Log in

View Full Version : Bytes copy


w_a_r_1
April 3rd, 2010, 08:39
Hi,

I need a small help, I hope disavowed know the answer. I searched a lot but cant find the suitable tool or plugin for this.

I just wants to copy the large amounts of bytes from VA to another VA because the quantity of bytes is very large and selecting with mouse in olly will spare my lots of time. I have to select those bytes when the exe just unpack in the memory so you guys can imagine at that moment lots of memory of my pc would be in use. Selecting with mouse is irritating because it is quite slow due to that. I need a plugin or tool which just copy those of amount of from one VA to another va so that i can save them in notepad and proceed towards my unpacking.

Any help would be appreciated.

Thank you

disavowed
April 3rd, 2010, 10:06
http://www.woodmann.com/collaborative/tools/WinHex

w_a_r_1
April 3rd, 2010, 22:25
Thank you disavowed, I know about this tool but as I said while unpacking I have to copy those bytes, it means bytes are initially encrypted then they decrypt when the application unpack in the memory so at that moment i have to copy. i think it is just tool to copy hex bytes from a standard exe.

arc_
April 4th, 2010, 05:12
It sounds like you're manually unpacking something. Why not use a tool specific to that? Like OllyDump.

Also, in most data editing tools (hex editors, memory editors, ...), starting at the beginning and dragging to the end is not the only way of selecting bytes. You can most times also select the byte at the beginning, scroll to the end, and shift-click the end byte.

dELTA
April 4th, 2010, 14:21
WinHex can copy data directly from the memory space of any process, you just have to freeze the process at the right point first (i.e. at OEP).

disavowed
April 4th, 2010, 20:02
Yep.. what dELTA said.

w_a_r_1
April 7th, 2010, 10:57
Thank you to all for helping me.