Exetools

Exetools (https://forum.exetools.com/index.php)
-   General Discussion (https://forum.exetools.com/forumdisplay.php?f=2)
-   -   Why SoftIce is not setting breakpoints? (https://forum.exetools.com/showthread.php?t=1510)

Pyrat 10-21-2002 04:51

Why SoftIce is not setting breakpoints?
 
Why SoftIce is not setting breakpoints and not stopping at the beginning of the loaded program?
What am I doing wrong?

I am using SoftICE Driver Suite 2.6
Windows XP Build 2600 (No SP)

softbeard 10-22-2002 11:12

You're not doing anything wrong. The softice loader simply does not work properly with WinXP and fails to break on the .exe's entry point. Here's one workaround:
1. Load softice.
2. Find your .exe file's entry point using HIEW or PEEditor or some other such utility.
3. Run your proggy and note the module name (ie., name of the .exe file). ie., if you're running BITCH.EXE, the module name will be BITCH.
4. Break in with softice using the keyboard hotkey (default: <ctrl><d>).
5. In softice, switch to your proggy's context with the ADDR module-name command; ie., ADDR BITCH
6. Set a breakpoint at the entrypoint as normal, via BPX <entrypoint>.
7. Exit softice by continuing execution with a X or G command.
8. Close your proggy.

Now the next time you run the proggy, it should :) break at the entry point. I've had it work sporadically at times, for unknown reasons, but this usually does work.:cool:

hobgoblin 10-28-2002 03:26

Try this...
 
Removed by me

hob

softbeard 10-30-2002 07:01

SoftICE breakpoints problems in XP
 
1 Attachment(s)
Ok folks, I think the matter has been fully resolved by Kayaker. It boils down to changing one byte in nmtrans.dll. His explanation of the problem is very detailed, so just check out the attached archive. :)
So far, this has worked for me using Win2000/DriverStudio 2.7.

mariop 11-03-2002 11:36

Well I tried it but still does not break at entry point.

Also when I type "Task" I get a "No LDT" reply. Anyone know why?

softbeard 11-06-2002 11:54

The 'task' command under Win NT (incl. Win XP, 2000) shows only 16 bit tasks. This is straight from the manual. So you're being told there is no Local Descriptor Table. Use 'proc' instead to get info on 32 bit processes.
You might also verify the radio button is clicked on in the SICE loader for breaking on winmain (I think it's under Module, Settings)

checks 12-01-2002 11:58

For those of you who are still in need of Softice DriverSuite 2.7, ive posted the location you can get it at
http://www.exetools.com/forum/showthread.php?s=&threadid=1366

I use it with the attachment listed earlier in this thread and have had no issues w/ breakpoints on XP (SP1 + patches)

Enjoy

Checks

amigo 12-24-2002 08:52

and , to properly recognize entry point by Softice loader, the section containing entry point must be marked as "code" and "executable" - so you have to fix it in PE header

llhai 01-14-2003 00:34

I think it is not a problen of softice.
Please refer to it's readme,the section of "SoftICE Support of Unreleased OS Version"
do following steps:
Load up the softICE Settings application.

Go to the advanced page.

Add an entry of NTSYMBOLS=ON.

Get the symbols for ntoskrnl.exe and translate them to NMS format. You can either use the Symbol Retriever utility to get the correct symbols, or get them from the Support CD provided by Microsoft.

Go to the symbols page and add in the ntoskrnl.nms that you've just translated.

Now, reboot your machine.


All times are GMT +8. The time now is 03:54.

Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2026, vBulletin Solutions, Inc.
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX