Log in

View Full Version : SI Breakpoints


m4nd4t3
October 6th, 2002, 02:46
I have a newbie question regarding breakpoints in SoftIce. I need to set a BPX on an API used in a 3rd party DLL. The exe calls the API from License.DLL and when I try to set a bpx it says 'Symbol not loaded'. I tried adding it to winice.dat

EXP=C:\Program Files\Program\Program.exe
EXP=C:\Program Files\Program\License.DLL

But I still receive the same message. What am I doing wrong? How should I import these APIs so I can use them?

Pyrae
October 6th, 2002, 04:45
Actually the SI Symbol Loader is enough to dynamically load exports.
In winice.dat try something like

EXP=C:\Progra~1\App\YourDLL.dll

or

EXP="C:\Program Files\App\YourDLL.dll"

as SI might have problems with spaces in those strings.


so long, Pyrae

naides
October 6th, 2002, 15:12
Quote:
Originally posted by m4nd4t3
I have a newbie question regarding breakpoints in SoftIce. I need to set a BPX on an API used in a 3rd party DLL. The exe calls the API from License.DLL and when I try to set a bpx it says 'Symbol not loaded'. I tried adding it to winice.dat

EXP=C:\Program Files\Program\Program.exe
EXP=C:\Program Files\Program\License.DLL

But I still receive the same message. What am I doing wrong? How should I import these APIs so I can use them?


Also try the utility called "symbol loader" in your SoftIce folder.
You should be able to point and click the license.dll you are aiming to include, then you should be able to bpx on it.
If every thing else fails, dissassemble the .dll, find the entry point of the API you wish to break on, and change
the first byte for "CC", Int 03, noting the original byte. then, in softIce place a bpint 03 breakpoint. it shoud break when the API gets called. Once there, you have to manually revert the "CC" byte to its original value, or the app will surely crash.

m4nd4t3
October 7th, 2002, 01:22
The tilde worked. I never even thought of it. Thanks much everyone.