1

I want to set a breakpoint when the register EAX = 00000001

Improve this question

1 Answer 1

Reset to default
1

Do you mean you want a breakpoint to fire every time eax is 1, no matter what address? That's not possible with any debugger. If you mean you want to set a breakpoint at a particular address that only fires when eax is 1, that's doable.

  1. Set a breakpoint on some instruction with F2.
  2. Right-click on the instruction and choose Edit breakpoint....
  3. Write EAX == 1 in the Condition field on the dialog box.

The Edit breakpoint dialog is described in great detail in the IDA manual. Search for "Edit breakpoint"; there are several pages describing it.

Improve this answer
2
  • This could be possible with Unicorn Engine, though (or Qiling). However, I'll admit that this sort of goes beyond the original question with IDA as its scope.
    – 0xC0000022L ♦
    Commented Jun 28, 2021 at 10:06
  • 1
    As I mentioned to the poster in a comment on another one of his questions (reverseengineering.stackexchange.com/questions/26266/…), this type of request is stepping outside of what the x86 debug interface offers naturally, and requires something like emulation or DBI.
    – Rolf Rolles
    Commented Jun 28, 2021 at 20:09

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.