Results 1 to 2 of 2

Thread: putting breakpoint on a string which is define in resource sectionů

  1. #1
    megatron
    Guest

    putting breakpoint on a string which is define in resource sectionů

    Can anyone tell me how to put a breakpoint on a string which exists on resource section:

    1. Launch a process
    2. Go the the memory map and search for string
    3. Ser breakpoint on it


    [problem] -> when I reload the app again I need to perform all the steps given above to set the breakpoint. Does anyone knows who to set a breakpoint in this case which persists after app relaunch.

    I promise that I have read the FAQ and tried to use the Search to answer my question.

  2. #2
    Use a hardware breakpoint. You can have four of those instead of one regular memory breakpoint, they don't slow down program execution, and are also saved across debugging sessions.

    That, or place a conditional breakpoint on FindResource, filtering on the requested resource ID. You can find out this ID by pressing alt-E, rightclicking on your .exe, and selecting "View resource strings".

Similar Threads

  1. problem with resource section after unpacking
    By galack in forum Malware Analysis and Unpacking Forum
    Replies: 3
    Last Post: September 18th, 2009, 04:53
  2. Nb question: specific string breakpoint
    By cyb0rg in forum OllyDbg Support Forums
    Replies: 3
    Last Post: August 2nd, 2005, 13:04
  3. How to create one section EXE from a multi section exe
    By new_age in forum The Newbie Forum
    Replies: 4
    Last Post: January 27th, 2003, 20:27
  4. Softice breakpoint on a string??
    By jerrydav in forum Tools of Our Trade (TOT) Messageboard
    Replies: 1
    Last Post: August 31st, 2001, 00:45
  5. Softice breakpoint on a string??
    By jerrydav in forum Malware Analysis and Unpacking Forum
    Replies: 1
    Last Post: August 30th, 2001, 20:10

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •