View Single Post
  #1  
Old 09-26-2005, 13:57
peleon peleon is offline
Friend
 
Join Date: Sep 2003
Posts: 174
Rept. Given: 0
Rept. Rcvd 7 Times in 1 Post
Thanks Given: 0
Thanks Rcvd at 7 Times in 7 Posts
peleon Reputation: 7
Attaching a process with Olly

Hello,

This might be a lame question for many of you...but it's killing me

I have a simple test application which executes an infinite loop with "JMP EIP"

Now, I attach the process with Olly and it breaks OK. If I press run, the application keeps executing the "JMP EIP". Ok, this is what I expects.

Now it comes my problem. I pause the application and I change the register EIP to point to the next instruciton after the "JMP EIP" to allow the application keep going as normal.

When I change the EIP and I press "Run", Olly shows a message "Your program is suspended and can't run. Please, resume main thread". So, Olly shows the Threads Window and I select "Resume" in the main thread. After this, Olly shows the process as "Running" but the process does not go further from the instruction after the JMP EIP. If I pause the process again, I can see that it is in the same address after the JMP EIP and the Trap Flag is set!!!

Does anyone know what's going on in here? Am I missing something or this is a Olly bug?

Thanks.
Reply With Quote