I started playing with IDA debugger and I could not find an option to show the dump of a register or of a memory address (eg: in OllyDBG we use the "Follow Dump" option).

Can anyone tell me how to do that?

I wonder if this question is too low level that noone had interest to answer me... I'm still looking for it :[

Two ways.

1. In Static Disassembly

All you have to do is switch the view to hex mode from View -> Open Subviews -> Hex Dump.

You can ALSO right click the hex dump and select it to sync with the disassembly whenever you scroll through it.


2. In Active Debugging (via default IDA Debugger)

By default, the debugger layout shows a hex dump. If not, reset the debugger view and you will get the hex dump.

Right click on hex dump and choose to display any register you want.

To display a particular address, select JUMP -> Go to Address from the menu and your hex dump will reflect that too.

I hope you got it.


The reason why probably no one answered you is because all this is in the help file accompanying IDA, OR can also be found out by googling.

Not to sound patronizing, maybe you need to learn how to use your tools well AND learn how to search, before you begin to crack.

Peace.

Have Phun

aimless, thank you for your help. IDA's debugger is very different from Ollydbg and I was kind lost on it :]