Hello and welcome back.
In the previous few lessons when we wanted to set breakpoints we will look for strings.
And we will set the breakpoints on the strings.
In this lesson I will show you an alternative which is to look for into modular cars and to set breakpoints
on them.
So let's begin let's open the crack me one file with the FCC for DG
now will run to the entry point by clicking on run all pressing F nine.
Be sure to be in the user module space which is the entry point before you proceed to the next step.
In the previous methods for searching for strings.
We also had to ensure that we are already in the user module space before we look for strings so in
this a method where we look for into modular cores we must also ensure that we are in the user module
space.
Now to look for internal modular cores we will rightly and then scroll down and look for the search
for item menu item and then look for current module.
And then here previously we selected string references.
For now we are going to select into modular course.
Just click on it.
And we get a list of results.
So this is a list containing all the internal modular cores that are made from the user module.
The user my view as you recall is ready address space begins if 0 0 4 so these are all the source of
the course.
So these costs are being made from these addresses which are in user space and you can see it is quite
a long list and all these codes are window API functions also known as wintery to API.
And from here we can look at and inspect any of the Windows API function calls that we like to examine.
So for example there is getting message here and there is also the get dialog somewhere here.
So over here K dollar item tax.
So we have seen these two before.
So if we wanted to quickly go there we can just double click this address or we can directly and follow
in this assembler ideally so we can just double click and we go directly to the get message.
Oh here.
All right.
Let's go back to the references again that the lease is up.
If we wanted to find all the message into modulo cars then we can search for it down here.
Just type and get message and you find this one here
and then from here he can double click and go directly to that address Oh here getting message
there.
Let's go back to references and if you wanted to search for a message box you just type message box
and we list up a tree message boxes which are being called by our user module.
All three of these and you can click on this to go to the first result.
And he shows us this is where the bomb message box is we show it and then we go back to reference click
the second one DoubleClick and here is where the Congress message is being shown and you look back to
references and click on the 10 1 Hayes where the sorry the wrong sero key message is being shown and
we can just put a big fine anywhere we won another way to put breakpoint is from the result here to
put a breakpoint day we can slightly press the key F to can press F2 here again and click here and press
have to.
So now we have three break points so you can go and take a look and a booklet on the first one and see
the first breakpoint has been set for the first message box in the module that comes in the second breakpoint
is here and the temporary pi is here.
So this is how we can search for into modular cores and uh narrowed down the list and then put breakpoints
on them.
So that is remove our breakpoints now correctly and remove how we can get silly and remove it.
So the list of breakpoints are listed here.
We can select on three and click and press on delete key to delete all the break points.
OK so this is how we can say for in the module class a separate point and that's all for this lesson.
Thank you for watching.