpEx Plugin v1.30 / 2013-06-28

[JeRRy]

Overview

This plugin is process memory dumper for OllyDbg and Immunity Debugger.
Very simple overview:
OllyDumpEx = OllyDump + PE Dumper - obsoluted + useful features

Features

• OllyDbg version 2 plugin interface supported (EXPERIMENTAL)
• Select to dump debugee exe or loaded dll
• Dump any address space as section even if not in original section header
• Add dummy section to keep PE format consistency
• Fix RVA in DataDirectory to follow ImageBase change
• Auto calculate many parameters (RawSize, RawOffset, VirtualOffset, ...)

Screenshot
http://low-priority.appspot.com/olly...dumpex_ss0.png

Supported Debugger

• OllyDbg version 1.10 (tested 1.10)
• OllyDbg version 2.01 EXPERIMENTAL (tested 2.01 alpha 4)
• Immunity Debugger version 1.7x or lower (tested 1.73)
• Immunity Debugger version 1.8x or higher (tested 1.83)

This archive file contains plugin DLLs for each debuggers.
OllyDumpEx.zip
Version: v0.90
MD5 : 2c247ed143bcb3c6f9505f2de4fb8a1e
SHA1: 5df21ab07fc843ca4d5057d7ba9689ac623084c0<p id="changes">
Recent Changes
- v0.90 / 2011-08-24

• Add: Support OllyDbg version 2 plugin interface (EXPERIMENTAL)
• Improve: Rewrite Wide/Multibyte-Character support code
• Improve: Decode CopyOnWrite page attribute
• Bugfix: Detect working directory

- v0.80 / 2011-07-15

• Add: Support Immunity Debugger version 1.8x or higher
• Improve: Data Directory rebuild option (check rewrite range)
• Improve: Always round up PE header size to 0x1000 (ImportRec not extend itself)
• Bugfix: TLS Data Directory ignored

- v0.70 / 2011-07-01

• Add: Support Immunity Debugger version 1.7x or lower
• Improve: Data Directory rebuild option (support ImportTable)
• Improve: Image Base Address alignment checking
• Improve: Virtual Offset Address alignment checking