You know it’s time for a coffee break when your breakpoint window looks like this.
For those of you who are (like me) not used to debugging low level code that often
_TlsGetValue@4 means that
TlsGetValue is an
__stdcall function that has 4 bytes worth of arguments placed on the stack. The conditional part of the checkpoint looks after the stack pointer (the
ESP register) to get the value of the first argument and I’m not entirely sure what the
==71 part does…