Hi,

I need a small help, I hope disavowed know the answer. I searched a lot but cant find the suitable tool or plugin for this.

I just wants to copy the large amounts of bytes from VA to another VA because the quantity of bytes is very large and selecting with mouse in olly will spare my lots of time. I have to select those bytes when the exe just unpack in the memory so you guys can imagine at that moment lots of memory of my pc would be in use. Selecting with mouse is irritating because it is quite slow due to that. I need a plugin or tool which just copy those of amount of from one VA to another va so that i can save them in notepad and proceed towards my unpacking.

Any help would be appreciated.

Thank you

http://www.woodmann.com/collaborative/tools/WinHex

Thank you disavowed, I know about this tool but as I said while unpacking I have to copy those bytes, it means bytes are initially encrypted then they decrypt when the application unpack in the memory so at that moment i have to copy. i think it is just tool to copy hex bytes from a standard exe.

It sounds like you're manually unpacking something. Why not use a tool specific to that? Like OllyDump.

Also, in most data editing tools (hex editors, memory editors, ...), starting at the beginning and dragging to the end is not the only way of selecting bytes. You can most times also select the byte at the beginning, scroll to the end, and shift-click the end byte.

WinHex can copy data directly from the memory space of any process, you just have to freeze the process at the right point first (i.e. at OEP).

Yep.. what dELTA said.

Thank you to all for helping me.