I loaded an MS-Windows executable in Ollydbg. But as soon as I hit run from the
Debug menu a message shows up:
Breakpoint set at address 76A010B1 is corrupt (contains hex code instead of int3 ...)
And the program doesn't run, rather it breaks to Ollydbg. I am puzzled. What is really going on? I see an
isdebugger call. Fixing it, also, it doesn't run the program. I suppose it's using some advanced anti debugging technique. Any suggestions?
Here is the log from windbg:
(a9c.1fd4): Break instruction exception - code 80000003 (first chance) *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\Windows\SYSTEM32\ntdll.dll - *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\Windows\SYSTEM32\KERNEL32.DLL - eax=7fe73000 ebx=00000000 ecx=00000000 edx=775edbeb esi=00000000 edi=00000000 eip=7757f9fc esp=0be4ff58 ebp=0be4ff84 iopl=0 nv up ei pl zr na pe nc cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00000246 ntdll!DbgBreakPoint: 7757f9fc cc int 3