View Single Post
  #22  
Old 08-07-2004, 05:46
omega_red
 
Posts: n/a
Well, Sice IDT dump shows that int1 & int3 handlers are in the ntoskrnl - but I think it's SI's code that really handles those ints. Maybe SI hooks itself inside windows handlers instead of just replacing IDT entries - I'm not that familiar with its internal working

[edit]
Just checked what's at address displayed by my dumper:
Code:
:bpx 8:b3fcd778
Breakpoints not allowed within SoftICE

Last edited by omega_red; 08-07-2004 at 05:51.
Reply With Quote