Log in

View Full Version : sice on 2k (again...)


drcmda
April 29th, 2002, 11:34
i'm running a win-200 pro box and i installed softice
the first time on a nt system like this... i encountered
a couple of problems but the worst of all is that i don't
see ANY api-names, just plain calls to jump-tables...
the EXP entries in my winice.dat
(c:\winnt\system32\drivers\winice.dat --- huh???) seem
to be correct, i included even ntdll.dll and ntoskrnl.exe
coz kernel api's are forwarded in 2k i think but NOTHING
works... on numega's site i read something about nt
debug symbols but where can i download them... can
somebody please zip up a working (NT!!!) s-ice package for
me (including winice.dat and maybe some symbol files).
that would be very very nice... thank you for reading...

robber804
April 30th, 2002, 01:47
You can download the symbol files from

h**p://www.microsoft.com/ddk/debugging/symbols.asp#Windows%202000%20Symbols

Make sure to get the original and the one for whatever service pack you are running.

drcmda
April 30th, 2002, 09:42
nearly 200mb just for a couple of simple debug symbols???
no way... i mean i already exported almost all the the
important dll's successfully and softice acknoiwledges on
them too but it seems that the bases are wrong or
something like this... if i enter "d ExitProcess l 20" this is what
i get: "symbol has not been instantiated"... ok but why the
hell can i enter "u ExitProcess" for example... i get no error
message but it's definitively not the right adress... another
strange thing is that i have no problems with the hal api's
i can dissassemble them, dump them and finaly set break-
points on them... what's going wrong here? please, if anybody
knows a way without downloading a 200mb package i would
be more than lucky