Log in

View Full Version : Detach from debuggee feature


focht
February 28th, 2004, 01:21
Greetings,

i'd like to see the ability to detach from debuggee (without exiting it of course).
Windows XP natively implements it and the VS.NET debugger uses it. Its quite handy feature.

Maybe ollydbg can implement it for xp+ based target systems.
I dont care about win9X (well for win2k i might be missing this one).
The menu command should be made only available when running on xp+ based systems.

The relevant API is in kernel32.dll:

"DebugSetProcessKillOnExit"
"DebugActiveProcessStop"

Of course it could be implemented in plugin but it might mess around with ollydbg's main debugger loop itself bring it into unstable state.

Regards,

A. Focht

Ricardo Narvaja
February 28th, 2004, 12:10
Is easy detach manually with OLLY.

Olly debug a PROGRAM

ATTACH OLLY with other OLLY2

When are atached, pause OLLY2 and write

PUSH HANDLEOFPROGRAM
Call DebugActiveProcessStop
NOP

and NEW ORIGIN HERE in the PUSH

BPX in THE NOP
RUN

when stop in BPX the program continue running and you can close the two OLLYS and the PROGRAM CONTINUE RUNNING WITHOUT EXIT.

Ricardo

focht
February 28th, 2004, 12:59
Hi,

of course it works that way you suggested. But i'm lazy

I'm debugging native NT services thats why i need that kind of stuff (without restarting the process itself when done).

I'll stick with VS.NET 2003 debugger for that purpose it has that functionality nicely integrated *button click*
Oh did i mention that remote pipe/tcp/ip debugging with VS.NET over internet is fun? It is
Maybe one day ollydbg gets that kind of functionality too...

Regards,

A. Focht

psyCK0
March 9th, 2004, 15:03
Olly says this feature will be available in v2.x