Welcome to the new Woodmann RCE Messageboards Regroupment

This Forum is now strictly read-only. New Memberships and Postings have stopped.

Remember that under the RCE Links tab are the classic sites:

Fravia's Archive of Reverse Engineering
Fravia's Searchlores
CrackZ's Reverse Engineering Page
Yates - Reverse-Engineering.info

Enjoy 20+ years of Reverse Engineering discussions!
So Long.

Unable to Write to....

Found a bug in OllyDbg? Post a report here.
Locked
Heste

Unable to Write to....

Post by Heste »

I've had this problem for a while now, but only in 1.10.
When i load a program into olly i almost always get this error: "Unable to write to memory of debugged process (7FFD6002..7FFD6002)", the strange thing is when i get this error i can debug program, but if i don't get this error i can't, program terminates with that debugged program was unable to pass exception or something.

Im running on WinXP SP2.
blabberer
Senior Member
Posts: 1536
Joined: Wed Dec 08, 2004 11:12 am

Unable to Write to....

Post by blabberer »

are you talking about one particular application ??
or all and every application generates this error
in my computer 7ffd6000 points to no where ?? :( and i dont think olly tries to write to process memory anywhere except in one place which is
peheader->addr of entry point (here it sets one time break point )

may be you should explain the circumstances better so as to get a coherent reply

may be you should remove all the plugins if you have from the folder
and put them back one by one and see if that error pertains to some plugins
i think some plugin in your setup is trying to write something to a hardcoded address using ollys writememory() api
i am saying this coz that message box is a part of writememory api exposed via plugin architecture
other than that i dont have an idea

i think some plugin is trying to patch ds:[fs:[18] + 30] + 2 and that address is hardcoded to 7ffd6002
Heste

Unable to Write to....

Post by Heste »

Damn, can't belive i didnt think about the thing with the plugins, it was some plugin called OllyHelper or something, dunno what it did, proberly from some package...

Thanks alot for your help =)
Locked