📚 OpenRCE is preserved as a read-only archive. Launched at RECon Montreal in 2005. Registration and posting are disabled.








Flag: Tornado! Hurricane!

 Forums >>  Debuggers  >>  Info about olly plugins

Topic created on: February 21, 2006 12:01 CST by Devoney .

Hi there,

I was wondering if there is a plugin whichs copys the code olly is running over in run time.
Example code:

PUSH 06
CALL Function1
CMP EAX, 3
JE <line 7>
PUSH 0
CALL ExitProcess
CALL Function2

the thing I need as a plugin (which I really want to write myself if it does not exist yet) is that it copys the code where olly runs over.

SO it would be this if the jump was not made:

PUSH 06
CALL Function1
CMP EAX, 3
JE <line 7>
PUSH 0
CALL ExitProcess

And it would be this if the jump was made

PUSH 06
CALL Function1
CMP EAX, 3
JE <line 7>
CALL Function2

preferable that the values of the registers are commented in the same line, and if jumps are made or not.

For example in a time trial program you can use this to compare what changes are made when the time trial is ended and you get a different screen or whatever. You can then make a program to automaticly compare the code and show the difference.

Hopefully someone can help me with creating this plugin myself or that someone can give me this plugin.

Thanks in advance and for reading this,
Grtz Devoney

  p0l     February 21, 2006 12:37.08 CST
hi,

Have you tried using Olly's run trace feature? I think it already does what you want. Here's the link for the tutorial:

http://www.ollydbg.de/Tut_rtr.htm

Note: Registration is required to post to the forums.

There are 31,328 total registered users.


Recently Created Topics
[help] Unpacking VMP...
Mar/12
Reverse Engineering ...
Jul/06
let 'IDAPython' impo...
Sep/24
set 'IDAPython' as t...
Sep/24
GuessType return une...
Sep/20
About retrieving the...
Sep/07
How to find specific...
Aug/15
How to get data depe...
Jul/07
Identify RVA data in...
May/06
Question about memor...
Dec/12


Recent Forum Posts
Finding the procedur...
rolEYder
Question about debbu...
rolEYder
Identify RVA data in...
sohlow
let 'IDAPython' impo...
sohlow
How to find specific...
hackgreti
Problem with ollydbg
sh3dow
How can I write olly...
sh3dow
New LoadMAP plugin v...
mefisto...
Intel pin in loaded ...
djnemo
OOP_RE tool available?
Bl4ckm4n


Recent Blog Entries
halsten
Mar/14
Breaking IonCUBE VM

oleavr
Oct/24
Anatomy of a code tracer

hasherezade
Sep/24
IAT Patcher - new tool for ...

oleavr
Aug/27
CryptoShark: code tracer ba...

oleavr
Jun/25
Build a debugger in 5 minutes

More ...


Recent Blog Comments
nieo on:
Mar/22
IAT Patcher - new tool for ...

djnemo on:
Nov/17
Kernel debugger vs user mod...

acel on:
Nov/14
Kernel debugger vs user mod...

pedram on:
Dec/21
frida.github.io: scriptable...

capadleman on:
Jun/19
Using NtCreateThreadEx for ...

More ...


Imagery
SoySauce Blueprint
Jun 6, 2008

[+] expand

View Gallery (11) / Submit