News:

Masm32 SDK description, downloads and other helpful links
Message to All Guests
NB: Posting URL's See here: Posted URL Change

Main Menu

Olly is back

Started by jj2007, November 26, 2013, 07:28:49 AM

Previous topic - Next topic

jj2007

That was long overdue: September 27, 2013 - version 2.01

Feels much faster - it seems Oleh has made lots of improvements under the hood :t

include \masm32\include\masm32rt.inc
; in RichMasm, place Olly in \Masm32\OllyDbg\ollydbg.exe, insert a breakpoint and hit F6
.code
start:
  int 3        ; any "active" lowercase int 3 will trigger an Olly launch; comment out to run the exe normally
  MsgBox 0, "Hello World", "Masm32 is great:", MB_OK
  exit
end start

jj2007

Here is a little test showing a problem with local symbols:

include \masm32\include\masm32rt.inc
.code
MyTest proc  uses esi edi ebx MyFirstArg, MySecondArg
LOCAL lv1, rc:RECT, wc:WNDCLASSEX
  int 3
  lea eax, MyFirstArg
  lea ebx, MySecondArg
  lea edx, lv1
  lea esi, wc
  ret
MyTest endp
start:
       
invoke MyTest, 123h, 456h
        exit
end start


Results:
Olly 2:
0040101A                ³.  8D45 08             lea eax, [myfirstarg]
0040101D                ³.  8D5D 0C             lea ebx, [mysecondarg]
00401020                ³.  8D55 FC             lea edx, [local.1]
00401023                ³.  8D75 BC             lea esi, [local.17]

Olly 1:
0040101A                    8D45 08              lea eax, [arg.MyFirstArg]
0040101D                    8D5D 0C              lea ebx, [arg.MySecondArg]
00401020                    8D55 FC              lea edx, [local.lv1]
00401023                    8D75 BC              lea esi, [local.wc]


This is using /Zi for the assembler, and /debug /debugtype:cv for the linker. I have tried other combinations but no solution yet...

According to Olly history:
OllyDbg 2.00 alpha 8
..
Use symbolic names for ARG and LOCAL

Zen

JOCHEN,   
When I'm into some serious overkill,...I open the exe with IDA Pro and then Olly.

K_F

How do you trace in IDA Pro ? I see something about linking a debugger into IDA - would this be Olly... ?

Olly is straight forward and easy!
'Sire, Sire!... the peasants are Revolting !!!'
'Yes, they are.. aren't they....'

xanatose

Excellent debugger.
A pity that is only 32 bit.

TWell


Vortex

Quote from: TWell on December 15, 2013, 09:49:47 PM
Quote from: xanatose on December 15, 2013, 07:38:16 PM
Excellent debugger.
A pity that is only 32 bit.
Look here

TWell, the 64-bit is a joke :

QuoteWhat is even not an alpha, buggy as hell and can't debug? - OllyDbg 64! (This  is a joke).

Greenhorn

QuoteDecember 20, 2013 - first breakpoint on 64-bit OllyDbg was hit!


Data storage - 95%
Disassembler - 90%
Assembler - 90%
Expressions - 60%
Dialogs - 30%
Debugging engine - 20%
Analysis - 0%
Data base (known data) - 0%
Let's wait 'n see ...
Kole Feut un Nordenwind gift en krusen Büdel un en lütten Pint.