View Full Version : Missed magic moment with Icedump
evaluator
September 29th, 2001, 05:12
If I start Winice and then load Icedump but don't set any bpx or bpm, protectors can't detect
Winice and normally runs! And I can trace in code and also can use /TRACEX command.
BUT!
If I only do this: set some breakpoint, immediately clear this breakpoint and...
Magic moment is missed! Now protectors crashes or detects Winice!
Same is with Frogice. So I can only: Restart.
What is a life without BP?
Can I solve this problem?
DakienDX
September 29th, 2001, 05:23
Hello evaluator !
What SoftICE, ICEDump and Windows version are you using?
Which protectors detect SoftICE?
Are you running BoundsChecker in the background?
What type of breakpoint makes this happen?
Anything more interesting? (What's the color of you carpet, how big is your freezer,...

)
evaluator
September 29th, 2001, 08:23
Win98SE
winice v4.05 build 334
icedump v6.0.2.3
Breakpoints: BPM BPX
Protectors: tELock, PCGuard
I have not "BoundsChecker in the background"

Carpet color same as freezer, freezer lengs not same as carpet

DakienDX
September 29th, 2001, 11:57
Hello evaluator !
I'll check if I can replicate the "error" on my computer. Please be patient.

(I've no SE of Win98, but the "error" could happen there too.)
evaluator
October 1st, 2001, 02:39
DakienDX!
I think, this is GENERAL problem. BPMs not allowed!
Tell me, with newest versions of Winice is same problem?
Another magic:
So "PCGuard4.03Demo" crashes when I set "BPM 401000":
MSR LastExceptionToIp=0043F9BB
Ok, restart PC (& IceDump) and now set this BPs:
BPM 401000
BPX 43F9BB
Then press F5
Oops! Now it not crashes here and breaks on our BPM! Magic!
Press F5, again breaks on BPM, press F5 and..
Now it crashes in second layer: 4329BB (PCGWIN32.EXE is twice protected).
And now this magic trick (also BPX 4329BB) not works.
Ok, forget BPM. Now check how works BPX.
Restart PC (& IceDump), set:
BPX 41392B (it's OEP)
and press F5. "File damaged!"
Ok, clear BPX and set new:
BPX 432000 (here starts second layer)
Winice breaks. Make dump from 432000 to 43F000, then press F5. Program runs!
You will see in dumped file's first byte is "CC"! (in original FC)
Now we know, why we have error.
EXCLUSIVELY for you I upload 1 layer deprotected PCGWIN32.EXE :
http://www.geocities.com/teset_dowonlad/layer2.zip
PCGuard 4.03 Demo:
http://www.sofpro.com/files/demo/pcgw32d.zip
DakienDX
October 1st, 2001, 10:27
Hello evalutor !
I'm using the same SoftICE version as you. I have none of these problems on my computer. All BPX/BPM work fine. So I can't help you much

Sorry.

Powered by vBulletin® Version 4.2.2 Copyright © 2018 vBulletin Solutions, Inc. All rights reserved.