Results 1 to 5 of 5

Thread: Olly not stopping at program start !?

  1. #1
    MrSmith
    Guest

    Olly not stopping at program start !?

    Hi,

    I'm using Olly1.10 under XPSP2 and I recently had two programs that didn't stop at the program start.
    They loaded and then simply continued to start. Furthermore, no disassembled code appeared in Olly. One was written in .NET the other in VC++.

    Needless to say that I couldn't debug the programs. Any idea what could cause these problems ?

    Many thanx,

    MrSmith
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  2. #2
    Naides is Nobody
    Join Date
    Jan 2002
    Location
    Planet Earth
    Posts
    1,647
    Forget about the .NET program. Olly won't be of much help, anyway, so read some RETeam and Tut4you assays on .NET RCE.

    The other one if it indeed is VC++ (Don't trust PEID or other utils, disassemble it with IDA to make sure). There are other ways to make stop the program near the start:Look in Options -> Debugging Options ->Events.

    Play around with the settings of "make the first pause at".

    Worse case scenario stop at each dll loading until the program code is available in memory, place hardware breakpoints into known API's or in the code near or at the nominal entry point.

  3. #3
    me :)
    Join Date
    Mar 2006
    Location
    Croatia
    Posts
    25
    if u need

    .NET tutorials, 1-9 by tKC

    Code:
    http://www.filesend.net/download.php?f=2d54224fd6404f916540371b02270353

  4. #4
    TLS.

  5. #5
    marciano
    Guest
    You can try PEBrowse Professional Interactive Debugger for the .NET executable.

    The debugger fully supports Microsoft .NET managed processes and seamlessly allows interop or mixed-mode debugging.
    Get it from http://www.smidgeonsoft.prohosting.com/pebrowse-pro-interactive-debugger.html
    I promise that I have read the FAQ and tried to use the Search to answer my question.

Similar Threads

  1. Program start up sequence in Olly
    By draw4 in forum The Newbie Forum
    Replies: 9
    Last Post: January 5th, 2012, 09:52
  2. Attach to process WITHOUT stopping
    By w00b in forum OllyDbg Support Forums
    Replies: 6
    Last Post: February 2nd, 2008, 11:38
  3. Replies: 7
    Last Post: December 22nd, 2004, 12:03
  4. how can i start cracking dos program
    By dipeshrestha in forum Malware Analysis and Unpacking Forum
    Replies: 6
    Last Post: December 11th, 2001, 00:10
  5. SI loader doesn't always break at program start ??
    By Mr. Smith in forum Tools of Our Trade (TOT) Messageboard
    Replies: 2
    Last Post: December 5th, 2000, 17:08

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •