文件列表:

OllyDumpEx_v1.60 (0, 2017-09-19)
OllyDumpEx_v1.60\OllyDumpEx_SA64.exe (131584, 2017-09-19)
OllyDumpEx_v1.60\OllyDumpEx_Wd32.dll (107520, 2017-09-19)
OllyDumpEx_v1.60\OllyDumpEx_IdaRT.plw (164352, 2017-09-19)
OllyDumpEx_v1.60\OllyDumpEx_SA32.exe (121856, 2017-09-19)
OllyDumpEx_v1.60\OllyDumpEx_Imm18.dll (104960, 2017-09-19)
OllyDumpEx_v1.60\OllyDumpEx_IdaFW.plw (164352, 2017-09-19)
OllyDumpEx_v1.60\OllyDumpEx_Od11.dll (104960, 2017-09-19)
OllyDumpEx_v1.60\OllyDumpEx_Wd64.dll (114176, 2017-09-19)
OllyDumpEx_v1.60\OllyDumpEx_IdaRT.dll (191488, 2017-09-19)
OllyDumpEx_v1.60\OllyDumpEx_X64Dbg.dp64 (114176, 2017-09-19)
OllyDumpEx_v1.60\OllyDumpEx_Od20.dll (119808, 2017-09-19)
OllyDumpEx_v1.60\OllyDumpEx_IdaRT.p64 (164864, 2017-09-19)
OllyDumpEx_v1.60\OllyDumpEx_X64Dbg.dp32 (107008, 2017-09-19)
OllyDumpEx_v1.60\OllyDumpEx_IdaRT64.dll (191488, 2017-09-19)

