針對LdrLoadDll下條件斷點過濾指定名稱DLL加載時斷點生效

針對加載*ser32.dll下斷點:oop bu ntdll!LdrLoadDll "r $t0=poi(poi(esp+c)+4);as /mu ${/v:dllname} @$t0;.block{.if($spat(\"${dllname}\",\"*ser32.dll\")){kbn}; .else{ad ${/v:dllname};g}}"spa ---------------------
相關文章
相關標籤/搜索