You know it’s time for a coffee break…

19 12 2010

You know it’s time for a coffee break when your breakpoint window looks like this.

For those of you who are (like me) not used to debugging low level code that often _TlsGetValue@4 means that TlsGetValue is an __stdcall function that has 4 bytes worth of arguments placed on the stack. The conditional part of the checkpoint looks after the stack pointer (the ESP register) to get the value of the first argument and I’m not entirely sure what the ==71 part does…

Advertisements

Actions

Information

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s




%d bloggers like this: