Search code examples
reverse-engineeringollydbg

OllyDbg catching/throwing exceptions

Every time I am trying to debug something with OllyDbg 1.10 (on Windows 7 32-bit), it keeps throwing exceptions for no reason. I skip them with Shift + F7/F8/F9, and at the end it throws an exception saying EIP = 00000000.

Can someone please tell me how to fix it?

Solution

  • The following applies to OllyDbg 1.10; for other versions, YMMV.

    Options > Debugging Options > Exceptions

    enter image description here

    This setting allows you to set OllyDbg to ignore each/any exception thrown (use specific numbers for specific exceptions or 00000000 .. FFFFFFFF to ignore all).

    Also, for your convenience, I'd recommend the following settings for OllyDbg, in case you don't have them:

    Start analysis of main module

    Options -> Debugging Options -> Analysis 1

    enter image description here

    With this option activated Olly will analyze the program being debugged at start.

    Highlighting jumps and calls

    Options -> Appearance -> Defaults -> Default syntax highlighting -> Jumps'n'calls

    Or, for current window, using right click:

    enter image description here

    Show jump path

    Options -> Debugging Options -> CPU

    enter image description here

    With this options you can see the path of the jumps.

    Finally, I recommend virtualize XP inside your Windows 7 with a tool of your choice, as it may make your debugging easier.