1

In x64dbg, we can set hardware breakpoint on write in memory dump but can we add more codition? Ex. Set breakpoin on write of value of 2F.

1

Yes, you can do that. Once you set the hardware breakpoint you can go to Breakpoints tab, right click the breakpoint on which you want to set condition, and select Edit. Now you can set the break condition.

Let's say your value is written to the memory in such way mov dword ptr ds:[edx],eax, so you can set the Break condition to EAX==2F, and then the program will be interrupted only when the value to write is equal to 2F.

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.