#1
|
|||
|
|||
OllyDbg help.
I'm trying to familiarise myself with the use of OllyDbg and I've hit a snag.
When I attach to an app I want to reverse, Olly reports that the attached process is paused at NTDLL.DLL BdgBreakPoint. RETN INT3 RETN Is there a API call to check for the presence of a debugger and halt the process? Can anyone tell me how to check/circumvent this? 5Alive. |
#2
|
|||
|
|||
I now realise that dbgbreakpoint is a api call, however OllDbg when I view the ntdll.dll executable module, there are no calls to it, this is also true of the main exe I'm working with.
I've tried a google search but this hasn't help. Thanks again, 5Alive. |
#3
|
||||
|
||||
dbgbreakpoint is called from the exception port which is part of the process you have attached to and is activated when ollydbg attached to the process. You need to run the app until the context in back in user code, then you can browse and step code all you wish.
|
#4
|
|||
|
|||
Quote:
5Alive. |
Thread Tools | |
Display Modes | |
|
|
Similar Threads | ||||
Thread | Thread Starter | Forum | Replies | Last Post |
Best ollydbg 2 mod | Zeocrack | General Discussion | 7 | 10-08-2023 17:57 |
64-bit OllyDbg v2.01 | giv | General Discussion | 37 | 06-29-2014 16:38 |
how to do this in OllyDbg et al? | boya | General Discussion | 6 | 08-30-2005 20:11 |