Menu

Examples

Epsylon 3

Break on API call

gpa "CreateFileA", "kernel32.dll"

; store address
mov CreateFileA, $RESULT
cmp CreateFileA, 0
je exit

; create a new breakpoint
bp CreateFileA
run
exit:

Load a library in debugged application

; create new memory segment to store DLL name
alloc 50
mov pLib, $RESULT
mov [pLib],"//PATH_OF_DLL//"

; Address of API LoadLibraryA(sDllName)
gpa "LoadLibraryA","kernel32.dll"
mov LoadLibraryA, $RESULT

;inject and execute code : LoadLibrary(pLib)
push pLib
exec
    call {LoadLibraryA}
ende

; free memory bloc
free pLib
refresh

Note : The REFRESH command is needed if you want to get module informations. OllyDBG doesn't refresh module window automatically.


Want the latest updates on software, tech news, and AI?
Get latest updates about software, tech news, and AI from SourceForge directly in your inbox once a month.