Quote:
Originally Posted by Naides
1. Use paretheses, liberally, even if they are or look redundant.
|
Yes, I have tried using parentheses, but got the same result.
Quote:
2. Is [SomeAddress] an absolute reference, or relative to ESP ?
If relative, it has to be explicit.
|
[SomeAddress] is an absolute reference,
if it's relative to ESP, the breakpoint will be triggered.
I wonder OllyDbg gets confused when the breakpoint is
set at kernel while the condition is concerned with the
debugged process memory.
Quote:
|
3. ESP is a pain and keeps changing. Are you sure that [ESP+4] points to the right address, at the right moment of the conditional BP?
|
[esp+4] is actually hWND which is ready to process the current message.
Thanks.