How to change value of EIP in ollydbg?
Asked Answered
C

2

6

I double clicked on EIP in register window,but seems un-editable.

Why is EIP special?How can I change it?

alt text

Cumbrous answered 30/9, 2010 at 7:58 Comment(0)
S
14

Find the location you want to set your EIP to, right click and select "New Origin Here". This will reset the EIP to the new address. You can confirm this by inspecting the registers at the top right.

In addition to the reply above, the EIP is basically the pointer to where the current line of execution is. It's used to keep a record of which instruction the program is executing in memory.

Sate answered 30/9, 2010 at 8:14 Comment(0)
H
4

press Ctrl+g and type the value of EIP and press enter.

press Ctrl + * to set EIP.

The EIP register always contains the address of the next instruction to be executed.

Hautesavoie answered 25/8, 2015 at 11:39 Comment(1)
Thanks, this is really useful if you want to set EIP to an address that OllyDbg thinks is data (e.g. after injecting some code to the process)Meredithmeredithe

© 2022 - 2024 — McMap. All rights reserved.