Almost every day that Im working it seems Im discovering something new and very cool about OllyDbg that I didn't realise even existed, and as there are a lot of features I still haven't had time to play with, I know there's a hell of a lot of features and capabilities I'm still unaware of.

My question to this forum is -- what is your favourite feature of this excellent debugger, and why?

My favourite feature? The single step function :-)

Other than that, I find the "Log breakpoint" feature extremely useful too.

wayne, i have same exact feeling all the time. ollydbg seems to have an endless list of wonderful surprises for us one of my fav is the ability to bring up a box with a list of all references in the program to a specific address. but of course that just reminds me that another favorite feature is how ollydbg shows you search results in windows where you can easily set breakboints.

Hi All Friends

This my first message,

- Realtime thread debugging,
- Copy current code disasm or hex to file (or clipboard)
- UDD file! nice idea!
- and more nice functions

a little idea for plug-in coders. My old dos debugger support "macro log" capality. I think for ollydebug very compality for macrolog.

Example macro log:

401000 EIP point
401000 10xF8key ; trace 10x
401010 01xF7key ; trace into call
5a4da1 GetEAX ; EAX = ?
....

like

have nice days

(Excuse me my bad English,)

Can you expand on your explanation of "macro log" ?

Hi,

Just a idea. I guess usefull packet, crpty or modified files. Like keypress or mouse activity recording. For examples 10 times F8 key press:

<pre>10x[f8]</pre>

or mouse leftclick and modify reg.eax value :
<pre> mod[eax] </pre>

My old dos debugger was TRdos. TRDos script macro example :

<pre>
reload
BPXB F3 A4
G
R GS CX
BP 100
G
R CX GS
N example.com
W
</pre>

have nice days,

CYDONIA: Anastasius Focht is working on a scripting plugin that will do this kind of stuph ... also me and gigapede were thinking at the same ideea

yup, same here. Would be useful for packed programs to get back to the a certain state in the code without having to do all the crap usually involved in unpacking.