0

Ok so let's say that a program obfuscated its IAT and i can't see it in IDA Pro. In OllyDbg there is a plugin where you press Ctrl+G you can search for a library function and set a breakpoint even though that function is not listed in the IAT. My question is how can i do this in IDA Pro?

Thanks

Improve this question

1 Answer 1

Reset to default
1

During debugging, you can use names in format "DllName_export" (e.g. kernel32_CreateFileA) to jump to functions exported by the loaded DLLs, or you can use such names in "symbolic breakpoints" so they're automatically added when DLL gets loaded.

Also: double-click a DLL in the Modules list to see its exports and jump to/set breakpoints on them.

Improve this answer
1
  • taking a look at the module list answered my question :)
    – rustam Shirinov
    Aug 18, 2017 at 13:38

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.