![]() |
OllyDbg question
I hope I'm not missing something too obvious, but..
In OllyDbg, I want to break on the execution of a function in a DLL. However, the symbols aren't loaded until the program actually executes and loads the dll. So, I'm currently breaking on load dll, and stepping through until the correct dll is loaded, at which point I can break on the referenced function. Is there a way to load the dll symbols without having to execute the program? Also, when I restart the program, the breakpoints are cleared. Is there some option I'm missing to retain the breakpoints? Thanks. |
Use SoftIce. You can
:attach <your executable> :bpx <function> After that any time you start exe, SI automatically attaches itself to its address space. |
From OllyDbg v1.10b and v1.10c, you can debug a DLL. Just open DLL file with OllyDbg from File-Open or from Explorer context menu (v 1.10c). With OllyDbg 1.10c, you can break at Entry Point of DLL. You can find more informations about load and call a export funtion of a DLL with OllyDbg at hxxp://home.t-online.de/home/Ollydbg/Loaddll.htm
Regards |
| All times are GMT +8. The time now is 09:18. |
Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2026, vBulletin Solutions, Inc.
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX