Log in

View Full Version : OllyDbg and WinXP ?


Anonymous
November 13th, 2002, 16:34
Hi,
last week I set my computer on fire, I set it up with XP. So far so good (or not so good). Everytime I'm debuging some programs OllyDbg stops in the main thread but not in the program.
It look's like this:

7FFE0304 C3 RETN
7FFE0305 9C PUSHFD
7FFE0306 810C24 00010000 OR DWORD PTR SS:[ESP],100
7FFE030D 9D POPFD
7FFE030E C3 RETN
7FFE030F 8BD4 MOV EDX,ESP
7FFE0311 0F05 SYSCALL
7FFE0313 C3 RETN
7FFE0314 90 NOP
7FFE0315 9C PUSHFD
7FFE0316 810C24 00010000 OR DWORD PTR SS:[ESP],100
7FFE031D 9D POPFD
7FFE031E C3 RETN
7FFE031F FF00 INC DWORD PTR DS:[EAX]
7FFE0321 0000 ADD BYTE PTR DS:[EAX],AL
7FFE0323 0000 ADD BYTE PTR DS:[EAX],AL
7FFE0325 0000 ADD BYTE PTR DS:[EAX],AL


Is there a trick how to stop and how to get into the real code?
Hope there is a solution.
Sincerly, ovco

Wayne
November 13th, 2002, 18:57
Press Ctrl+E (or go View | Executable Modules). Then just select the .exe you want to look at

luucorp
December 18th, 2002, 01:36
this is address in KERNEL32.DLL
you press F8 --> your real code

xxxxx
December 18th, 2002, 03:16
Actually you must press ALT+F9 and you will return back to your code

Ricardo Narvaja
December 18th, 2002, 18:47
I go to VIEW-MEMORY and put a BPM in a section CODE of the program, RUN and OLLY stops in the first sentence when return to the executable.

Ricardo Narvaja