Release OllyDumpEx 1.30 (IDA) by Low Priority

[Storm Shadow]

This plugin is process memory dumper for OllyDbg, IDA Pro (retail and freeware) and Immunity Debugger. Very simple overview:

OllyDumpEx = OllyDump + PE Dumper - obsoleted + useful features

Features:

- OllyDbg version 2 plugin interface supported
- IDA Pro Retail and Freeware version plugin interface supported
- Select to dump debugee exe, loaded dll or non-listed module
- Search MZ/PE Signature from memory
- Multiple Dump mode. Rebuild for typical PE dump, Binary for PE Carving
- PE32+ supported (Search and Binary Dump mode only available on 32bit debugger)
- Native 64bit process supported (IDA Pro only)
- Dump any address space as section even if not in original section header
- Add dummy section to keep PE format consistency
- Fix RVA in DataDirectory to follow ImageBase change
- Auto calculate many parameters (RawSize, RawOffset, VirtualOffset, ...)

== Changelog
- v1.30 / 2013-06-28
Add: Support WinDbg plugin interface (both 32bit and 64bit)
Improve: Add plugin name and version directory to archive file
Bugfix: Data after section headers in PE Header has been ignored
Bugfix: Fix SizeOfHeaders inconsistency
- v1.20 / 2013-05-27
Add: Support IDA Pro plugin interface (both Retail and Freeware version)
Add: Support native 64bit process dump (IDA Pro only)
Improve: Change dialog position to center of parent window
Improve: Add debug toggle menu to dialog system menu
Improve: Section size handling single section belongs to multiple memory segments
Bugfix: Zero virtual size section handling

 

[Rip Cord]

Works great on version 1.10 of Ollydbg, didn't know that version 2 of Ollydgb was out. Thanks.

 

[Nihilus]

http://low-priority.appspot.com/ollydumpex/