Results 1 to 4 of 4

Thread: Imm_OllyDbg PE Dumper 3.03/OllyDbg PE Dumper 3.03

  1. #1

    Imm_OllyDbg PE Dumper 3.03/OllyDbg PE Dumper 3.03

    FKMA has apparently released a newer version of his OllyDbg PE Dumper, now apparently known as Imm_OllyDbg PE Dumper 3.03

    His updated version has the following description:

    you can dump any *.exe and *.dll from debugged process address space;
    - you can add/remove sections to/from resulting dump. If you are add new section,
    you specify VA and size of memory region to add as section, attributes, File Offset,
    RAW size and section name. So, now you can add to dump any memory regions created
    by protectors during debug session;
    - antidump antiprotection and most correct save dump technics: during dumping,
    against other dumpers, PE Dumper save only present memory pages (basing on VA & Virtual size).
    So, if between memory regions present non-allocated space, most other dumpers
    (and OllyDump too) will not save dump correctly, but PE Dumper will save all
    correctly.
    - fix raw sizes correct only RAW size of image according to Virtual Sizes;
    - paste header from disk - use header from disk, it's clear;

    I found it at:

    http://www.tuts4you.com/download.php?view.2109

    and updated our CRCETL entry and local copy here:

    http://www.woodmann.com/collaborative/tools/index.php/PE_Dumper

    Regards,
    JMI

  2. #2
    nova
    Guest
    then it seems he hasn't finished 3.05 ( http://www.woodmann.com/forum/archive/index.php/t-8789.html )

    thanks JMI. All the links i found were dead.
    Last edited by nova; April 3rd, 2008 at 23:25.
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  3. #3
    biotech7
    Guest
    Thanks for your kind offering.
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  4. #4
    Teach, Not Flame Kayaker's Avatar
    Join Date
    Oct 2000
    Posts
    4,144
    Blog Entries
    5
    Well isn't that special. It appears that 3.03 version is for ImmDbg only. Hence the name Imm_OllyDbg perchance?

    The latest OllyDbg version I can find, according to the PE File Version, is 3.02, at
    http://www.tuts4you.com/download.php?view.87

    I can create a new entry - to include this apparently last OllyDbg-specific 3.02 version, as well as the v3.03 ImmDbg one, but..

    What is the latest version of OllyDbg PE Dumper available? The thread given by nova mentions a later version possible. Any movement on that front anybody know?

    Kayaker

Similar Threads

  1. Virtual Section Dumper v1.0 x86
    By NCR in forum Tools of Our Trade (TOT) Messageboard
    Replies: 0
    Last Post: February 17th, 2012, 18:58
  2. MSIL Dumper
    By Kurapica in forum Tools of Our Trade (TOT) Messageboard
    Replies: 4
    Last Post: December 29th, 2008, 19:05
  3. HASP Dumper and Emulator
    By asifpervez in forum The Newbie Forum
    Replies: 3
    Last Post: April 6th, 2007, 12:10
  4. Process Memory Dumper V1.0
    By lovelace in forum Tools of Our Trade (TOT) Messageboard
    Replies: 1
    Last Post: October 5th, 2005, 23:45
  5. Hardlock Memory Dumper
    By cyco2 in forum Tools of Our Trade (TOT) Messageboard
    Replies: 8
    Last Post: April 4th, 2004, 07:47

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •