This plugin is process memory dumper for OllyDbg and Immunity Debugger.
Very simple overview: OllyDumpEx = OllyDump + PE Dumper - obsoleted + useful features
Features
Various debuggers supported
Select to dump debugee exe, loaded dll or non-listed module
Search PE File from memory
Multiple Dump mode. Rebuild for typical PE dump, Binary for PE Carving
PE32+ supported (Search and Binary Dump mode only available on 32bit debugger)
Native 64bit process supported (IDA Pro, WinDbg and x64dbg)
ELF supported (both of 32bit and 64bit)
Standalone version available
Dump any address space as section even if not in original section header
Auto calculate many parameters (RawSize, RawOffset, VirtualOffset, ...)
Recent Changes & Archives- v1.64 / 2018-05-10
Improve: Follow IDA 7.1 changes which break callui backward compatibility layer
Improve: Dump feature available even if debuggee not running (IDA)
Add: Support IDA Freeware version 7.0 (EXPERIMENTAL)
发表于 2018-5-12 19:37
