Go Back   Exetools > General > Community Tools


Thread Tools Display Modes
Old 10-13-2021, 17:41
jonwil jonwil is offline
Join Date: Feb 2004
Posts: 374
Rept. Given: 2
Rept. Rcvd 21 Times in 9 Posts
Thanks Given: 2
Thanks Rcvd at 59 Times in 32 Posts
jonwil Reputation: 21
Windows debugger that can run code on breakpoint?

Is there a Windows debugger where I can set a breakpoint on a specific instruction (in a binary that I have been reverse engineering with IDA in this case) and then instead of stopping and waiting for user action, run some code that can access the current registers and memory of the process (and do some things with the results like writing some things to a log) before letting the program continue to run?

The binary is a 32-bit x86 binary and I want to do this break-then-log-stuff-then-continue in a few different places.
Reply With Quote
Old 10-13-2021, 20:00
Turkuaz Turkuaz is offline
Join Date: Sep 2017
Posts: 146
Rept. Given: 3
Rept. Rcvd 6 Times in 3 Posts
Thanks Given: 33
Thanks Rcvd at 134 Times in 47 Posts
Turkuaz Reputation: 6
Ollydbg conditional log breakpoint
Reply With Quote
Old 10-13-2021, 23:22
Stingered Stingered is online now
Join Date: Dec 2017
Posts: 168
Rept. Given: 0
Rept. Rcvd 1 Time in 1 Post
Thanks Given: 209
Thanks Rcvd at 114 Times in 56 Posts
Stingered Reputation: 2
Is this what you are referring to?



Last edited by Stingered; 10-13-2021 at 23:46.
Reply With Quote
Old 10-14-2021, 05:18
chants chants is offline
Join Date: Jul 2016
Posts: 631
Rept. Given: 20
Rept. Rcvd 41 Times in 25 Posts
Thanks Given: 578
Thanks Rcvd at 936 Times in 428 Posts
chants Reputation: 41
WinDbg has "debugger command programs" https://docs.microsoft.com/en-us/windows-hardware/drivers/debugger/debugger-command-program-examples and allows such macros. Not sure if they can be triggered on breakpoints but it should be possible. Ollydbg and x64dbg I reckon are just as capable of being scripted.
Reply With Quote
Old 01-17-2022, 06:43
lahma lahma is offline
Join Date: Jul 2016
Location: US
Posts: 10
Rept. Given: 0
Rept. Rcvd 1 Time in 1 Post
Thanks Given: 5
Thanks Rcvd at 19 Times in 6 Posts
lahma Reputation: 1
I think you might find WinDBG's javascript debugger scripting useful. You can have a script trigger upon a breakpoint, do whatever you need to do (log data, modify values, etc), and the script can then decide whether or not to continue running the app based on whatever logic you provide it. You can find the documentation for it here:
Reply With Quote

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
Whether IDA can set memory breakpoint when use Remote Linux debugger? bridgeic General Discussion 7 09-10-2014 18:07
(Q) .NET App Source Code Protection (Silverlight, Windows Phone, Windows 8) delidolunet General Discussion 7 08-02-2013 10:33

All times are GMT +8. The time now is 12:43.

Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX
( 1998 - 2021 )