Results 1 to 5 of 5

Thread: How to find all rows/lines with a specific memory address?

  1. #1
    tDJ
    Guest

    How to find all rows/lines with a specific memory address?

    Say there is a line in Olly like this:
    CMP WORD PTR DS:[4800A1],0FFFF

    If I want to know where "[4800A1]" is set (like "MOV WORD PTR DS:[4800A1],0FFFF" or "MOV WORD PTR DS:[4800A1],AX"), then I have to know all "[4800A1]" rows/lines. Is it possible to find them all at once with Olly?
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  2. #2
    SKiLLa
    Guest

    How to find all rows/lines with a specific memory address?

    You mean that you want all the code-references to that specific address ?

    There are a million ways to reference an address, so just binary-searching for that particular address probably won't find you all references, especially not if the code is trying to hide 'the address'.

    IDA has some nice 'reference' & 'graph' features, but it probably won't help you that much. I guess just setting a breakpoint on the address and letting the program run or trace is the easiest method.
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  3. #3
    tDJ
    Guest

    How to find all rows/lines with a specific memory address?

    It's enough to see all the ones that are visible in Olly. In this case I usually disassemble the program with W32Dasm, save the comments, open the saved ASM-file in a texteditor and search there for the address. But I thought it would be great if this also could be done simply in Olly.
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  4. #4
    garryw
    Guest

    How to find all rows/lines with a specific memory address?

    ?, right click on [4800A1] select Find References to | address constant.
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  5. #5
    tDJ
    Guest

    How to find all rows/lines with a specific memory address?

    I tried it already, but then only the selected command is found. Same with "Find references to | Selected constant", and "Search for | All constants".
    I promise that I have read the FAQ and tried to use the Search to answer my question.

Similar Threads

  1. How to find what writes a particular RAM address in IDA?
    By Maytrick in forum The Newbie Forum
    Replies: 1
    Last Post: March 15th, 2013, 23:16
  2. how to find a address
    By terb in forum OllyScript Plugin
    Replies: 1
    Last Post: November 2nd, 2005, 06:41
  3. How to find specific instruction?
    By CFSworks in forum OllyDbg Support Forums
    Replies: 2
    Last Post: May 7th, 2005, 06:36
  4. How to watch a specific range of memory ?
    By Xtra in forum OllyDbg Support Forums
    Replies: 2
    Last Post: May 1st, 2005, 01:59
  5. Low-level (not necessarily process specific) memory editor for Windows XP?
    By Six Black Roses in forum Tools of Our Trade (TOT) Messageboard
    Replies: 6
    Last Post: January 1st, 2004, 19:33

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •