Results 1 to 2 of 2

Thread: Run Trace: stangest behavior

  1. #1
    Anonymous
    Guest

    Run Trace: stangest behavior

    Hello,

    I haven't used much Run Trace feature in Ollydbg and today playing around with it while trying to understand how it works I noticed that it has indeed the strangest of behaviors.
    I noticed that:

    1) statement addresses are not correct -> when I dump to file the run trace I see that each statement is "given" the address of the statement two rows before (also all addresses referenced in my executable are wrong when dumped to file for example in jumps)
    2) statements dumped to file sometimes are even wrong (this happenes rarely):
    - in run trace -> 0061F71F CALL DWORD PTR DS:[EC+705]
    - when run trace dumped to file -> 0061F71F MOV ECX,DWORD PTR DS:[ESI]
    3) apart these bugs (strange that no one noticed them before) I can't seem to understand what is happening in run trace .... I run it, and afterwards I go thru it step by step (I have even syncronized the CPU pane with the run trace listing to better understand what happens) and while sometimes it follows correctly the program execution other times it starts jumping around as if the application where a multithreaded application ... but this is not the case. Following the run trace listing it seems that while one procedure is executed completely and correctly, other procedures get executed only in the few lines. Also register values get are reported being updated by statements that don't touch them at all .......
    Honestly I can't understand what Run Trace is sometimes doing.
    Can anyone help me understand how to use it and how to interpret the listing it generates???

    JimmyBoy
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  2. #2
    Anonymous
    Guest

    Run Trace: stangest behavior

    .. other procedures get executed only in THEIR FIRST few lines ...

    JimmyBoy
    I promise that I have read the FAQ and tried to use the Search to answer my question.

Similar Threads

  1. Run Trace
    By tutenKam in forum The Newbie Forum
    Replies: 7
    Last Post: January 19th, 2014, 01:28
  2. Question to Trace-Log
    By squareD in forum OllyDbg Support Forums
    Replies: 3
    Last Post: September 22nd, 2005, 06:52
  3. Run Trace question
    By Anonymous in forum OllyDbg Support Forums
    Replies: 3
    Last Post: July 21st, 2003, 21:53
  4. Run Trace problem
    By Anonymous in forum OllyDbg Support Forums
    Replies: 3
    Last Post: June 26th, 2003, 08:07
  5. How to Trace Our Module
    By Zkhan13 in forum The Newbie Forum
    Replies: 3
    Last Post: May 3rd, 2003, 06:20

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •