Log in

View Full Version : How to map dead listing offsets to sice addresses???


yaa
June 16th, 2002, 20:34
Hello all,

working on the same target application with sice and w32dasm how is the mapping between w32dasm's disassembled code offsets and softice's instruction addresses done??? I know this must be a really idiot question but I'm just starting out and haven't been able to find a tutorial that uses both of tools explaining how to jump from one to the other.

Yet_Another_Apprentice

----

Do or do not. There is no try.
- Yoda -

NervGaz
June 16th, 2002, 21:38
as far as i know they should be pretty much the same unless it relocates and that should only happen with .dll's

remi
June 23rd, 2002, 15:19
Perhaps what happends is that the file is packed. Anyway, if it is a dll and it is been relocated you can use ida instead of w32dasm. In the load options select "manual load" and it is going to ask you the image base of the file. So you only have to enter the correct one and select the sections of the file you want to load. It's quite simple. But first look that the file isn't packed or that the code you are watching in the sice is in the same module you are dissasembling.