What is the best approach when debugging a multithreaded program that is yet to be encrypted? Where is the best place to put Breakpoints using Ollydbg?

  • It depends what you want to do, if you want to catch the decryption procedure - well, the best idea is probably to set the memory/hardware breakpoint on the encrypted data
    – morsisko
    Jul 5, 2020 at 16:17

1 Answer 1


If the program is using standard cryptography libraries then hooking the exported functions of that library might be a good starting point

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.