0

If I have breakpoint on some win function, how to whitelist some address on which I don't want stopping?

Seems that it is needed to use conditions. How?

I use x64dbg, but if you only know a way in another debugger - it is also interesting.

1
  • 1
    what do you mean by "address on which I don't want stopping"? could you add an example?
    – Igor Skochinsky
    Jun 17, 2020 at 14:54

1 Answer 1

1

Yes you can do that. If you don't know how to set conditional breakpoints take a look here

The condition you need to set depends if you are debugging 32 (EIP register) or 64 (RIP register) bit program. So for example let's say you don't want to stop at address 0xDEADBEEF for 32 bit program, you can set the break condition to EIP != DEADBEEF. You can add multiple addresses like this: EIP != addy1 && EIP != addy2 and so on.

2

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.