View Single Post
  #1  
Old 09-30-2004, 09:27
Wackyass
 
Posts: n/a
Breaking DLL with OLLY

Hello all,

I used to use SoftIce on another box which had Win98 but I refuse to put DriverStudio on my XP box so I am happy with Olly and the rest of the gang of tools. HOWEVER, I have a certain application which loads dll's of course on initial loading BUT there are DIFFERENT dlls that load after program execution which I wish to break into to in particular 1 that is packed with Neolite 2 but then there is a custom packing routine after that which I want to investigate. I would have changed to CC on program start and intercept with Softice and I ALREADY tried the option in OLLY to break on new module load which did not work. The main executable is hanging when I shift F9 and then olly hangs saying that it's receiving no response. I also replaced dll entry bytes to EB FE and couldn't attach to it either. Any other suggestions would be greatly appreciated. Also, I have already successfully unpacked and examined the Neolite part no problem with LoadDLL in Olly which is how I found out about the custom packed part. But after rebuilding the imports I still couldn't get a dead listing but the Resources and Text strings were all available.

Thanks ahead of time!
Wackyass

Last edited by Wackyass; 09-30-2004 at 10:43. Reason: Forget to mention I tried LoadDLL
Reply With Quote