#16
|
||||
|
||||
Just take the last original Olly, install my plugin, turn on the mentioned protections and it should work. I'm using Win7 Pro. Related the exceptions I have the exact same settings.
Quote:
|
#17
|
||||
|
||||
Hey, I've just found the problem It's an olly config issue. You have to turn off SFX -> Unpack SFX modules automatically and will work like a charm. Per default it's enabled but it should be off...
|
#18
|
||||
|
||||
Quote:
BR, quygia128 |
#19
|
||||
|
||||
New v1.6 is out. Changes:
Code:
- CreateThread - Version information resource added |
The Following 7 Users Gave Reputation+1 to ferrit.rce For This Useful Post: | ||
ahmadmansoor (10-23-2013), evlncrn8 (10-24-2013), nikre (10-23-2013), quygia128 (10-23-2013), sendersu (10-23-2013), TQN (10-24-2013), wilson bibe (10-23-2013) |
#20
|
||||
|
||||
get error when try rip recursive
Unable to find target jump address at 00000000 File: OllyExtCodeRip.cpp Line: 191 Result of GetLastError: 00000000 |
The Following User Gave Reputation+1 to nikre For This Useful Post: | ||
Kla$ (10-23-2013) |
#21
|
||||
|
||||
Please send me an example binary and the range what you wanted to rip.
|
#22
|
||||
|
||||
@ferrit.rce:
Inside the function, i think you should use GetProclimits to get End address of function(RET) (must analysis code) Get point of Jump command (jump XXX), calc byte lenght from XXX To End of function and copy data to clipboard. |
#23
|
|||
|
|||
@author
have you seen this interesting piece of code? http://pastebin.com/6kbt1Vka did you already have it inside the Ext the tool? |
#24
|
|||
|
|||
This pastebin is irrelevant, it's for Kernel debugger detection. Olly is usermode debugger. You don't have to add this mate.
|
The Following User Gave Reputation+1 to memcpy For This Useful Post: | ||
sendersu (10-24-2013) |
#25
|
||||
|
||||
1. The feature must go without code analysis
2. I'm doing that what you've described but we have a possible problem with the recursive feature |
#26
|
||||
|
||||
@ferrit.rce
here example I found one were work recursive Code:
CALL 004053DC ;//00403D90: |
#27
|
||||
|
||||
OK, I'll take a look at it...
|
#28
|
||||
|
||||
New v1.6.1 is out. Changes:
Code:
- Recursive code ripping fix |
#29
|
|||
|
|||
@ferrit.rce
the OllyExt 1.6.1 does not run at all @Win2k3 server x32... not even any line in log window of Olly201... http://prntscr.com/290fap http://prntscr.com/290fih http://prntscr.com/290g8l P.S. another v2 plugin OllyDumpEx v1.30 was successfully loaded any ideas? |
#30
|
||||
|
||||
Quote:
Quote:
Quote:
Quote:
|
Tags |
anti-anti-debug, anti-debug, ollydbg, ollyext, plugin |
|
|
Similar Threads | ||||
Thread | Thread Starter | Forum | Replies | Last Post |
DEF plugin for OllyDbg 2.XX | wilson bibe | Community Tools | 2 | 07-22-2014 09:01 |