Log in

View Full Version : Conditional breakpoint on memory read access*


ollynewby
March 24th, 2003, 03:52
Hi,

Can anyone tell me if it's possible to set a conditional breakpoint on memory read access and how that condition would look like?
To clarify, this is what I'd like to do:
I want to keep an eye on an memory address location, but I don't want Ollydbg to pause everytime when this data is being read. I want to exclude the pausing when it's being read by another module or in some parts of the program?(in my case, the data is being read for screenpainting by GDI.EXE, and I'm not interested in that part).

Thanks for your comments and/or suggestions

TBD
March 24th, 2003, 05:28
ollynewby: as this question is not plugin related, i leave it in "general" and deleted from "plugins"

you cannot put conditional breakpoint on memory only normal breakpoints.
a solution is to find reference to memory location from your program (CTRL+R) and conditional breakpoint on all locations that access your memory address.

ollynewby
March 25th, 2003, 06:12
Thanks for your proposal, TBD. I do know the exact adress of the location, but when it breaks during read access, the code is always using relative addresses, such as
"CMP BYTE PTR DS:[ECX+EAX], 0D". The references to such a "memory location" are too many to check through (more than 2 pages). I probably have to rethink my strategy and try a completely different approach. The CTRL-R feature can indeed be very useful in many circumstances.