Page 1 of 2 12 LastLast
Results 1 to 15 of 28

Thread: New Olly PE Dumper plugin

  1. #1
    FKMA
    Guest

    New Olly PE Dumper plugin

    This is new PE Dumper plugin for best user mode debugger OlluDbg.
    The PE Dumper is similar to OllyDump by Gigapede but fully rewritten and have
    some features:

    - you can dump any *.exe and *.dll from debugged process address space;
    - you can add/remove sections to/from resulting dump. If you are add new section,
    you specify VA and size of memory region to add as section, attributes, File Offset,
    RAW size and section name. So, now you can add to dump any memory regions created
    by protectors during debug session;
    - antidump antiprotection and most correct save dump technics: during dumping,
    against other dumpers, PE Dumper save only present memory pages (basing on VA & Virtual size).
    So, if between memory regions present non-allocated space, most other dumpers
    (and OllyDump too) will not save dump correctly, but PE Dumper will save all
    correctly.
    - fix raw sizes correct only RAW size of image according to Virtual Sizes;
    - paste header from disk - use header from disk, it's clear;


    This plugin not fully tested yet. If you find bug, please e-mail me.

    http://mmtools.nm.ru/OllyDbgPEDumper.rar


    e-mail:
    fkma@mmtools.ru
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  2. #2

    New Olly PE Dumper plugin

    the link donīt work

    When i can download?

    Ricardo Narvaja

  3. #3

    New Olly PE Dumper plugin

    i can download now sorry
    thanks
    Ricardo

  4. #4

    New Olly PE Dumper plugin

    i can download now sorry
    thanks
    Ricardo

  5. #5
    pzalps
    Guest

    New Olly PE Dumper plugin

    Nice Work
    Thank you
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  6. #6
    linhanshi
    Guest

    New Olly PE Dumper plugin

    you good!

    this job is very nice.
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  7. #7
    FKMA
    Guest

    New Olly PE Dumper plugin

    Please test it. I can't have many time in this time for trying to deep test
    of this plugin. It may contain some bugs.
    Thanks.

    fkma@mmtools.ru
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  8. #8
    FKMA
    Guest

    New Olly PE Dumper plugin

    Hi.

    Version 3.01 released.

    changes:
    + Added autoselect main exe module in pick module list
    * some GUI minor changes
    - remove some unused code

    http://mmtools.nm.ru/ollydbgpedumper301.zip
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  9. #9

    New Olly PE Dumper plugin

    FKMA: there are some problems in downloading your plugin. please send it to me via mail so I can add it to the stuph page. thanks

  10. #10

    New Olly PE Dumper plugin

    I agree, took many retries. Thank you for the work you put into this, anything to make life easier is great!

  11. #11
    rocket_lei
    Guest

    New Olly PE Dumper plugin

    Great tool, wish you could make it perfect!
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  12. #12
    cubituz
    Guest

    New Olly PE Dumper plugin

    i identify olly crash on startup with "many plugins" and pedumper.dll (v3.01)

    OS: win2k

    Application popup : OLLYDBG.EXE

    The Instruction at "0x0010db9b" referenced memory at "0x0010db9b"
    The memory could not be read.


    please FIX

    thanks
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  13. #13
    FKMA
    Guest

    New Olly PE Dumper plugin

    cubituz
    I also have many plugins that Olly loaded (about 29 ) but don't
    face with such problem.
    At this point can't say anything about reason.
    Say version of W2K, what module belongs address 0x0010db9b, base address of owner module and enum plugins that you use.

    see later.
    sorry for my english.
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  14. #14
    kaos_xlro
    Guest

    New Olly PE Dumper plugin

    Well, I donīt know if itīs for the SP2 but I canīt add any section to the dumped file, even if I mark the option to make sections writable.

    The Import Reconstructor jump me with "Can't add any section to this file".

    Have you test it on SP2 or may be just a problem on my machine
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  15. #15
    smarco
    Guest

    New Olly PE Dumper plugin

    Hi FKMA !

    Very very good plugins!

    Can you help me for find OEP for dump?

    Is there a solutions for find this value for some program?

    When I can use GET EIP as OEP?

    THANKS!
    I promise that I have read the FAQ and tried to use the Search to answer my question.

Similar Threads

  1. My new Ollydbg plugin: Sequential Dumper
    By My Infected Computer in forum Blogs Forum
    Replies: 0
    Last Post: April 3rd, 2014, 17:22
  2. Olly's Plugins Manager (plugin)
    By Prodigy in forum Tools of Our Trade (TOT) Messageboard
    Replies: 1
    Last Post: September 22nd, 2009, 23:19
  3. use of PhantOm Olly plugin no in Olly ?
    By LaBBa in forum Advanced Reversing and Programming
    Replies: 4
    Last Post: November 8th, 2008, 22:19
  4. Imm_OllyDbg PE Dumper 3.03/OllyDbg PE Dumper 3.03
    By JMI in forum Plugins (General)
    Replies: 3
    Last Post: July 21st, 2008, 12:37
  5. Docu for Olly Advanced plugin ??
    By MrSmith in forum Plugins (General)
    Replies: 3
    Last Post: August 1st, 2006, 02:50

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •