View Full Version : Setting break points on DLL
rodeo_lar
November 14th, 2004, 20:27
Hi,
I am trying to follow the tutorial on the link below.
http://home.t-online.de/home/Ollydbg/Loaddll.htm
("http://home.t-online.de/home/Ollydbg/Loaddll.htm
")
on how to use OllyDBG to run a DLL and have it break in OllyDBG when the program that uses the DLL calls a certain function.
The problem i am facing is when i load the DLL and try to use "Debug|Call DLL Export"
It flashes an error message "UNABLE TO LOCATE DLL".
Can some one please help me on this
Lord_Looser
November 15th, 2004, 01:47
http://www.sysinternals.com/ntw2k/source/filemon.shtml
("http://www.sysinternals.com/ntw2k/source/filemon.shtml
")
Use filemon to look where the file is searched.
Copy missed DLL in the search listing/folder.
rodeo_lar
November 15th, 2004, 06:55
Hi,
I tried using filemon the following are the files that were listed as not found.
what is obvious is that it first finds a dll in a particualr place for example "NETAPI32.DLL" in "C:\WINDOWS\SYSTEM\" which a sucess and then tries to locate the same in its local directory and says file not found.
At the point when i use "CALL DLL Export" no missing file is reported by filemon.
could u suggest anyother cause or have i assesed this situation wrongly.
Ollydbg:FFF9EAA7 Open C:\WINDOWS\SYSTEM\NETAPI32.DLL SUCCESS
Ollydbg:FFF9EAA7 Attributes C:\WINDOWS\SYSTEM\NETAPI32.DLL SUCCESS
Ollydbg:FFF9EAA7 Close C:\WINDOWS\SYSTEM\NETAPI32.DLL SUCCESS
Ollydbg:FFF9EAA7 Open C:\ODBG\NETAPI32.DLL
NOTFOUND OPENEXISTING
ollydbg:FFF9EAA7 Open C:\ODBG\NETAPI32.DLL
NOTFOUND OPENEXISTING
Ollydbg:FFF9EAA7 Attributes C:\WINDOWS\SYSTEM\NETBIOS.DLL
SUCCESS Get Modify
Ollydbg:FFF9EAA7 Close C:\WINDOWS\SYSTEM\NETBIOS.DLL SUCCESS CLOSE_FINAL
Ollydbg:FFF9EAA7 Open C:\ODBG\NETBIOS.DLL NOTFOUND OPENEXISTING
Ollydbg:FFF9EAA7 Open C:\ODBG\NETBIOS.DLL NOTFOUND OPENEXISTING
Ollydbg:FFF9EAA7 Close C:\TEST\BIN\TARGET.DLL SUCCESS CLOSE_FINAL
Ollydbg:FFF9EAA7 Open C:\ODBG\TARGET.DLL NOTFOUND OPENEXISTING
Ollydbg:FFF9EAA7 Close C:\WINDOWS\SYSTEM\KERNEL32.DLL SUCCESS CLOSE_FINAL
Ollydbg:FFF9EAA7 Open C:\ODBG\KERNEL32.DLL
NOTFOUND OPENEXISTING READONLY
Noman
December 3rd, 2004, 08:43
Dear
Quote
i have a problem with me.
A simple DLL which is made by me opened by OLLYDBG .
While Clicking on Debug ->CALL DLL EXPORT
Dialog box is opened.from which i can see how many functions this method contain
but when another DLL is loaded, CLicking on the same opetion, no dialog is appeared and option is disabled
Pls reply it
Ok
Lord_Looser
December 3rd, 2004, 10:45
First press run button (F9) till OllyDbg DLL Loader appears in taskbar.
Powered by vBulletin® Version 4.2.2 Copyright © 2018 vBulletin Solutions, Inc. All rights reserved.