Results 1 to 3 of 3

Thread: olly "step over" plays instead

  1. #1

    olly "step over" plays instead

    Hi, when I use the "step over" button on a call, olly plays instead of stepping. It never used to do this and it's happening on more than one program..

    Any Ideas?

  2. #2
    Red wine, not vodka! ZaiRoN's Avatar
    Join Date
    Oct 2001
    Blog Entries
    It depends on the call you are stepping over. Try loading notepad.exe, you should see something like:
    01007505 PUSH EAX
    01007506 PUSH ESI
    01007507 PUSH EBX
    01007508 PUSH EBX
    01007509 CALL EDI
    0100750B PUSH EAX
    0100750C CALL NOTEPAD.01002936
    01007511 MOV ESI,EAX
    01007513 MOV DWORD PTR SS:[EBP-3C],ESI
    01007516 CMP DWORD PTR SS:[EBP-1C],EBX
    01007519 JNZ SHORT NOTEPAD.01007522
    0100751B PUSH ESI
    0100751C CALL DWORD PTR DS:[<&msvcrt.exit>]
    Try to F8 on call at 1007509 and 100750C. Olly will step on the first one but it will play notepad on the second call. Guess why?
    A mind is like a parachute. It doesnt work if it's not open.

  3. #3
    Super Moderator
    Join Date
    Dec 2004
    Blog Entries
    does play mean the exe is running like Zairon Says
    or do you mean ollydbg starts animating like it does on ctrl+f8
    if it is former then i will second Zairons
    if it is later see if you have some plugins that sets some OdbgPausedEx LABELs universally and forgets to clean it

Similar Threads

  1. Replies: 0
    Last Post: February 13th, 2014, 07:42
  2. how to generat "1" instead of "uncounted" license
    By joyung in forum The Newbie Forum
    Replies: 38
    Last Post: April 10th, 2012, 03:57
  3. Replies: 4
    Last Post: May 28th, 2009, 13:02
  4. Replies: 1
    Last Post: December 14th, 2007, 13:35
  5. Can't "Step" after "Pause
    By Lena in forum OllyDbg Support Forums
    Replies: 2
    Last Post: May 5th, 2004, 21:14


Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts