Results 1 to 3 of 3

Thread: ntdll problem

  1. #1
    bcavlin
    Guest

    ntdll problem

    Hi,

    did anyone had a problem when runing trace into with some program (any), and had exception : access violation when reading FFFFFFFF

    at point in ntdll

    77FA5559 64:A1 00000000 MOV EAX,DWORD PTR FS:[0]

    FS is 0000?

    I am using Win XP Home SP1 on laptop.
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  2. #2
    bbotiano
    Guest

    ntdll problem

    I also cannot Trace Into any application without generating errors - even the run trace example on the OllyDbg HomePage

    First error is always access violation in Kernel32.DLL

    However if in trace options I set it to Trace Over System DLLs it seems to work

    XP Pro SP1 on desktop.

    Any clues?
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  3. #3
    Super Moderator
    Join Date
    Dec 2004
    Posts
    1,525
    Blog Entries
    15

    ntdll problem

    First error is always access violation in Kernel32.DLL

    options--->debugging options (alt+o) --->exceptions --->
    check mark ignore access violation in kernel32.dll
    it should be checked by default did you uncheck ???

    fs:0 to fs: blah are called as PROCESS_ENVIRONMENT_BLOCK aka PEB
    to get an overview find MATT PIETREKS article on MSJ (i think way back in may 1998 issue )

Similar Threads

  1. ntdll.RtlCreateUserThread problem
    By vadimpo in forum OllyDbg Support Forums
    Replies: 4
    Last Post: September 5th, 2009, 22:29
  2. Funny API function inside ntdll.dll
    By OHPen in forum Blogs Forum
    Replies: 11
    Last Post: October 30th, 2007, 04:59
  3. Program keeps bouncing me to ntdll.dll when run from OllyDbg
    By ljre24 in forum OllyDbg Support Forums
    Replies: 6
    Last Post: January 2nd, 2007, 19:32
  4. Thanks +Tsehp, problem solve Isp problem :)
    By esther in forum Advanced Reversing and Programming
    Replies: 1
    Last Post: October 28th, 2000, 07:29

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •