View Single Post
  #2  
Old 04-28-2004, 21:31
redbull redbull is offline
Friend
 
Join Date: Mar 2004
Posts: 160
Rept. Given: 17
Rept. Rcvd 5 Times in 4 Posts
Thanks Given: 3
Thanks Rcvd at 6 Times in 6 Posts
redbull Reputation: 5
The easiest way I can think of is
1. Run a Standard API spy utility...
2. Capture the parameters of the CreateProcess API call (eg exename and command line paramters)
3. Manually run that command line EXE with the command line paramters in your debugger and debug that application seperately.

Alternatively you can wait for the spawned application to run and then sue the "Attach to process" feature in Ollydebug
This attaches the debugger to a currently active process in memory. Here you can view the command line paramters and debug as normal.

Im sure IDA natively supports debugging a spawned process and will be interested to find out how.
Reply With Quote