Log in

View Full Version : Msn Messenger.


firedance
July 9th, 2004, 09:49
Well I opened msnmsgr.exe in ollydbg and searched for the word "BYE" and i found one
(Text strings referenced in msnmsgr:.text, item 4299
Address=0043432C
Disassembly=DD msnmsgr.00434670
Text string=ASCII "BYE"
and when trying to brakepoint it it says like "you are trying to set bp on data".
Is there any way to still make it brake when the string is used or so?

psyCK0
July 9th, 2004, 11:44
Breakpoint on memory access

firedance
July 9th, 2004, 13:44
Okay, that workt first time i tryed but then it didnt work anymore.
And I got a new question =) , in a dll loaded (msgslang.dll) i know there is lots of strings but when i do search for all reference strings it dusent even start to scan for them.

psyCK0
July 9th, 2004, 15:15
I would use Ida for that...
Dunno why the memory bp dont work, try setting it again

blabberer
July 12th, 2004, 01:11
well i would suggest you to find referances for that string and put a breakpoint on the referance

it should be some thing like
push address (where address points to this string)

yes memory break point on access should work
but once accessed the vb like programs use var copy var move and shit and doesnt access it again but accesses its copied string for use and use varfree etc iirc


well to view string view --->executable modules
follow entry
search for all referanced strings should be able to do it
like this

Text strings referenced in ASYCFILT:.text, item 0
Address=01296EC6
Disassembly=PUSH ASYCFILT.012AB050
Text string=ASCII "MS_AsyncImage_DCWait"