![]() |
|
#1
|
|||
|
|||
|
OllyDbg question
I hope I'm not missing something too obvious, but..
In OllyDbg, I want to break on the execution of a function in a DLL. However, the symbols aren't loaded until the program actually executes and loads the dll. So, I'm currently breaking on load dll, and stepping through until the correct dll is loaded, at which point I can break on the referenced function. Is there a way to load the dll symbols without having to execute the program? Also, when I restart the program, the breakpoints are cleared. Is there some option I'm missing to retain the breakpoints? Thanks. |
|
#2
|
||||
|
||||
|
Use SoftIce. You can
:attach <your executable> :bpx <function> After that any time you start exe, SI automatically attaches itself to its address space. |
|
#3
|
|||
|
|||
|
From OllyDbg v1.10b and v1.10c, you can debug a DLL. Just open DLL file with OllyDbg from File-Open or from Explorer context menu (v 1.10c). With OllyDbg 1.10c, you can break at Entry Point of DLL. You can find more informations about load and call a export funtion of a DLL with OllyDbg at hxxp://home.t-online.de/home/Ollydbg/Loaddll.htm
Regards |
![]() |
| Thread Tools | |
| Display Modes | |
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| Ollydbg v1 to v2 porting question | sendersu | General Discussion | 0 | 09-02-2014 13:29 |
| Another Ollydbg question DLL loading in Program | hobferret | General Discussion | 9 | 06-19-2005 23:32 |
| Quick OllyDbg Question | lilmeanman | General Discussion | 8 | 06-06-2005 08:13 |
| OllyDbg + Registry question | sTfN0X | General Discussion | 4 | 07-12-2004 19:18 |
| PELOCK Question again--.w.--Ollydbg | boya | General Discussion | 0 | 06-10-2004 12:38 |