针对LdrLoadDll下条件断点过滤指定名称DLL加载时断点生效

针对加载*ser32.dll下断点：oop bu ntdll!LdrLoadDll "r $t0=poi(poi(esp+c)+4);as /mu ${/v:dllname} @$t0;.block{.if($spat(\"${dllname}\",\"*ser32.dll\")){kbn}; .else{ad ${/v:dllname};g}}"spa ---------------------

>>阅读原文<<