How to flush memory to raw file in Ollydbg?

Question

I am debugging a process and want to dump a piece of memory, for example, from memory address 0x4160d8 to 0x4200d8 , to a file.

How can I get a raw file containing only bytes? I tried using the OllyDump plugin, but it creates an executable with PE headers.

Answer 1

You can flush memory to a raw file using Olly by following these steps:

• Select the area of ​​memory that you want to reset.
• right-click and select "Open in a separate dump window"
• right-click the dump in a new window and select "Backup> Save data to file ..."