7

I have a target that automatically runs after I load it in to Ollydbg. This form, doesn't stop at the entry point (but continues to execute and at a point it pauses, I have to press shift+f9.)

Is there any way to debug it ?

2 Answers 2

5

set the radio button system breakpoint in debugging options

alt+o -> events -> make first pause at -> system breakpoint

then analyze if TLS Callbacks , DllInit Routines exist in the executable these routines can alter the execution behavior

1
  • FYI, OllyDbg 2 supports automatic breakpoints on TLS callbacks. See here for an example. Jun 8, 2013 at 15:13
1

Well, I found this type of automatic run when a .NET target is loaded in Olly. If you are trying to debug a .NET target, consider Reflector instead of Olly.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.