Exetools

Exetools (https://forum.exetools.com/index.php)
-   General Discussion (https://forum.exetools.com/forumdisplay.php?f=2)
-   -   How to debug a program spawned by another program? (https://forum.exetools.com/showthread.php?t=14589)

bunion 11-17-2012 08:45

Olly v2 allows debbuggin child proceses.. dunno if it help in your case though

bunion

piccolo 11-19-2012 03:07

I hope you checked out codeproject as well. There is some great info (with sources of course) on api hooking. You'd need some adaptation for windows 7 and you would need to disable the antivirus as well. Some av's can catch api hooking.

WhoCares 11-21-2012 10:02

use windbg, set ".childdbg 1"

mr.exodia 11-22-2012 00:41

You could try putting a breakpoint somewhere on the internals of OpenMutexA (for the child) and CreateMutexA for the father.

Also some tool you might like: http://www.mediafire.com/?p8xf39q81ppzx5n (source included)

Greetings

Chobitx 11-25-2012 18:39

A few days have passed, I am eager to know if my suggestion help you, how about the result? Does the breakpoint get hit if we follow the steps above? -_-


All times are GMT +8. The time now is 00:25.

Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2026, vBulletin Solutions, Inc.
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX