1

What is the difference between call stack and intermodular calls. Could you clarify the difference between the two? For example if I need to catch message box API function, do these methods serve the same purpose?

1 Answer 1

0

They are completely different things.

Call stack window shows such information as stack frame for each function call in the current thread, including arguments passed, name of callee and the (virtual) address where it was called from.

Intermodular calls window, on the other hand, shows all calls to the external (API) functions in the current module.

That being said, if you want to find message box function, you can do it by opening Intermodular calls window, clicking Destination button (that will sort functions by name) and you may set breakpoints on each place this function is called, like presented in the image below:ollyDbg_Intermodular_calls

Of course pick your desired function name instead of atoi.

4
  • What if Intermodular calls window shows less functions. I attached the application and press Run. The Destination section shows almost nothing (nothing helpful) Commented Jun 10, 2019 at 16:04
  • Check if you are in the right module when right clicking->Intermodular calls, i.e. in the module you want to get calls from.
    – bart1e
    Commented Jun 10, 2019 at 16:10
  • Can I use the Names window to find the message box function as well? Commented Jul 16, 2019 at 6:22
  • I think that you should be able to find it this way.
    – bart1e
    Commented Jul 16, 2019 at 16:13

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.