首页
社区
课程
招聘
Ollydump 3.00100 released
发表于: 2005-4-21 00:50 4851

Ollydump 3.00100 released

2005-4-21 00:50
4851
收藏
免费 1
支持
分享
最新回复 (12)
雪    币: 217
活跃值: (91)
能力值: ( LV4,RANK:50 )
在线值:
发帖
回帖
粉丝
2
Thank you
2005-4-21 09:00
0
雪    币: 200
活跃值: (10)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
3
支持~谁汉之?
2005-4-21 10:23
0
雪    币: 221
活跃值: (55)
能力值: ( LV4,RANK:50 )
在线值:
发帖
回帖
粉丝
4
E文也很简单啊,不需要汉化吧
2005-4-21 12:29
0
雪    币: 301
活跃值: (300)
能力值: ( LV9,RANK:290 )
在线值:
发帖
回帖
粉丝
5
辛苦了,支持
2005-4-21 13:41
0
雪    币: 200
活跃值: (10)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
6
因为OD是汉化版的~所以插件嘛~
自己汉了一个,参照上一个版本的描述语言
上传错误,放到10楼去了,汗...
2005-4-21 15:52
0
雪    币: 3178
活跃值: (2820)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
7
变化是?
下载先
2005-4-21 16:34
0
雪    币: 200
活跃值: (10)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
8
无法下载汉化版
2005-4-21 18:16
0
雪    币: 97697
活跃值: (200829)
能力值: (RANK:10 )
在线值:
发帖
回帖
粉丝
9
附件有问题。
2005-4-21 18:17
0
雪    币: 200
活跃值: (10)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
10
昨天还笑人家不会上传,今天轮到我了~~

附件:ha_ollydump300100.rar
2005-4-21 19:42
0
雪    币: 603
活跃值: (617)
能力值: ( LV12,RANK:660 )
在线值:
发帖
回帖
粉丝
11
多谢!!!
2005-4-23 09:25
0
雪    币: 221
活跃值: (100)
能力值: ( LV8,RANK:130 )
在线值:
发帖
回帖
粉丝
12
问一下。这个问题解决了吗?好决定我是否还要保留修改后的老版本
Parasyte
Member

Posted: 16 Apr 2005 06:10:31
Quote

Hello!
I recently used OllyDump 2.21b to unpack a program, and noticed the Import Rebuild feature contains a bug: When OllyDump calculates the new file size, it will not add the size of the import ordinals in the IID. In some cases (such as mine) the bug will cause the dumped executable to report errors such as "Cannot find <strange filename>.dll" That's because the IID is cut short! I guess the bug is rare enough that it was just never caught during development.

To fix the bug, insert the following into line 1261 of RebuildImport.c:

dwNewSectSize += sizeof(WORD);

Here's what the patched code should look like:

if(strlen(pApi->ApiName) != 0) {
dwNewSectSize += sizeof(WORD);
dwNewSectSize += (strlen(pApi->ApiName) + 1);
}

If you want to quickly patch OllyDump.dll without recompiling the source, you can make a few changes in a hex editor. Go to address 0x00005034, and REPLACE the data with the following:
90 90 90 90 90 90 05 03 00 00 00

Don't forget to backup your copy of OllyDump.dll before trying this.

There it is! Sorry if this has been mentioned before. But I figured I would point it out, in any case.

Ricardo Narvaja
Member

Posted: 16 Apr 2005 12:53:54
Quote

i always say new ollydmps have a problem but i don´t know waht the problem is, thanks.

Ricardo

Ricardo Narvaja
Member

Posted: 16 Apr 2005 14:49:46
Quote

i have the version 2.21.108 the fix is for this version?

Ricardo Narvaja

Parasyte
Member

Posted: 17 Apr 2005 03:32:29
Quote

Yes, that appears to be correct. I downloaded it (OllyDump) from the "Stuph" link at the top of this page.

Ricardo Narvaja
Member

Posted: 17 Apr 2005 05:47:49
Quote

thanks

Ricardo Narvaja

英文水平太臭,只好全部COPY过来了
2005-4-23 11:03
0
雪    币: 427
活跃值: (412)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
13
意思就是原版本有BUG,修复方法
用WINHEX编辑文件到地址0x00005034
替换为16进制
90 90 90 90 90 90 05 03 00 00 00
2005-4-23 17:10
0
游客
登录 | 注册 方可回帖
返回
//