CODEWITHSUNDEEP
debuggingexeexecutabletraceollydbg
user3295980
user3295980

Reputation:

Can OllyDbg trace a launched exe?

If my product, MyApp.exe, is being debugged by OllyDbg (or any other debugger really), but the exe launches another one (such as MakeSerial.exe); will OllyDbg start debugging the newly-launched exe too? Or does it just trace MyApp.exe only? Thanks.

Upvotes: 2

Views: 6663

Answers (3)

blabb
blabb

Reputation: 9007

and with the older ollydbg (version 1.10 ) goto openrce.org and download the 

Modified commandline plugin by anonymouse

hit alt+f1 and type childdbg 1 (log window should show debugging of child window enbaled)

now ollydbg 1.10 will also be able to catch the child process

Upvotes: 3

Extreme Coders
Extreme Coders

Reputation: 3511

Yes, the newest version of OllyDbg has an option to automatically debug child processes.

enter image description here

Upvotes: 8

typ1232
typ1232

Reputation: 5607

No, OllyDbg will not automatically debug child processes.

You could however look for the CreateProcess call that launches the child process and edit it's parameter dwCreationFlags in include the flag CREATE_SUSPENDED (0x00000004). Then you can either detach from the parent process or open a new instance of OllyDbg to attach to the child process and resume/debug it.

Upvotes: 4

Related Questions