Results 1 to 2 of 2

Thread: breakpoint softice <-> specific file

  1. #1
    holomorph
    Guest

    breakpoint softice <-> specific file

    Hi all!

    I'm wondering how its possible to make softice stop when my program tries to open a file ? I could use api calls like "readfile" but the program opens tons of files and i will never find the right one...
    But something like "bpx readfile xyz.dat" is not possible ?

    Greetings and sorry for my english ;-)

    Holomorpg
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  2. #2
    AndreaGeddon
    Guest
    well you can use conditions on breakpoints, if you need to break an open operation on a given file you can set a condition on the "filename" parameter, for example if you want to break CreateFileA you know that the filename is the first parameter on stack, so once softice breaks on api entry point the pointer to file name will be on [esp+4], so you can use
    bpx CreateFileA if @@(esp+4) == "yourfile.dat"
    it should work, hope my memory is good!
    Bye!
    AndreaGeddon
    I promise that I have read the FAQ and tried to use the Search to answer my question.

Similar Threads

  1. how to force ollydbg to load a specific udd file ?
    By Roko in forum OllyDbg Support Forums
    Replies: 5
    Last Post: February 20th, 2010, 12:47
  2. Nb question: specific string breakpoint
    By cyb0rg in forum OllyDbg Support Forums
    Replies: 3
    Last Post: August 2nd, 2005, 13:04
  3. breakpoint file
    By deli in forum OllyDbg Support Forums
    Replies: 1
    Last Post: June 22nd, 2004, 05:26
  4. softice - breakpoint on export beginning with @
    By uiop8000 in forum Tools of Our Trade (TOT) Messageboard
    Replies: 3
    Last Post: June 14th, 2002, 23:56
  5. using softice with map file
    By UnderCover- in forum Malware Analysis and Unpacking Forum
    Replies: 0
    Last Post: November 9th, 2001, 20:39

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •