I use 3 o 4 times de OLLY 1.09c and now this run de programs but dont stop more in the entry point and all is blank in the screen of the olly, is running the program well but don't display nothing.

Ricardo

can you be more specific, like what program it is , if with 1.09b shows the same error ... so we can reproduce the error

i dunno if this helps you ricardo but a program i was debugging had this same problem in win 98 not in win 2k the program was using some trick to hook the int 3 and putting an iret at the start of interrupt handler and using
some sidt maneovere

so the first time it will run properly and olly will stop at the programs entry point but the next time olly will not stop at the entry point at all but will proceed to execute the exe and the cpu will be blank but the taskbar at bottom will say running

but sidt manipulating is possible only on 9x and not in nt

The same program run well in 1.09b, i,m looking for that, i change the ini of the 1.09b to 1.09c maybe this
i unzip in other location and try again.

Ricardo

Well i unzip in other location and let the ini of the 1.0C and works well again, thanks.

Ricardo

Well a friend of mine report the same bug maybe is a plugin disturing, to me not repeat the bug but two persons with the same bug is extrange, i think is a plugin not compatible with 1.09c

Ricardo

I quit the plugins and all function well, i think the plugin isdebuggerpresent is not compatible with 1.09c, in any programs produce this bug.

Ricardo

It's a problem with the sleep time in the plugin.
If it is too short, process is not see as debuggee process !
I have modified sleep time to 1s and it works well for me !

And you post the plugim modified?

Ricardo

The plugin in

http://membres.lycos.fr/svtc/Progs/IsDebuggerPresent.rar
("http://membres.lycos.fr/svtc/Progs/IsDebuggerPresent.rar
")

is the modified version?

Ricardo

Hi Ricardo

Next version have option : Autohide O/N and you can choose your sleep time.
I hope it will be enought to work fine !!!
For the moment the version is not up to date.
I'll post here when it'll be uploaded in my page.

SV

It's done.
I really hope it will work fine for you now!!
If it doesn't uncheck autohide option

http://membres.lycos.fr/svtc
("http://membres.lycos.fr/svtc
")

plugin V1.2

Regard

SV

it doesn't work on a few of my programs - instead it creates access violation.

I think I have found problem by looking in sources. You get a pointer to the process block via FS segment in the CURRENT process and then write to that address which is in ANOTHER process. You need to get this address in the process being debugged, not the process which is the plugin, as they could be different.

Also, is it possible to also add ability to change Ollydbg window title? Some programs look for this window and bomb out if it's found.

Thanks!

I dont download bute my friends say works fine only has a little bug when you click in dump, the about appear.

Ricardo

Thanks for reporting bug.
Dump is fixed !
Pov i'll try in next version.

Pov

Could you try v1.3 beta which fix FS segment issue.
Thanks to test it with yours programs.
SV

sv: Thanks. Progs work now.