I am quite sure that this question has been answered thousand of times but it is a bit difficult for a non-english to find proper keywords for the search engine. Apologies in advance.

I need to study the behaviour of 3 dll in OllyDbg but every restart deletes dll bps. I enabled "ignore path/timedatestamp/crc ..." in the security tab of olly but i didn t get any success.

I read somewhere that olly Breakpoint manager plugin could help but after reading the whole documentation i cant understand how to save bps (maybe i am doing something wrong).

Any suggestions are welcome.

Alex

OllyDbg Breakpoint Manager is well-documented, comes with several examples, and is open-source. If you can't understand the documentation or examples, look at the source code.

you need mark the four first options in DEBUGGING-OPTIONS-SECURITY, next delete all the bps, and put only the needed bps, with the care of don't putting bps in unpacked code, (virtual allocations or no existent code when the program start) if olly detect when restart only one of this bad bps, tell you olly found a bp bla bla ... and disable all BPs goods and bads.
And look the option APPAERENCE- DIRECTORIES-PLUGINS and UDD have valid paths for store.

If you need put a bp in unpacked code use Hardware Breakpoints.

ricnar

grazie maestro

and please dont stop releasing your concursos

thanks , you know about crackslatinos montly contests? hehe, incredible.

ricnar

Just a footnote, with unpacked code bp's set in dll's will magically appear upon loading of the dll, if it's not loaded initially in Olly.

SiGiNT

yes i know but i thought that it was olly bp manager fault...
Anyway thanks.

Alex