Log in

View Full Version : program runs when loading

alan
September 22nd, 2007, 09:14
When I load some programs into olly the program runs strait away and olly doesnt show the code until the program is exeted. It previously was OK can anyone tell me whas wrong.
Thank you
evlncrn8
September 22nd, 2007, 09:47
tls callbacks?
naides
September 22nd, 2007, 10:14
Or the brunt of the program happens on a .dll and is started from the .dll entrypoint, when it gets loaded by the .exe and leaves Olly holding the bag while the ".dll" returns, which only happpens when the meat of the program is done. . .

Change Olly settings to break on module load, and see if this is the case. . .
blabberer
September 23rd, 2007, 11:18
Quote:


"Anti" OllyDbg:

LoaderFlags and NumberOfRvaAndSizes were modified.. I have Reverse Engineered OllyDBG and Soft ICE to find a few tricks that could slow down the analysis of a binary. With those two modifications, Olly will pretend that the binary isn't a good image and will eventually run the application without breaking at its entry point. This could be a bad thing if you wanted to debug a malware on your computer, because you would get infected.



http://www.honeynet.org/scans/scan33/nico/index.html

may be some thing like this

or may be not but still some other problems like odd imagebase

http://www.woodmann.com/forum/showpost.php?p=42918&postcount=26
drizz
September 23rd, 2007, 14:39
Or maybe it's just .Net App? Use PEBrowseDbg.