How to dump memory into raw file in Ollydbg?

Question

I am debugging a process and want to dump a chunk of memory, say from memory address 0x4160d8 to 0x4200d8, into a file.

How can I get a raw file that includes just the bytes? I tried to use the OllyDump plugin but it creates an executable file with PE headers.

mox · Accepted Answer · 2015-12-19T13:24:01.507

5

You can dump memory into a raw file using Olly by following these steps:

select the memory area you want to dump
right-click and select "Open in a separate dump window"
right-click the dump in the new window and select "Backup > Save data to file..."

edited Dec 19 '15 at 13:24

answered Dec 19 '15 at 12:54

mox

1 Answers1