Log in

View Full Version : Strange thing while attaching a process


thatsthelargestnickIveeverchoosen
July 27th, 2004, 11:25
hello,
it's normal that when I attach a process into ollydbg it doesn't load the modules imported by the process? I can't even set a bp MessageBox since it doesn't know what MessageBox... if I do restart it does, but I can't do it.....thanks

-thatsthelargestnickIveeverchoosen

telophase
July 29th, 2004, 09:12
Well......
When you attach to a process (at least in XP/NT )
you land ur self in Kernel32.DLL and for your kind information
MessageBox function is Exported by User32.DLL and not Kernel32.DLL
so you cant find it in kernel32.dll.

What you can do i press Alt + E which will list all the modules
currently loaded by your process then select you process and then
select view names and then set a breakpoint on import.

Maybe this will help!