Quote:
need to pause execution when any register contains a specific value
|
? you want ollydbg to stop if eax or ecx or edx or esp or ###
contains lets says 12345678 ??
give it a condition like
ECX == 0x12ffb0 || EBP== 0x12ffb0 || REG == same constant || another reg == Same Constant
i would have liked it easier like specifiying r32 == SOME CONST
but ollydbg wont like genreal specification
Log data, item 301
Address=00401031
Message=Conditional breakpoint at win.00401031: Undefined registers not allowed in expression
as to string in stack you can check it with some thing like
string [[esp+0x60]]
it will stop if there is a string in starting at specified address
Log data, item 22
Address=0040103E
Message=Conditional breakpoint at win.0040103E: "D:\Borland\odbg110\win.exe"