Anonymous
December 28th, 2002, 01:32
I need to analyse an export from inside ntoskrnl.exe. Unfortunately, as OllyDbg tries to open the file for debugging, it's unable to disassemble it - all I get is an error message from OllyDbg saying "Unable to open file for debugging".
It would be soooo good if OllyDbg had modes, eg. "Disassemble" and "Debug". In the disassemble mode, the debugging capabilities wouldn't be available, but disassembly/analysis still is. This would allow me to at least see what is going on, even if I can't debug it.
I know OllyDbg is a debugger, but its disassembly and code-analysis features are superb on their own!
It would be soooo good if OllyDbg had modes, eg. "Disassemble" and "Debug". In the disassemble mode, the debugging capabilities wouldn't be available, but disassembly/analysis still is. This would allow me to at least see what is going on, even if I can't debug it.
