Log in

View Full Version : Olly Problem


%UNDEFINED%
March 7th, 2004, 13:39
Tool - Olly 1.09d
OS - WinME (I have all the Band-Aid's from WindowsUpdate)
Target - Yeah Right, like I am going to post it
Protection: Aspr (Problem Occurs with 1.2x - 1.3x RC4)

Ok while attempting an unpack I get a Memory Access Violation
Code:


011F33D8 3100 XOR DWORD PTR DS:[EAX],EAX

EAX = 00000000
DWORD PTR DS:[EAX] = ????????



Ok, thats where I land, I know I can use ALT + F9 or pass it to the prog, but does nothing when I do, EIP doesn't change. I can hold down ALT + F9 and it will switch to "Running" and the back to "Paused" without prossesing any further instructions.

If I set up under Debugging Options to ignore Memory Access Violations and automatically pass them to the prog, it runs the prog normally.

Why is it Olly can automatically send to prog and it works, but I can't?
I even tried Assembling it to:

Code:


011F33D8 33C0 XOR EAX,EAX

EAX = 00000000



And the prog crashes.

What am I missing?

evlncrn8
March 7th, 2004, 14:15
at a quess i'd say it's trying to trip a fault so the exception handler takes over
so you could try seeing whats at fs:0 and working from that to set a bpx on its seh

mmk
March 7th, 2004, 14:19
Quote:
[Originally Posted by %UNDEFINED%]Ok, thats where I land, I know I can use ALT + F9 or pass it to the prog,

...

What am I missing?


Should be shift+F7/F8/F9.

%UNDEFINED%
March 7th, 2004, 14:25
Yeah thats what I meant...sorry I am at work,
I have to limit my time online.
I was typing fast without thinking I guess

%UNDEFINED%
March 7th, 2004, 14:29
I guess the point of my question would be why can't I send Violations to prog?