Results 1 to 3 of 3

Thread: Conditional BP

  1. #1

    Conditional BP

    Hello,

    I have a question about conditional BP's

    Say I have the following:
    Code:
    Call EAX
    I can place conditional BP e.g. where EAX=='some value'

    But say I want to identify where EAX is being set to 'some value', what options do I have?

    Essentially I want to be able to place a conditional BP on a register, but that doesn't appear to be possible. Are there any plugins that provide this function?

    Cheers

  2. #2
    <script>alert(0)</script> disavowed's Avatar
    Join Date
    Apr 2002
    Posts
    1,281
    You can use OllyDbg's conditional run trace for this.

  3. #3
    Run trace does look to be the answer.

    However when I try to use 'trace into' from OEP the app abends.

    'Trace over' doesn't abend, but the condition is not being triggered.

    If I set a BP before the area of interest, and run the app until the BP, and then try using run trace, similar behaviour. 'Trace over' doesn't abend, but does not break on condition.

    'Trace into' sets the CPU usage to 100% and the app does not behave normally.

    Have you had any experience with these types of issues?

Similar Threads

  1. Conditional Break?
    By RITZ in forum OllyDbg Support Forums
    Replies: 5
    Last Post: June 30th, 2006, 11:17
  2. Conditional BPs in WinDbg
    By omega_red in forum Tools of Our Trade (TOT) Messageboard
    Replies: 2
    Last Post: November 16th, 2005, 03:28
  3. Conditional breakpoints on flags?
    By Anonymous in forum OllyDbg Support Forums
    Replies: 3
    Last Post: September 8th, 2003, 01:57
  4. Conditional breakpoints?
    By Anonymous in forum OllyDbg Support Forums
    Replies: 2
    Last Post: August 13th, 2003, 13:21
  5. Conditional Breakpoint
    By Anonymous in forum OllyDbg Support Forums
    Replies: 5
    Last Post: January 27th, 2003, 11:06

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •