How to use Ollydbg with multi-threaded programs?

linux windows debugging reverse-engineering ollydbg
0x90 picture 0x90 · Mar 10, 2012 · Viewed 8.6k times · Source

  1. I have seen here that Olly supports a multi-threaded debugging, but I couldn't find any video or a good tutorial to see how to debug a multi-threaded program.

  2. I would like to know how to use Ollydbg and see the stacks and registers of all the current threads and distinguish which is running now.

  3. Is there any other good debugging tools I can use in Linux/Windows?

Answer

Kiran Bandla picture Kiran Bandla · Mar 13, 2012

Debugging multi-threaded applications is pretty straight forward in Ollydbg.

Open the Threads windows by clicking on the 'T' button or going to View > Threads. This window shows you all the current threads in the application.

The main thread is usually highlighted in the list. If you right click on the thread of your choice, you will see some options.

To see the thread in the CPU Window ( including stack and register info of the thread ) select the 'Open in CPU' option. You can also make some changes to the thread - like changing its priority, suspending it or even killing it.

Edit:
If you want to start debug the new thread directly from UserMode read this short guide.

Related questions

How to convert DOS/Windows newline (CRLF) to Unix newline (LF) in a Bash script?

How can I programmatically (i.e., not using vi) convert DOS/Windows newlines to Unix? The dos2unix and unix2dos commands are not available on certain systems. How can I emulate these with commands like sed/awk/tr?

Read More
How to find the mysql data directory from command line in windows

In linux I could find the mysql installation directory with the command which mysql. But I could not find any in windows. I tried echo %path% and it resulted many paths along with path to mysql bin. I wanted to …

Read More
What characters are forbidden in Windows and Linux directory names?

I know that / is illegal in Linux, and the following are illegal in Windows (I think) * . " / \ [ ] : ; | , What else am I missing? I need a comprehensive guide, however, and one that takes into account double-byte characters. Linking to outside resources is …

Read More