![]() |
|
|
|
#1
|
|||
|
|||
|
Hi Padawan,
Okie i installed Olly... at the last exception, i set trace condition by Ctrl T with EIP within range 40100 to 600000 then press Ctrl F11, boom olly breaks at OEP so i am not sure what you did wrong, maybe different OS... i am on win 2k3 server... What exactly is the problem? the tracer never stop and PHPProc runs normally or Olly throw up an exception? Okie, looks like you need to find more tutorial ... which tuts r u reading now? Labba one? Ricardo one or which one? there are lots of aspr tuts out there and it is important to read more, each explain thigns slightly differently...You are right about the exception couting method ... in fact you dont need to count, just keep pressiing Shift F9 until the app runs, then u look at Olly screen and see the address of the last exception, then when you re run simply stop at that same address and start tracing ... then again this kind of trick is not educational simply because you dont learn anything about unpacking...About seh, I am sure there tutorials out there mentioning it and how it clear debug register to prevent hardware breakpoints... that is exactly why aspr throw up so many exceptions .. to prevent cracker from placing hardward breakpoints... Regarding exception generated by program, yes the OS will call the debugger to handle exception first, then the debugger has the option to handle this exception or not, if not then the exception is passed onto the handler within the program itself... when you press Shift F9 in Olly, you are saying that Olly do NOT handle exception caused by Aspr, let Aspr handle itself... hope this is clear ![]() Yep sorry abt memory and hardware breakpoint confusion.. i didnt try olly before and the way Olly name it is slightly different... |
![]() |
| Thread Tools | |
| Display Modes | |
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| Intel Processor Tracing | Computer_Angel | General Discussion | 3 | 12-04-2015 03:36 |
| Full version of Project-52 and Project-AVR | Yaumen | General Discussion | 0 | 08-10-2004 16:27 |