📚 OpenRCE is preserved as a read-only archive. Launched at RECon Montreal in 2005. Registration and posting are disabled.








Flag: Tornado! Hurricane!

 Forums >>  Debuggers  >>  OllyDbg Breakpoint speed issue. ?

Topic created on: February 27, 2008 03:34 CST by dezuzi .

It would be great if someone knew the answer to this problem I and most likely more people are having.

When attaching OllyDbg to large processes and placing a breakpoint somewhere in the process it ends up having issues.

To be exact if it breaks on the breakpoint the first time I have no problems whatsoever with the speed that it breaks.

However when I would turn the breakpoint off and turn another one on anywhere in the process it seems to take a very long time to initialise when it breaks.

This can even slow down to a point where the break wont initialise at all and me ending up with a locked up OllyDbg and locked up process(ofcourse). (However closing down OllyDbg with the X button seems to shut down perfectly)

I can't seem to figure out the problem here, I hope someone can help me :)

Thank you in advance,

Dezuzi

  jms     February 27, 2008 21:06.46 CST
It really depends on what function calls you are setting breakpoints on. For example, if you are setting breakpoints on Rtl* functions, because they can be called quite a few times, you can deadlock or corrupt the process.

  Sellmi     February 28, 2008 06:49.12 CST
I have the same issue , sometime olly freezes when it hit any bp. i saw this very often while debugging games or services.

A solution would be great.

  jms     February 28, 2008 12:12.06 CST
The only time I have really had problems with Olly doing this is when debugging a .NET based executable. Not sure why, but it happened. Try ImmDbg and see if you get the same issue, worst comes to worse you can always use WinDbg to try the same thing.

If all three freeze or something happens then most likely they are implementing some anti-debugging tricks. Let me know how it goes.

Note: Registration is required to post to the forums.

There are 31,328 total registered users.


Recently Created Topics
[help] Unpacking VMP...
Mar/12
Reverse Engineering ...
Jul/06
let 'IDAPython' impo...
Sep/24
set 'IDAPython' as t...
Sep/24
GuessType return une...
Sep/20
About retrieving the...
Sep/07
How to find specific...
Aug/15
How to get data depe...
Jul/07
Identify RVA data in...
May/06
Question about memor...
Dec/12


Recent Forum Posts
Finding the procedur...
rolEYder
Question about debbu...
rolEYder
Identify RVA data in...
sohlow
let 'IDAPython' impo...
sohlow
How to find specific...
hackgreti
Problem with ollydbg
sh3dow
How can I write olly...
sh3dow
New LoadMAP plugin v...
mefisto...
Intel pin in loaded ...
djnemo
OOP_RE tool available?
Bl4ckm4n


Recent Blog Entries
halsten
Mar/14
Breaking IonCUBE VM

oleavr
Oct/24
Anatomy of a code tracer

hasherezade
Sep/24
IAT Patcher - new tool for ...

oleavr
Aug/27
CryptoShark: code tracer ba...

oleavr
Jun/25
Build a debugger in 5 minutes

More ...


Recent Blog Comments
nieo on:
Mar/22
IAT Patcher - new tool for ...

djnemo on:
Nov/17
Kernel debugger vs user mod...

acel on:
Nov/14
Kernel debugger vs user mod...

pedram on:
Dec/21
frida.github.io: scriptable...

capadleman on:
Jun/19
Using NtCreateThreadEx for ...

More ...


Imagery
SoySauce Blueprint
Jun 6, 2008

[+] expand

View Gallery (11) / Submit