Is there anything wrong with OllyDbg's conditional breakpoint

[BlackWhite]

Originally Posted by Naides

1. Use paretheses, liberally, even if they are or look redundant.

Yes, I have tried using parentheses, but got the same result.

2. Is [SomeAddress] an absolute reference, or relative to ESP ?
If relative, it has to be explicit.

[SomeAddress] is an absolute reference,
if it's relative to ESP, the breakpoint will be triggered.
I wonder OllyDbg gets confused when the breakpoint is
set at kernel while the condition is concerned with the
debugged process memory.

3. ESP is a pain and keeps changing. Are you sure that [ESP+4] points to the right address, at the right moment of the conditional BP?

[esp+4] is actually hWND which is ready to process the current message.

Thanks.