View Full Version : Program's memory location in SoftIce (DriverSuite2.6)+ W2k
d.u.h.a.C.Z.e.k
August 22nd, 2002, 07:40
Hi all,
how can I find out where (in memory) is located program? How I can set BPX on program when I don't know CS segment address?
If program is running and I press CTRL+D SoftIce show me only hal! process...
Jon
August 22nd, 2002, 09:25
well try breaking on a api the program uses ...

and softice will popup when it will use this api
DakienDX
August 22nd, 2002, 11:11
Hello d.u.h.a.C.Z.e.k !
You should try loading the program with the SoftICE Symbol Loader or with ICELoad.
This way you'll start debugging at the entrypoint of the application, which enables you to break on events taking place before the application is really running. (for example programs checking trial time left at startup)
It's also the only way for command line application which show just a few lines of text and exit again.
arab
August 28th, 2002, 18:12
I usually solve this problem by switching the address space to the program i want to debug
i.e.
:addr iexplore
then i can set the break point properly
arab
Powered by vBulletin® Version 4.2.2 Copyright © 2018 vBulletin Solutions, Inc. All rights reserved.