| View previous topic :: View next topic |
| Author |
Message |
fred26 Expert Cheater
Reputation: 0
Joined: 20 Dec 2014 Posts: 103
|
Posted: Fri Jun 12, 2015 8:53 am Post subject: Breakpoint when a Function in Certain Module is Called |
|
|
I would like to see if there is a way to breakpoint if any function from a specific is called.
Thanks!
|
|
| Back to top |
|
 |
fred26 Expert Cheater
Reputation: 0
Joined: 20 Dec 2014 Posts: 103
|
Posted: Sun Jun 14, 2015 7:19 pm Post subject: |
|
|
Well, this may be a specific case of a long trace so I guess this may not be possible...
If someone comes with any ideas, they are welcome.
|
|
| Back to top |
|
 |
Dark Byte Site Admin
Reputation: 470
Joined: 09 May 2003 Posts: 25811 Location: The netherlands
|
Posted: Sun Jun 14, 2015 7:26 pm Post subject: |
|
|
hook all entry points of the functions in the dll. in the hook call a common function that just does nop and ret, and place a breakpoint on the nop
that way every function call will cause a break. you just have to step out of the hook, or inspect the stack, to see what the original function was
software breakpoints might work too
_________________
Do not ask me about online cheats. I don't know any and wont help finding them.
Like my help? Join me on Patreon so i can keep helping |
|
| Back to top |
|
 |
fred26 Expert Cheater
Reputation: 0
Joined: 20 Dec 2014 Posts: 103
|
Posted: Sun Jun 14, 2015 7:51 pm Post subject: |
|
|
Thanks Dark Byte.
Let's say you have a quite long dll, how can you get all entry points with a script?
Thanks
EDIT: I figured out that maybe doing this automated won't be possible as entry points will have different looks.
|
|
| Back to top |
|
 |
Dark Byte Site Admin
Reputation: 470
Joined: 09 May 2003 Posts: 25811 Location: The netherlands
|
Posted: Mon Jun 15, 2015 11:57 am Post subject: |
|
|
you could automate it, but currently ce doesn't have a function to return a list of exports from the dll, only a per address querry. So you'd have to write a pe inspector in lua yourself
and then add in a check to see if the export is a function, or an variable (e. g check the first bytes for common function header code)
---
an alternate method would be to manually create a list of dll functions and break those (ce can use symbolnames and exportnames for breakpoints)
_________________
Do not ask me about online cheats. I don't know any and wont help finding them.
Like my help? Join me on Patreon so i can keep helping |
|
| Back to top |
|
 |
|