Hi there,
I've got a question concerning conditional breakpoints in softice:
As you know, there are quite some useful API functions that get called very often in a programs initialization phase(RegQueryValueExA, GetPrivateProfileStringA etc.).
Instead of using the bpcount trigger with a guessed value just below the right call, I'd like to make the bp depend on the value of a function parameter (i.e. ValueName to be read, Key to be opened etc.). Of course I know the the order of parameters (from the Win32 API docs) and read the whole SoftICE user guide, but that didn't make me any smarter yet.
I always guessed referring to the stack must be something like

bpx RegQueryValueExa if esp-14=='Info' (where "Info" is the value name),

but I didn't succeed so far...

Any info would be very much appreciated.


P.S.
Your forum rocks, Woodmann. Never seen a board with so many advanced reverser's on...

bpx regqueryvalueexa if*(esp->8)=='Info'
Better search for Rhayader's softice tutorial.It is quite useful

Thanks very much, about as simple as i tought. I'll give that one a try.
Do you refer to Rhayader's part in Torn@do's Cracker's Notes?
I already read that one, but he doesn't give any specific examples inthere.

There you go.

I have attached the same.

...Have Phun

Well, that's a different and useful looking one.

Thanks.