This plugin is process memory dumper for OllyDbg and Immunity Debugger.

Very simple overview:

OllyDumpEx = OllyDump + PE Dumper - obsoluted + useful features

Features

·　OllyDbg version 2 plugin interface supported (EXPERIMENTAL)
·　Select to dump debugee exe or loaded dll
·　Dump any address space as section even if not in original section header
·　Add dummy section to keep PE format consistency
·　Fix RVA in DataDirectory to follow ImageBase change
·　Auto calculate many parameters (RawSize, RawOffset, VirtualOffset, ...)

Screenshot



Supported Debugger

·　OllyDbg version 1.10 (tested 1.10)
·　OllyDbg version 2.01 EXPERIMENTAL (tested 2.01 alpha 4)
·　Immunity Debugger version 1.7x or (tested 1.73)
·　Immunity Debugger version 1.8x or higher (tested 1.83)

This archive file contains plugin DLLs for each debuggers.

- v0.70 / 2011-07-01

Add: Support Immunity Debugger version 1.7x or lower
Improve: Data Directory rebuild option (support ImportTable)
Improve: Image Base Address alignment checking
Improve: Virtual Offset Address alignment checking

- v0.80 / 2011-07-15

Add: Support Immunity Debugger version 1.8x or higher
Improve: Data Directory rebuild option (check rewrite range)
Improve: Always round up PE header size to 0x1000 (ImportRec not extend itself)
Bugfix: TLS Data Directory ignored

- v0.90 / 2011-08-24

Add: Support OllyDbg version 2 plugin interface (EXPERIMENTAL)
Improve: Rewrite Wide/Multibyte-Character support code
Improve: Decode CopyOnWrite page attribute
Bugfix: Detect working directory

- v0.92 / 2012-10-09

Improve: Support OllyDbg version 2 plugin new interface  

132K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3I4G2N6#2)9J5k6s2m8J5K9h3!0J5K9i4c8&6i4K6u0W2j5i4m8H3M7%4m8G2N6q4)9J5k6h3y4G2L8g2)9J5c8X3!0D9L8s2W2V1N6h3#2H3k6i4S2Q4x3V1k6a6L8r3I4&6c8s2g2E0M7p5g2^5i4K6u0W2P5X3W2H3

[培训]内核驱动高级班，冲击BAT一流互联网大厂工作，每周日13:00-18:00直播授课