How to change value of EIP in ollydbg?

ollydbg
COMer picture COMer · Sep 30, 2010 · Viewed 8.8k times · Source

I double clicked on EIP in register window,but seems un-editable.

Why is EIP special?How can I change it?

alt text

Answer

abnev picture abnev · Sep 30, 2010

Find the location you want to set your EIP to, right click and select "New Origin Here". This will reset the EIP to the new address. You can confirm this by inspecting the registers at the top right.

In addition to the reply above, the EIP is basically the pointer to where the current line of execution is. It's used to keep a record of which instruction the program is executing in memory.

Related questions

JNZ & CMP Assembly Instructions

Correct me if I am wrong. This is my understanding of JNZ and CMP. JNZ - The jump WILL take place if the Z Flag is NOT zero (1) CMP - If the two values are equal, the Z Flag is …

Read More
How do I bypass IsDebuggerPresent with OllyDbg?

I don't really understand how to get around IsDebuggerPresent. I think I am supposed to find the registers used for debugging and then set it to 0 to trick IsDebuggerPresent, but I don't know how to do that. I tried searching …

Read More
How to setup plugins for ollydbg 2.x.x?

I downloaded the latest ollydbg 2.x version from its official site and some plugins from tuts4you. But how to enable/install the plugins?

Read More