April 23rd, 2007, 12:18 PM
when i was open the the program "xxx.exe" in ollydbg its show me the ntdll module so i right click and choosed :view->xxx module but than when i press F8 its back to the ntdll module so i cant trace the program sourcecode, how can i make this module view permanent ? (and because this i dont see that the registers value changed..)
May 25th, 2007, 07:02 PM
I dont think you can make it permanent. When you hit f8 it is going to the next instruction and in this case it is ntdll. It is just following the process.
May 25th, 2007, 07:32 PM
In this website, Pablo A Castillo has a ollydbg version modificated by "the shadow", this has more plugins and better interface.
this is the same ollydbg but enhanced!!
See the link in the last post.
By thehorse13 in forum The Security Tutorials Forum
Last Post: March 24th, 2006, 11:22 AM
By sec_ware in forum The Security Tutorials Forum
Last Post: October 14th, 2004, 09:06 PM