Log in

View Full Version : Dumping in XP with ollydmp or others dumpers


Ricardo Narvaja
February 9th, 2003, 21:47
I dump for years in Windows 98, manually, with procdump, lordpe, memory dumper, pupe,ollydmp and many manual dumpers, all create a dump and i in W98 fix the new entry point, load a dump in olly and stops in the new entry point correctly, now i fix the dump with revirgin or other reconstructor for repair de IT, in W98 dont problem and work fine this system.
In XP when i dump with any dumper of this list, the dump noy only not function and say this error The application failed to initialize properly (0xc0000005), close etc etc, in OLLYDBG the exceptions are before of the start on the entry points, out of olly is the same and the exception is the same

The application failed to initialize properly (0xc0000005)

I know is not a trouble with ollydmp, and not a OLLY trouble, in same unpackers in 98 function well in xp say the same error, i think is a trouble with XP for dumping unpacking, but i don't how unpack how in W98, now.

Ricardo

Ricardo Narvaja
February 9th, 2003, 21:58
Sorry i discover how, after dum with the lord PE, INTELLIDUMP OPTION,and next rebuild and starts in olly perfectly in the same for in W98, sorry.

Ricardo

_Servil_
February 10th, 2003, 10:11
hello, just a thought, thos truble caused by VirtualProtect(Ex), wchch imo on Win9x crap (sorry ;o)) has no effect on avoiding to dump. (?)

the intellidump, i didn't tried yet as i prefere usual ways, will try it next time having trouble to dump.

Ricardo Narvaja
February 10th, 2003, 14:48
I try and all dumpers are the same error, and all repair with the option of lord PE rebuilder, i try and dump with ollydmp, lorde or any packer and the error is the same and with the option rebuilder this error desapear and run equal W98.

Ricardo

Ricardo Narvaja
February 10th, 2003, 15:31
The true is i try and with all dumpers the error C0000005, the solution is repair with the option of LORD PE, rebuilder,this is if the dump is made for LORD PE or OLLYDMP, or any unpacker this error is solved with this .

Ricardo Narvaja