Log in

View Full Version : SoftIce NT, API breakpoints don't work


StarShock
June 11th, 2001, 10:48
I'm using softice for NT with my Windows 2000 and for some reason bpx MessageBoxA (or W), bpx CreateFileA/W, bpx WriteFile, etc... . . . (you get the picture), don't work.

I also have SoftIce for w9x on my win98 and all these breakpoints work fine.

I tried changing EXP=\SystemRoot\...\kernel32.dll, ...user32..., etc. to EXP=D:\WINNT\...\kernel32.dll and so forth, but that didn't change anything. All the functions show up with the EXP command either way...

I used to have SoftIce loaded on here before I reformatted my h/d and it was working, but I don't know what I did different this time.

Phillip

P.S. One more hint. I noticed that after doing bpx .... and then bl I get something like:
00) #00FE:000275d5
and I know (at least at some point) what it should show is:
00) USER32!MessageBoxA
or something like that instead of just the numbers.

DGR
June 12th, 2001, 03:30
Hey there,

What sp are u using? If sp2 you'll need to get the (free) updated ntice.sys from numega.com. Else try loading the symbol files (debug symbols are freely available through ms.com) but be sure to use the right versions. That is, sp2 symbols if u use sp2 etc...

Good luck

StarShock
June 14th, 2001, 11:29
OK, thanks. I will definitely try it. I'm just having trouble finding the right ntice.sys. I found one but it was like for version 3.25 of softice and I have 4.0.5...