views:

23

answers:

1

I want to break on where Executable Module X is called, but I've no idea which function is actually called.

Is it possible to set this kind of matching-all breakpoint?

A: 

Set a memory breakpoint on its code section.

Abyx
But I don't know which line of code section is actually executed.
ollydbg
It will set breakpoint to all of lines of code.
Abyx
@Abyx, can you elaborate how to infer the location of code section?
ollydbg
@ollydbg, Alt-E, select module, click right mouse button, "View memory", select ".text" section, F2, F9
Abyx
@ollydbg, also read PE format spec, olly help file, google, etc
Abyx