|
In OLLY is easy
In olly go to DEBUGGING OPTIONS-EVENTS and put a mark in BREAK IN MODULE LOAD (dll)
Olly stop in the load of any dll, and show in VIEW-EXECUTABLES the name of the dll was loaded.
When you see the name of the dll loaded, right click and press FOLLOW ENTRY and you are in the entry point of the dll, you can BP in the entry point or in any point, BPM in the section code, etc.
Ricardo Narvaja
|