Log in

View Full Version : Custom logging in run trace ?


MrSmith
July 28th, 2006, 03:33
Hi,

I wonder if it is possible to customize what is logged at each step of a run trace. I saw in the debugging options that I can choose to have the commands and flags logged, but what about memory locations ?

So, is it possible to log the content of memory location X at each step of a run trace ?

(I know about memory breakpoints, but logging would be something different).

Cheers,

MrSmith

Ricardo Narvaja
July 28th, 2006, 06:09
put a BPM ON ACCESS with the script and make a loop making RUN and each step log the value you want till a condition for exit of the trace.

Ricardo

MrSmith
July 28th, 2006, 06:48
Yes, that's an idea.
Is there a limit to the size of the memory block on which I set the bpm ?

MrSmith

Ricardo Narvaja
July 28th, 2006, 07:00
the limit is a section in ollydbg, but there are a plugin for put a bpm in contiguous section (in the +BP OLLY included).

Ricardo

blabberer
July 28th, 2006, 14:51
you can use ctrl+t and in the
command is one of box
pass all pseudo data access commands

like

mov [const],R32
mov r32,const
mov r32,[const]
rep movs stos scas etc



runtrace will stop on all of them
Log data, item 2
Address=00401007
Message=Conditional pause: Command is mov [const],R32

Log data, item 1
Address=00401011
Message=Conditional pause: Command is mov [const],R32


you can crank a simple odbgpausedex handler that logs all of them