Log in

View Full Version : easy but how ?????


black_ice
November 8th, 2002, 17:24
hi guys
i don't know how to make infinite loop to dump the software from the memory

please tell me how to do that



norby
November 8th, 2002, 18:34
Hi!

in SoftICE, type "a eip"

then you can change instructions,

type "jmp eip"(this will make infinite loop), then enter, then enter

and then you can dump

btw: dont forget to change the bytes back in the dumped file, if your changed instruction was a part of your dump

Norby

JMI
November 8th, 2002, 18:41
black_ice:

This is an easy subject and one that YOU can find by doing YOUR OWN search. Put "dumping + OEP" in the left side of the search function and then READ some of the threads. YOU can also find information on what to do here in many tuts you will find on the "What New" page on the +Fravia site, which is linked at the top of the page. Yes, if would be FASTER if we just told you the answer, but you wouldn't really learn how to help yourself. Now come on, make an effort.

Regards.

OPPS! Too slow. norby, you really didn't help black_ice, you only encouraged him to be lazy and not do his own work on a very easy subject. This is supposed to be the "Newbie Forum" not the "Do the work for me" Forum.

rgbsky
November 8th, 2002, 21:13
please see here:

1¡¢a eip jmp eip£¨use before OEP£©
2¡¢/suspendx pid£¨use "proc" to get the pid£© £¨SoftIce£©
3¡¢suspend £¨TRW£©