Windows Debugger Early Adopters

Source: Internet
Author: User

Once upon a while, I also downloaded to see the essence of snow forum to see the relish. Unfortunately has not been hands-on debugging, learned the x86 assembly instructions also forget almost. Recently replaced the old machine's T4200 CPU with a more power-saving, lower-temperature P8800, specifically upgrading the Dell 1545 BIOS from A8 to A14 to support the new VT virtualization. Incidentally, Slic has been automatically upgraded to 2.0. However, after the upgrade, the Win7 Start menu sleep function can not be used, so the idea of downgrading the BIOS.

Under the 1545A13 BIOS, after the operation found a warning information, the main idea is not downgrade the installation, click on a certain exit. Ideally warning should be able to ignore Ah, online search for a bit, there is a/forceit command line switch, the actual implementation found no effect, decided on the debugger. Previously tried WinDbg, there is a very good function, you can access the specified range of memory to stop, unfortunately did not find how to enter the user state. Changed ollydbg, the Germans produced shareware, non-commercial do not want money, write e-mail registration is good.

Watching the ollydbg tutorial, basically a simple hack kick, first search all reference string, and then locate the code to refer to the location of the string, near the next breakpoint, finally run, observe the code path, to see which code branch jump to the string, and then change the jump is good. Then step by step to modify the 1545a13 drive:

Find all the strings, and then search in the popup window:

Then trace inside the disassembler:

So it's clear to position the MsgBox:

As you can see, there is a condition to jump Jle 00422E15 in the previous instructions that display the warning message. We change it directly to force jumps, bypassing the display of warning messages and the next exit process. Press F2 first to hit a breakpoint, and then press F9 to run directly to the directive:

Change instruction to JMP, address unchanged

So we see the dear Downgrade Brush BIOS interface, finish.

Windows Debugger Early Adopters

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.