View Full Version : Icdump (tracex)
hz
January 11th, 2001, 14:13
Hi,
reading through the docs, tracex appears simple, however using /tracex addr1 addr2
has does nothing so I am obviously doing something wrong. Appreciate any help.
regards
hz
The Owl
January 12th, 2001, 13:00
Quote:
reading through the docs, tracex appears simple, however using /tracex addr1 addr2
has does nothing so I am obviously doing something wrong. Appreciate any help.
|
if you had given more info like when/how you tried to use it, what versions were involved, etc... we could have spared the first round of posts ;P.
hz
January 12th, 2001, 13:48
Hi Owl,
version is 6.0.1.6. I was trying to trace/find the oep in a pe-crypt(ed) file
and just entered /tracex section_start section_end, had everything enable with the option t switch.
regards
hz
The Owl
January 12th, 2001, 15:58
Quote:
version is 6.0.1.6. I was trying to trace/find the oep in a pe-crypt(ed) file
and just entered /tracex section_start section_end, had everything enable with
the option t switch.
|
1. try 6.021 or 6.022pre, anything before 6.019 had ugly bugs in the tracer.
2. section_start and section_end should have been VAs, not RVAs. did you make
sure you used VAs?
3. enabling all options does not always get you what you want, generally you
should use the default settings and change options as you discover you need
them for a successful trace.
hz
January 12th, 2001, 17:57
Hi Owl,
I d\l v6.021. Now when I start Icedump I get a black screen, ctrl-d and I have a nice back and white pattern in SI, another ctrl-d and its a really nice red pattern, a couple more ctrl-ds and everything looks fine, got the Icedump loaded message, then I try and load my target and SI has that nice black and white pattern again just before it reboots my machine. Oh I did
get an "Invalid page fault" once so I tried it with faults off. I'm using v3.25 of SI on win95c.
regards
hz
The Owl
January 16th, 2001, 07:37
Quote:
I'm using v3.25 of SI on win95c.
|
ok, this win9x is known to have problems with the export renormalization icedump performs on load, i hope i will have time to put up a new 6.022 pre release at the weekend that will fix this. in the meantime, you can try 6.020, it's still on the site, although not linked (hint: dir listing ;-)).
hz
January 16th, 2001, 17:57
Hi Owl,
6.020 works for me. Thaks for your help.
regards
hz
Powered by vBulletin® Version 4.2.2 Copyright © 2018 vBulletin Solutions, Inc. All rights reserved.