Results 1 to 4 of 4

Thread: how to break when a memory address is accessed?

  1. #1
    mcnorth
    Guest

    how to break when a memory address is accessed?

    I'm working with RtlRunEncodeUnicodeString and have identified how charachters are encrypted and where they are store. (starting with 17bde8) Now I want to break when they are being accessed by the program. I thought about break on access (from memory map) but I think that pertains to the entire block of memory and I want to break when specific bytes are accessed.

    Any ideas or suggestions? Be forwarned (as if it isn't obvious) I'm really green at this.

    Thanks!!!
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  2. #2

    how to break when a memory address is accessed?

    in the dump mark the bytes you need, and right click BREAKPOINT -MEMORY ON ACCESS and stop only when read, write of execute only the bytes tou mark.

    Ricardo

  3. #3
    Super Moderator
    Join Date
    Dec 2004
    Posts
    1,486
    Blog Entries
    15

    how to break when a memory address is accessed?

    also hardware break on read (byte word dword) should do the trick of breaking on specific memory

  4. #4
    mcnorth
    Guest

    how to break when a memory address is accessed?

    Awesome! Thanks guys.
    I promise that I have read the FAQ and tried to use the Search to answer my question.

Similar Threads

  1. Finding memory address of a .net application at runtime?
    By mr_tex in forum The Newbie Forum
    Replies: 0
    Last Post: November 24th, 2013, 20:43
  2. Conditional Hardware break on memory address not working
    By OpenStrife in forum OllyDbg Support Forums
    Replies: 3
    Last Post: March 18th, 2013, 23:06
  3. Locating reference to memory address in stack of another thread
    By shasderias in forum Advanced Reversing and Programming
    Replies: 9
    Last Post: July 2nd, 2010, 13:07
  4. How to break on memory creation?
    By zambuka42 in forum The Newbie Forum
    Replies: 5
    Last Post: June 7th, 2008, 01:08
  5. ASProtect high memory address trick
    By Solomon in forum Malware Analysis and Unpacking Forum
    Replies: 0
    Last Post: March 18th, 2004, 11:15

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •