Ollydbg target runs automatically

Question

I have a target that automatically runs after I load it in to Ollydbg. This form, doesn't stop at the entry point (but continues to execute and at a point it pauses, I have to press shift+f9.)

Is there any way to debug it ?

score 5 · Answer 1 · answered Jun 08 '13 at 09:52

5

set the radio button system breakpoint in debugging options

alt+o -> events -> make first pause at -> system breakpoint

then analyze if TLS Callbacks , DllInit Routines exist in the executable these routines can alter the execution behavior

answered Jun 08 '13 at 09:52

blabb

1,346
9
11

FYI, OllyDbg 2 supports automatic breakpoints on TLS callbacks. See here for an example. – Jason Geffner Jun 08 '13 at 15:13

score 1 · Answer 2 · answered Jun 08 '13 at 09:56

1

Well, I found this type of automatic run when a .NET target is loaded in Olly. If you are trying to debug a .NET target, consider Reflector instead of Olly.

answered Jun 08 '13 at 09:56

Blue Indian

41
2

Ollydbg target runs automatically

2 Answers2