What is the difference between call stack and intermodular calls. Could you clarify the difference between the two? For example if I need to catch message box API function, do these methods serve the same purpose?


They are completely different things.

Call stack window shows such information as stack frame for each function call in the current thread, including arguments passed, name of callee and the (virtual) address where it was called from.

Intermodular calls window, on the other hand, shows all calls to the external (API) functions in the current module.

That being said, if you want to find message box function, you can do it by opening Intermodular calls window, clicking Destination button (that will sort functions by name) and you may set breakpoints on each place this function is called, like presented in the image below:ollyDbg_Intermodular_calls

Of course pick your desired function name instead of atoi.

| improve this answer | |
  • What if Intermodular calls window shows less functions. I attached the application and press Run. The Destination section shows almost nothing (nothing helpful) – Kıvanç Cantimur Jun 10 '19 at 16:04
  • Check if you are in the right module when right clicking->Intermodular calls, i.e. in the module you want to get calls from. – bart1e Jun 10 '19 at 16:10
  • Can I use the Names window to find the message box function as well? – Kıvanç Cantimur Jul 16 '19 at 6:22
  • I think that you should be able to find it this way. – bart1e Jul 16 '19 at 16:13

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.