When I debug exe file with Ida I want to put breakpoint before the exe file send tcp packet.
When I listen with procmon I can see that this exe send and recive tcp packet.
1) I look on the exe file import tab, and put break point at
send function , but that not stop .
2) I looking at the line at procmon when I see
tcp send in stack tab , and see
frame 0 ,module ntoskml.exe , Location CcMdlWriteAbout + 0x....
frame 1 ,module tcpip.sys , Location tcpip.sys + 0x....
frame 2 ,module tcpip.sys , Location tcpip.sys + 0x....
How can I find the punction in exe file that send tcp packet , I want to put break point there .