[General] OllyDbg register math menu

User Tag List

Results 1 to 5 of 5
  1. #1
    Torpedoes's Avatar ★ Elder ★ Doomsayer
    Authenticator enabled
    Reputation
    1147
    Join Date
    Sep 2013
    Posts
    956
    Thanks G/R
    148/415
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)

    [General] OllyDbg register math

    Greetings fellow engineers, I'm working on reversing a piece of WoW code but I feel a bit limited due to my lack of OllyDbg experience (and ASM experience). Say I'm debugging the following:

    Code:
    CMP	DWORD PTR SS:[EBP+8], 0
    JE	SHORT 00CDDB28
    MOV	EAX, DWORD PTR DS:[ECX]
    ADD	EAX, DWORD PTR SS:[EBP+8]
    When looking at the first instruction, I want to see the value of [EBP+8]. When looking at the third instruction I want to see the value of [ECX]. I know I have the registers off to the side but does OllyDbg have some kind of expression window where I could type [EBP+8] (or DWORD PTR SS:[EBP+8]) and have it spit out the result? If not, what are my options? Because doing it manually is rather annoying, not to mention confusing.

    [General] OllyDbg register math
  2. #2
    573737534947's Avatar Corporal
    Reputation
    38
    Join Date
    Jul 2013
    Posts
    20
    Thanks G/R
    0/0
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    At least OllyDbg2 has Watches which seems to do exactly what you want, plus when you mark an instruction the operands are evaluated below the CPU Section with the current register values. Conditional log breakpoints are also quite useful.

  3. #3
    Torpedoes's Avatar ★ Elder ★ Doomsayer
    Authenticator enabled
    Reputation
    1147
    Join Date
    Sep 2013
    Posts
    956
    Thanks G/R
    148/415
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    Originally Posted by 573737534947 View Post
    At least OllyDbg2 has Watches which seems to do exactly what you want, plus when you mark an instruction the operands are evaluated below the CPU Section with the current register values. Conditional log breakpoints are also quite useful.
    Thanks for reminding me, I remember using it a while back but I guess I forgot.

  4. #4
    Kanyle's Avatar Corporal
    Reputation
    9
    Join Date
    Jul 2011
    Posts
    19
    Thanks G/R
    1/0
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    Not sure if this is what you were asking, but you can select the hex dump window, Ctrl + G and type in EBP + 8, as an example. (OllyDbg v2)

  5. #5
    Torpedoes's Avatar ★ Elder ★ Doomsayer
    Authenticator enabled
    Reputation
    1147
    Join Date
    Sep 2013
    Posts
    956
    Thanks G/R
    148/415
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    Originally Posted by Kanyle View Post
    Not sure if this is what you were asking, but you can select the hex dump window, Ctrl + G and type in EBP + 8, as an example. (OllyDbg v2)
    Yep that's what I used to do, but the watch list is what I was looking for. I was just being an idiot and forgot about it.

Similar Threads

  1. Tanaris General Chat in StormWind?
    By Clocky in forum World of Warcraft General
    Replies: 6
    Last Post: 12-06-2006, 02:36 AM
  2. General Rajaxx
    By Snor11 in forum World of Warcraft Guides
    Replies: 0
    Last Post: 11-04-2006, 06:53 PM
  3. Possible ideas to get users to register..
    By Matt in forum Suggestions
    Replies: 15
    Last Post: 08-22-2006, 09:36 AM
  4. Info on taking Ragnaros (And other MC general info)
    By Cush in forum World of Warcraft Guides
    Replies: 4
    Last Post: 05-28-2006, 03:53 AM
  5. bug up General Rajaxx in AQ20
    By impulse102 in forum World of Warcraft Exploits
    Replies: 2
    Last Post: 05-05-2006, 04:43 PM
All times are GMT -5. The time now is 05:04 PM. Powered by vBulletin® Version 4.2.3
Copyright © 2025 vBulletin Solutions, Inc. All rights reserved. User Alert System provided by Advanced User Tagging (Pro) - vBulletin Mods & Addons Copyright © 2025 DragonByte Technologies Ltd.
Google Authenticator verification provided by Two-Factor Authentication (Free) - vBulletin Mods & Addons Copyright © 2025 DragonByte Technologies Ltd.
Digital Point modules: Sphinx-based search