== Files - OllyDumpEx_Od11.dll for OllyDbg version 1.10 (1.10 tested) - OllyDumpEx_Od20.dll for OllyDbg version 2.01 (2.01 tested) - OllyDumpEx_Imm18.dll for Immunity Debugger version 1.8x or higher (1.85 tested) - OllyDumpEx_IdaRT.plw, OllyDumpEx_IdaRT.p*** for IDA Pro Retail version 5.0 or higher (6.9 tested) - OllyDumpEx_IdaRT.dll, OllyDumpEx_IdaRT***.dll for IDA Pro Retail ***bit build version 7.0 or higher (7.0 tested) - OllyDumpEx_IdaFW.plw for IDA Pro Freeware version 5.0 (5.0 tested) - OllyDumpEx_Wd32.dll, OllyDumpEx_Wd***.dll for WinDbg version 6.x (6.2 tested) - OllyDumpEx_X***Dbg.dp32, OllyDumpEx_X***Dbg.dp*** for x***dbg (snapshot 20170822 tested) - OllyDumpEx_SA32.exe, OllyDumpEx_SA***.exe Standalone version == Known Issue - Incorrect memory attribute OllyDbg 1.10 and Immunity Debugger Image type memory is always readonly. IDA Pro cannot detect Mapped type, Guard, CopyOnWrite attribute. - All Memory Search mode hit listed module OllyDbg 1.10 and Immunity Debugger not refresh t_memory table automatically. Open Memory window and refresh (ALT+M) before search. - Cannot search memory address greater than 0x7FFFFFFF OllyDbg 2.01h seems to be 0x80000000-0xFFFEFFFF memory range as kernel memory even if debuggee compiled with LARGEADDRESSAWARE option. - ***bit Limitation ImageBase change not supported. - ELF Limitation Rebuild mode only available on IDA Pro due to other debuggers not support ELF. - Dumped ELF binary not work (FAQ) Try disable lazy binding using env LD_BIND_NOW=1, just ignore PLTGOT inconsistency. - Dumped UPX binary not work (FAQ) Disable "Prefer Original Characteristics" option before dump. Problem is PE characteristics and memory access permission inconsistency. == Changelog - v1.60 / 2017-09-19 Add: ELF support Add: Standalone version Add: Support IDA Pro ***bit build plugin interface (7.0) Improve: Image Size editable in binary dump mode for overlay data Del: Drop old version of Immunity Debugger support (1.7x) - v1.50 / 2015-07-03 Add: Fuzzy Search mode (for corrupted MZ/PE Signature) Add: Fix Corrupted PE Header option (Fill Hole option is merged) Add: Dump result dialog for copy and paste Improve: Search method optimization Improve: Corrupted PE Header handling Improve: Binary dump mode support some options Bugfix: Rebased PE handling (rebuild dump mode) Bugfix: Debuggee filename error on attached process (IDA) Bugfix: Get EIP does not work in recent version (x***_dbg) - v1.40 / 2014-12-17 Add: Support x***_dbg plugin interface (both 32bit and ***bit) Improve: Enable NXCOMPAT and DYNAMICBASE for plugin binaries - v1.30 / 2013-06-28 Add: Support WinDbg plugin interface (both 32bit and ***bit) Improve: Add plugin name and version directory to archive file Bugfix: Data after section headers in PE Header has been ignored Bugfix: Fix SizeOfHeaders inconsistency - v1.20 / 2013-05-27 Add: Support IDA Pro plugin interface (both Retail and Freeware version) Add: Support native ***bit process dump (IDA Pro only) Improve: Change dialog position to center of parent window Improve: Add debug toggle menu to dialog system menu Improve: Section size handling single section belongs to multiple memory segments Bugfix: Zero virtual size section handling - v1.12 / 2013-04-02 Improve: Update to OllyDbg 2 latest version PDK (2.01h, PLUGIN_VERSION 0x02010001) Improve: Tested with latest version of debuggers (OllyDbg 2.01h and Immunity Debugger 1.85) Bugfix: Search greater than 0x7FFFFFFF memory address failed (IMAGE_FILE_LARGE_ADDRESS_AWARE) - v1.10 / 2013-03-24 Add: Search type All Memory Add: Binary dump mode (no rebuild PE header, for before load image) Add: PE32+ support (Binary dump mode only) Add: Memory Address/Size parameters editable (dump source address) Improve: Add info message for Relocation Flag and EXE/DLL type Improve: Large PE Header handling (larger than 0x1000) Improve: Check SectionAlignment and FileAlignment consistency Improve: Reduce search memory usage (not depend on target memory size) Improve: Detect PE Header across different type pages (parse and search) Bugfix: Improper owner window handle Bugfix: Section not listed when belong memory range not exists Bugfix: Almost features broken when memory window sort order changed - v1.00 / 2013-03-12 Add: Selectable Base PE Header (Module/Memory/Address) Add: Search PE Header from memory Improve: PE Source default change Disk to Memory Improve: ASLR aware (except PE Source from Disk mode) Improve: Clear DynamicBase DllCharacteristics flag with Disable Relocation option Improve: PE Header parse and modify more carefully (corrupt PE handling) Improve: Inherit selected address from memory window Bugfix: Fix Virtual Offset feature cause crash (divide by zero) Bugfix: Parse invalid sections cause crash - v0.92 / 2012-10-09 Improve: Support OllyDbg version 2 plugin new interface - v0.90 / 2011-08-24 Add: Support OllyDbg version 2 plugin interface (EXPERIMENTAL) Improve: Rewrite Wide/Multibyte-Character support code Improve: Decode CopyOnWrite page attribute Bugfix: Detect working directory (Wide-Character only) - v0.80 / 2011-08-01 Add: Support Immunity Debugger version 1.8x or higher Improve: Data Directory rebuild option (check rewrite range) Improve: Always round up PE header size to 0x1000 (ImportRec not extend itself) Bugfix: TLS Data Directory ignored - v0.70 / 2011-07-07 Add: Support Immunity Debugger version 1.7x or lower Improve: Data Directory rebuild option (support ImportTable) Improve: Image Base Address alignment checking Improve: Virtual Offset Address alignment checking - v0.60 Improve: DeSelect is too slow when Auto Adjust Image Base option enabled Add: Virtual Offset Address overlap checking - v0.50 Improve: Data Directory rebuild option (support ResourceDirectory) Add: Auto Adjust Image Base Address option - v0.40 Add: Data Directory rebuild option for RVA Adjust (support ExportTable) Improve: Invalid Image Base checking Improve: Virtual Offset overlap checking - v0.30 Add: Section sort by Virtual Offset Add: Fill Virtual Offset Hole option - v0.20 Bugfix: Fix many bugs - v0.10 Initial version == Bug Report Please try latest version before report. With your environment detail, logs and way to reproduce. WEB: http://low-priority.appspot.com/ollydumpex/ MAIL: lowprio20/_at_/gmail/_dot_/com

近期下载者：

相关文件：

评论：[我要评论] [举报此文件]

收藏者：