进入特定模块时停止Ollydbg执行（断点）？

I have an EXE file in OllyDbg that uses a DLL. I've found an option to stop the EXE execution when the DLL loads, but I would now like to put a breakpoint everytime the execution enters the DLL module.

我在OllyDbg中有一个使用DLL的EXE文件。我已经找到一个选项来在DLL加载时停止EXE执行，但我现在想在每次执行进入DLL模块时放置一个断点。

I thought about puttin a breakpoint on every RETN (and maybe CALL) instruction of that module, but it will be a huge pain... So what's the way to pause execution every time it enters a specific module (like xxx.dll) ?

我想在该模块的每个RETN（也许是CALL）指令上设置一个断点，但这将是一个巨大的痛苦...那么每次进入特定模块（如xxx.dll）时暂停执行的方式是什么？

1 个解决方案

#1

Try this when your execution break (stoped EXE execution when the DLL loads),

执行中断时尝试此操作（DLL加载时停止EXE执行），

1. Alt-E (This will show you list of all loaded dlls).
2. Alt-E（这将显示所有已加载的dll的列表）。
3. Do right click on dll (you want to break into) then click on "view names".
4. 右键单击dll（您想要进入）然后单击“视图名称”。
5. New window will open which contain names of functions that are imported and exported by this dll, Sort the "type" column, press F2 (breakpoint) on all "export" types name.
6. 将打开一个新窗口，其中包含由此dll导入和导出的函数的名称。对“类型”列进行排序，在所有“导出”类型名称上按F2（断点）。

now your execution will break on every time any exported function is called. Hope this will solve your problem.

现在，每次调用任何导出函数时，执行都会中断。希望这能解决你的问题。

Although this can be automate using OllyDbg scripts if you need this frequently.

虽然如果您经常需要这个，可以自动使用OllyDbg脚本。