|
is not a detection is a bug of olly when display the FLD instruction, i use two ollies, one debugging the second, look for the string FLD, put hardware bpx on access in the 2 ocurrences, and when i load OLLY CRASH in the second olly, the first stop in 416e59, i make a trace into logging to a file till the problem and is generated a exception in 4aa2ee, i change the previous JE to JMP for avoid the exception, and with this olly can open this ollycrash and themida perfect, and execute without problem, only can be viewed in the instruction some trash but work, is only the display not the execution.
Ricardo Narvaja
|