OllyDumpEx 1.4汉化
== Known Issue- Incorrect memory attributeOllyDbg 1.10 and Immunity Debugger Image type memory is always readonly.IDA Pro cannot detect Mapped type, Guard, CopyOnWrite attribute.- All Memory Search mode hit listed moduleOllyDbg 1.10 and Immunity Debugger not refresh t_memory table automatically.Open Memory window and refresh (ALT+M) before search.- Cannot search memory address greater than 0x7FFFFFFFOllyDbg 2.01h seems to be 0x80000000-0xFFFEFFFF memory range as kernel memory even if debuggee compiled with LARGEADDRESSAWARE option.- 64bit LimitationImageBase change not supported.- Dumped UPX binary not work (FAQ)Disable "Prefer Original Characteristics" option before dump.Problem is PE characteristics and memory access permission inconsistency.== Changelog- v1.40 / 2014-12-17Add: Support x64_dbg plugin interface (both 32bit and 64bit)Improve: Enable NXCOMPAT and DYNAMICBASE for plugin binaries- v1.30 / 2013-06-28Add: Support WinDbg plugin interface (both 32bit and 64bit)Improve: Add plugin name and version directory to archive file Bugfix: Data after section headers in PE Header has been ignoredBugfix: Fix SizeOfHeaders inconsistency- v1.20 / 2013-05-27Add: Support IDA Pro plugin interface (both Retail and Freeware version)Add: Support native 64bit process dump (IDA Pro only)Improve: Change dialog position to center of parent windowImprove: Add debug toggle menu to dialog system menuImprove: Section size handling single section belongs to multiple memory segmentsBugfix: Zero virtual size section handling- v1.12 / 2013-04-02Improve: Update to OllyDbg 2 latest version PDK (2.01h, PLUGIN_VERSION 0x02010001)Improve: Tested with latest version of debuggers (OllyDbg 2.01h and Immunity Debugger 1.85)Bugfix: Search greater than 0x7FFFFFFF memory address failed (IMAGE_FILE_LARGE_ADDRESS_AWARE)- v1.10 / 2013-03-24Add: Search type All MemoryAdd: Binary dump mode (no rebuild PE header, for before load image)Add: PE32+ support (Binary dump mode only)Add: Memory Address/Size parameters editable (dump source address)Improve: Add info message for Relocation Flag and EXE/DLL typeImprove: Large PE Header handling (larger than 0x1000)Improve: Check SectionAlignment and FileAlignment consistencyImprove: Reduce search memory usage (not depend on target memory size)Improve: Detect PE Header across different type pages (parse and search)Bugfix: Improper owner window handle Bugfix: Section not listed when belong memory range not existsBugfix: Almost features broken when memory window sort order changed- v1.00 / 2013-03-12Add: Selectable Base PE Header (Module/Memory/Address)Add: Search PE Header from memoryImprove: PE Source default change Disk to MemoryImprove: ASLR aware (except PE Source from Disk mode)Improve: Clear DynamicBase DllCharacteristics flag with Disable Relocation optionImprove: PE Header parse and modify more carefully (corrupt PE handling)Improve: Inherit selected address from memory windowBugfix: Fix Virtual Offset feature cause crash (divide by zero)Bugfix: Parse invalid sections cause crash- v0.92 / 2012-10-09Improve: Support OllyDbg version 2 plugin new interface- v0.90 / 2011-08-24Add: Support OllyDbg version 2 plugin interface (EXPERIMENTAL)Improve: Rewrite Wide/Multibyte-Character support codeImprove: Decode CopyOnWrite page attributeBugfix: Detect working directory (Wide-Character only)- v0.80 / 2011-08-01Add: Support Immunity Debugger version 1.8x or higherImprove: Data Directory rebuild option (check rewrite range)Improve: Always round up PE header size to 0x1000 (ImportRec not extend itself)Bugfix: TLS Data Directory ignored- v0.70 / 2011-07-07Add: Support Immunity Debugger version 1.7x or lowerImprove: Data Directory rebuild option (support ImportTable)Improve: Image Base Address alignment checkingImprove: Virtual Offset Address alignment checking- v0.60Improve: DeSelect is too slow when Auto Adjust Image Base option enabledAdd: Virtual Offset Address overlap checking- v0.50Improve: Data Directory rebuild option (support ResourceDirectory)Add: Auto Adjust Image Base Address option- v0.40Add: Data Directory rebuild option for RVA Adjust (support ExportTable)Improve: Invalid Image Base checkingImprove: Virtual Offset overlap checking- v0.30Add: Section sort by Virtual OffsetAdd: Fill Virtual Offset Hole option- v0.20Bugfix: Fix many bugs - v0.10Initial version
== Bug ReportPlease try latest version before report. With your environment detail, logs and way to reproduce. WEB:http://low-priority.appspot.com/ollydumpex/ MAIL: lowprio20/_at_/gmail/_dot_/com
谢谢汉化呀。。。。这个很给力呀。 感谢冷大分享，前排支持！ 汉化辛苦了！ 谢谢分享，支持了 不错，值得收藏使用。 是汉化版，谢谢楼主分享。 赞一个了，支持了 汉化的不错 用了 很强大哈哈