0

What is the best approach when debugging a multithreaded program that is yet to be encrypted? Where is the best place to put Breakpoints using Ollydbg?

  • It depends what you want to do, if you want to catch the decryption procedure - well, the best idea is probably to set the memory/hardware breakpoint on the encrypted data – morsisko Jul 5 at 16:17
0

If the program is using standard cryptography libraries then hooking the exported functions of that library might be a good starting point

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.