Log in

View Full Version : breakpoint on non-API function


gromozeka
October 27th, 2005, 05:12
Hello everyone!
First of all, sorry for my english, it is bad..( But i want to try to formulate my question...)

I use OllyDbg 1.09...
I have an applocation, that use dll-library...
I need set a breakpoint on function, that is in the dll...
this funtion is not API function...
to set breakpoint on api-function i use command line and the next command, for example:
bp MessageBoxA
- and it works OK....
But if I try to set a breakpoint on funtction from dll (for example , name of the function myFunc), it does not work:
bp myFunc
or bpx MyFunc

the cause: debbuger may be can not recognize this function (because it is not-API function)...

What should i do?
Could anyone help me please??

Thanks...

giulio8
October 27th, 2005, 05:30
I'm a beginner in ollydbg, but I'll tell you what I would do....
Clearly, wait for another expert answer!
I would see all the modules loaded (alt + E),
double click the dll and put the bp directly on the point (F2).
Don't know if is correct and can help...
Bye
Giulio

mr haggar
October 27th, 2005, 06:00
What do you mean that bp doesn't work? If bp is there and that opcode needs to be executed, then bp must and will work.

>the cause: debbuger may be can not recognize this function (because it is not-API function)...

Do you know the address of that function in dll, for example it is at 76543210? Then place "bp 76543210" and it will work.

Also you must be sure that your dll is loaded in memory (check modules window). If it is not loaded Oly cannot place bp on that address.

Also, you can go to that dll and press Ctrl+A to analyse dll. In this case Olly will remember any bp placed here so when you restart app in Olly, you will not have to place bp on the same place again ans again.

Btw, Get OllyDbg 1.10, maybe there is some bugs in 1.09 version.

gromozeka
October 27th, 2005, 07:54
Thanks a lot!
1.09 can not load dll to debug, but 1.10 can...
I've found the adress of the function , that was inside dll, and bp began to work properly...
i am a beginner in OLLY, so i did not hit upon an idea to use adress of the function (with bp)...

Thanks!