Hi All,

I'm trying to get SoftIce to break when EBX is changed, not the address pointed to by it but the register itself. I've been R-ing TFM, but can't find a syntax that might be able to do this. I suspect it can't be done but thought I'd ask I could probably set up a TRACE and check for a MOV/LEA/ADD/SUB EBX, statement but thought there *might* be another way.

TIA, Kayaker

Hi,
It would be nice if there's a simple way to
do what you ask. The only way I've got near it is:
bpr xxx yyy RW if ebx!=specific value do "
u eip" where x and y cover the whole
code range, sometimes it can get you round about where you are looking for.
regards
hz