Exetools  

Go Back   Exetools > General > General Discussion

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 07-05-2005, 23:00
Nukacola's Avatar
Nukacola Nukacola is offline
Friend
 
Join Date: Sep 2004
Location: Germany
Posts: 49
Rept. Given: 0
Rept. Rcvd 2 Times in 2 Posts
Thanks Given: 0
Thanks Rcvd at 1 Time in 1 Post
Nukacola Reputation: 2
Debugger question

hey pals,
my problem is describe as follow. I take the source of the debugger loop from Vs.Net studio now i want to obtain the name of the dll from the LOAD_DLL_DEBUG_INFO but the member lpImageName is empty all the time. How i can solve this riddle...

maybe a easy question but i don't know how to solve...

regards Nukacola

Last edited by Nukacola; 07-06-2005 at 20:31.
Reply With Quote
  #2  
Old 07-06-2005, 04:53
kittmaster kittmaster is offline
Friend
 
Join Date: Feb 2005
Location: USA
Posts: 30
Rept. Given: 0
Rept. Rcvd 0 Times in 0 Posts
Thanks Given: 0
Thanks Rcvd at 1 Time in 1 Post
kittmaster Reputation: 0
Could you be more specific? Which debugger..........is this problem in softice, olly, or windbg? Does it happen in only one debugger and not the other?
Reply With Quote
  #3  
Old 07-06-2005, 18:38
Nukacola's Avatar
Nukacola Nukacola is offline
Friend
 
Join Date: Sep 2004
Location: Germany
Posts: 49
Rept. Given: 0
Rept. Rcvd 2 Times in 2 Posts
Thanks Given: 0
Thanks Rcvd at 1 Time in 1 Post
Nukacola Reputation: 2
hey sure,
i thought u miss the point i wanna create a little debugger by myself. I take the main debugger loop for my source from the MSDN. Now i wanna identify which Dll is loaded if the LOAD_DLL_DEBUG_EVENT occoured.
I hope it's now more clean what i wanna do.

Regards Nukacola
Reply With Quote
  #4  
Old 07-06-2005, 22:49
upb's Avatar
upb upb is offline
Friend
 
Join Date: Apr 2002
Location: Elbonia
Posts: 63
Rept. Given: 5
Rept. Rcvd 0 Times in 0 Posts
Thanks Given: 3
Thanks Rcvd at 0 Times in 0 Posts
upb Reputation: 0
heya.

the system provides dll names with this event only when you CREATE the process, not when you attach to it.
also note that lpImageName points to an address in the address space of the DEBUGGEE, not your debugger and that the string it points to could be in unicode, so its a bit tricky to read it out ;P
Reply With Quote
  #5  
Old 07-13-2005, 23:20
Nukacola's Avatar
Nukacola Nukacola is offline
Friend
 
Join Date: Sep 2004
Location: Germany
Posts: 49
Rept. Given: 0
Rept. Rcvd 2 Times in 2 Posts
Thanks Given: 0
Thanks Rcvd at 1 Time in 1 Post
Nukacola Reputation: 2
Heya upb,
i did create the process but the member lpImageName of LOAD_DLL_DEBUG_INFO is empty (filled with zeros or with 0xc). So what i did wrong. If i"m at home i post the source. Maybe that will help..
Reply With Quote
Reply


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Which debugger is best? nakkeost General Discussion 31 05-30-2011 11:14
Best debugger for DOS? Taitch General Discussion 13 10-21-2010 13:46
IDA Pro debugger question jonwil General Discussion 2 06-03-2005 07:11


All times are GMT +8. The time now is 19:53.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )