Alternative possibilities:
- I'm daft;
- OllyDbg's "Warn when breakpoint is outside the code section" option can't (always?) be truly disabled in odbg110; or,
- This is not the droid (i.e. option) that I'm looking for.
In any case:
Set sh = CreateObject("WScript.Shell") While True Call sh.SendKeys("%Y") Call WScript.Sleep(100) Wend
And goodbye to this dialog when attempting to find the OEP by tracing into:
Next episode, we answer the question: did OllyDump ever finish? ;-)
Edit 10/14/2016: It never finished, so I ended up doing it manually by catching the unpacker in a memcpy and dumping its payload from poi(esp+4). You live, you learn.
Edit 10/14/2016: It never finished, so I ended up doing it manually by catching the unpacker in a memcpy and dumping its payload from poi(esp+4). You live, you learn.
No comments:
Post a Comment