I want to set a breakpoint when the register EAX references a specific Unicode string, e.g. "Enter". In Ollydbg there is usually right beside the EAX value a string that says "ASCII: Enter ".
I read that I have to use Olly v1.10 for this purpose. When I go to "Debug" -> "Set Condition" I can write in the text field "Condition is TRUE" for instance this:
EAX == 00000010
I press F9 (Run) and the breakpoint will work. So once EAX becomes 0x10 olly will stop. However when I do this:
UNICODE[EAX] == "Enter"
it doesn't work. What am I doing wrong? Doesn't matter which program I use and which Olly version, I can't get this to work. I would like to match strings like "Enter text" as well, so any appearance of "Enter".
In the end I'm basically looking for a way to stop olly once a specific string is loaded into RAM. How can I achieve this?
Any help is appreciated. Thanks!