📚 OpenRCE is preserved as a read-only archive. Launched at RECon Montreal in 2005. Registration and posting are disabled.








Flag: Tornado! Hurricane!

 Forums >>  Debuggers  >>  Breakpoint in dll used by a thread

Topic created on: April 2, 2006 14:16 CDT by enodr .

Hi!

Do you know if it's possible to set a breakpoint on a dll function used in a thread with ollydbg? I can see my dll in the "Executable modules" window, but if I set the breakpoint on the function I am looking after nothing happens (while I am sure the function is hit during execution). The problem seems to be that I don't know in which thread the dll is called... Do I have to use Softice to do such a thing?

  igorsk     April 3, 2006 07:12.24 CDT
Breakpoints are not thread-specific so you must be doing something wrong while setting it, it's not hit, or is disabled for some reason.

  enodr     April 3, 2006 09:12.10 CDT
To be more accurate, in am trying to debug a dll which is loaded by a windows 2000 service running under inetsrv.exe process (all of this is done under VMWare). I tried to set the breakpoint with different manners:
- From the "names window" which lists all the functions names of my dll (using MS symbols) => not working
- Loading the module in CPU window, scrolling to the address of my function and then setting the breakpoint (F2) => not working
- Setting a "Memory Access" breakpoint using the memory window and choosing the .text memory section of the dll I am looking after => works, but it's breaking on every memory access to the dll, not limited to the function I want to dig into.

Am I missing something or is this because I am dealing with Windows services?

  MohammadHosein     April 3, 2006 09:46.58 CDT
i'm always using commandlind and BP for dll breakpoints and no problem , BP MODULE.damnfunction for the function name , or BP      0xsomeaddress for addresses , BPX damnfunction for every call to every call to our (external ) damnfunction , you can also load your dlls with loaddll feature instantly , loaddll.exe

Note: Registration is required to post to the forums.

There are 31,328 total registered users.


Recently Created Topics
[help] Unpacking VMP...
Mar/12
Reverse Engineering ...
Jul/06
let 'IDAPython' impo...
Sep/24
set 'IDAPython' as t...
Sep/24
GuessType return une...
Sep/20
About retrieving the...
Sep/07
How to find specific...
Aug/15
How to get data depe...
Jul/07
Identify RVA data in...
May/06
Question about memor...
Dec/12


Recent Forum Posts
Finding the procedur...
rolEYder
Question about debbu...
rolEYder
Identify RVA data in...
sohlow
let 'IDAPython' impo...
sohlow
How to find specific...
hackgreti
Problem with ollydbg
sh3dow
How can I write olly...
sh3dow
New LoadMAP plugin v...
mefisto...
Intel pin in loaded ...
djnemo
OOP_RE tool available?
Bl4ckm4n


Recent Blog Entries
halsten
Mar/14
Breaking IonCUBE VM

oleavr
Oct/24
Anatomy of a code tracer

hasherezade
Sep/24
IAT Patcher - new tool for ...

oleavr
Aug/27
CryptoShark: code tracer ba...

oleavr
Jun/25
Build a debugger in 5 minutes

More ...


Recent Blog Comments
nieo on:
Mar/22
IAT Patcher - new tool for ...

djnemo on:
Nov/17
Kernel debugger vs user mod...

acel on:
Nov/14
Kernel debugger vs user mod...

pedram on:
Dec/21
frida.github.io: scriptable...

capadleman on:
Jun/19
Using NtCreateThreadEx for ...

More ...


Imagery
SoySauce Blueprint
Jun 6, 2008

[+] expand

View Gallery (11) / Submit