Has anyone else had trouble loading .nms files from IDA in SoftICE? I created a file from a dissassembled app in IDA then converted it to a .nms file as the instructions directed. When I try to load the file using the SoftICE Loader, I get a message - Error: Out of symbol memory. The .nms file is over 5meg, but I would still think that the software could handle this. If anyone can suggest a solution I would be grateful.

pilz

Increase the size of the symbol buffer size
in the softice initialization settings in the
symbol loader - I cranked mine up to 10240
but you may need more, depending on what
you're working on.

filtering out some stuff from the .map file before conversion might help reduce the final .nms size as well ;-). after all, the IDA autogenerated names don't tell you much, do they?

I guess I don't know - I'm still trying to figure this tool out. I tried to open the .nms file in a couple of editors (UltraEdit, Hiew, wordpad) and it doesn't look very intuitive. Is there another utility that is used to edit the entries?

uh, forget that last message. I think I figured it out. I even found a nice perl scriipt on Greythorne's site that will aid in removing the 'noise'. Thanks for the help,

pilz

Although I was able to load the symbols from IDA in SoftICE, I don't seem to have access to the information. Perhaps I have missed something, but I can find the _WinMain@16 procedure in the IDA listing, and resulting .map file. When I load the derived .nms file and then the application and load/translate symbols, it complains about no debug info, which I would expect. Unfortunately, it doesn't seem to get the labels associated with the procedures while debugging. In other words, I can't find any procedures with WinMain in the titles in SoftICE. I can find the procedure instructions at the appropriate memory location, but there is no refernece to the proc name, or the AfxWinMain... proc that it calls. Is this expected behavior? or should I assume that this process will align proc names from IDA with the proc's in S'ICE? If not, is there a way to annotate labels like proc names and parameter names, etc in S'ICE?

pilz