I got the SICE 4.30 from the new DS. Using it a some time, I found out that you can have now up to five data windows instead of just one. You must simply append the number to the command WD[.0-.5] (ex. "WD.2" -> show/hide data window #2)

But the EB,EW,ED,... and DB,DW,DD,... commands don't have this extension, so everytime when I edit or show a address, it is always done in the first window (WD.0). Its no use to have five data-windows if four of them always show 00000000h as address. And pressing PgDown millions times is no good.

The manual doesn't tell you anything about it. It doesn't even tell that the WD command was extended. (maybe they didn't update it yet) I did search here but found nothing about it. (I read FAQ!!!)

Can any body here tell me if I missed something or if this is a error from Numega?

The other question is when I use SICE on W2K with the universal video driver, the installation disables the boot logo. SoftICE works fine this way, but I cant see anything which normally happens on the boot screen (ex. CHKDSK, boot time defragmenter, press a key to continue,...).

When I enable the boot logo again, I will see what going on at booting, but when I switch to SICE from my desktop, the SICE window will have a totally damaged font and I only see black and blue points. If I have a command line running, this font will be also damaged. I have SP3 of W2K and the SICE video patch for SP4 doesnt fix this too.

Can any body help me here too?

Hello...?
I dont know what I did wrong. After the FAQ I should search first. I did search here and now did it again with no results. I did not post any target code. I used the name, but it is not a "target", but a "tool", like on the home page "Questions concerning tools only. SI". I think SI is SoftICE. I didn't mail or private message a moderator and ask for warez.
I explained my problem, there is no protection, I said what tool I use, I did not read any tutorial for the reason that I found non and since this is a new SICE function with the multiple windows and it is not in the manual, I dont think that there are tutorials at this time. There is no output listing to show or comment, so I followed all the FAQ (most links there are very out of date or work not). I also think I didn't ask a stupid question.

So why did nobody answer me?????

One reason might be that very few people have had the time to install this new version of Softice yet.

Another reason might be that the few people that actually have done it cannot magically find features that are (allegedly) not in the manual more than you can, and are not willing to read through the whole manual looking for it just to help you.

A third reason might be that Softice has indeed supported multiple data windows since at least version 3.x (although not simultaneously displayable, but anyway), and that people think you should have found the "DATA" command in the manual yourself before asking.


As a rule of thumb, you can always assume that if you get no answer to a question, it was either too stupid or too hard (or both ). If you break the rules in the FAQ, there will normally be at least some kind of flame from someone as a reply.


dELTA

Hi bFro,
are you able to use the mouse under Softice? You can switch from a data-window to another data-window selecting the data-window with the mouse...

Best regards,
ZaiRoN

@dELTA:
What about you install the new SICE before telling me some shit?
Then you would not tell me about allegedly not existing things. The manual (DriverStudio 3.0.0, PDF, March 2003) clearly says:

Toogle the Data window open or closed; and set the size of the Data window.
WD [+ | -] [window-size]

You see? It says not "WD[.0-.5] [+ |-] [window-size]". And it also says "the Data window", which is not plural, so it only knows one data window.
I did not ask people to read manual for me since I did this myself and have no answer for my problem.

Your information about the DATA command is also not right. The manual says "Only one Data window is visible at any time". But this is wrong, the same way as the missing WD parametrers. SICE 4.30 can show up to 5 data windows and all at the same time. Using DATA will switch to the window with the number you used and keep the other windows on screen, so I can use Alt-D to switch to this window, but a "D 407000" will always change the showing of the first window.

So that you can not answer my first question and do not answer my secound and no flames are here I think the question is too hard and not too stupid at least for you. So if you have a newer manual than show it to me. For somebody who is moderator and names himself administrator you show not much knowledge!


@ZaiRoN:
Yes, I can use the mouse to switch between the windows. I did it all the time because it is faster then the DATA command. But the problem is the same. Four windows show always the address 00000000h and the only way to change this is by pressing PgUp and PgDown when having this windows active. This is not practical to get from 00000000h to 00407000h as example. I know of the DEX command but it is a pain to handle with it without macros.

Not for me... 'd xxxxxxx' changes the contents of the data window with the focus and not the first window...

ZaiRoN

That is strange... I can have highlighted every window I want (with DATA or with mouse), but "D" and "E" always end in the window with number "0" and the other one still keep the focus.

I just downloaded the official DS 3.0 command reference from May 2003 from the official homepage and it still has no mention of the changed WD command and DATA still only shows one window at a time they say.

But you can see more then one data window not like dELTA says?

Sure!

That is exactly what everyone else did (i.e. not tell you shit before installing that version), and that was exactly what I tried to explain to you as one of the reasons for the lack of replies.



Err, I'm not really sure what this is supposed to mean, but I'm quite certain it's just some lame attempt to put words in my mouth and shift the focus from the fact that I was right and you were wrong about the DATA command (yeah, sure, it's only in your copy of Softice that it won't work).



Well, that would still be completely in accordance with my boolean statement about when a post will get no replies. Btw, asking "hard" questions is not necessarily a good thing.



Please look up the words "moderator" and "administrator" in your thesaurus. I'm quite sure that there will be no mention of having to know the Softice manual by heart to earn those titles, but probably rather something about explaining to stupid people why nobody replies to their posts, and keeping the board safe from people with too much attitude and too little own contributions.


dELTA

bFro
Show us your much much knowledge. we all will like it for sure. Frankly members of this board reversed tough targets using single data window why you require 5 data windows just bcos they have it in new version of softice ? can't you live with the one or R u a beta tester for them ?

Also before making your *funny* statements towards any moderators or rather any members who are gems of this forums, please take your time read & understand their posting. If you have common sense (which is lacking in many of them) ask your self who has more knowledge, you'll get the answer.

sope.

>The manual doesn't tell you anything about it. It doesn't even tell that the WD command was extended.

So you can only see the only edit data window.The manual is straight forward.B]5 DATA WINDOWS[/B] IS A NEED OR WANT?

@dELTA:
Why did you not tell me that you did not have the new Softice? You did not tell that you have it but I thinked it since your answer looked like it, so this was a missunderstandment.

You said that the DATA command can only show one window at the same time. The manual said the same. You and the manual are wrong. The DATA command opens the window if needed, but can not close it again.

Then it was a hard question but where must I ask hard questions then? The other forum is named "advanced reversing and programming", not about tools.

The main page says that you are moderator for this forum so you should know something about Softice or else it is not only wrong forum but wrong messageboard. And the administrator job is to look after the computer and not the posts.

And what you want with "own contributions"? You want to see how a Softice disassembled looks or what?


@sope:
Tell me what knowledge you want to know and I will if I can! I am not beta tester for them and I lived with one data window all the time but its more easy with more windows so you can put one for to see when code is decrypted and one for the IAT and one for the data section and one to follow the protector memory moving and the other one if you need it and using BPM on them help you much with only affect that your code window is small.

And what you mean with "funny statements"? I know that my english is not good but I went to school when it was not possible to take english as language there. And who are the gems of the forum here? Just take a look a the member list and the first ten. Where are Kayaker, DakienDX, tsehp, evaluator, squidge, JMI, Woodmann, crUsAdEr, foxthree and nikolatesla20? Did they answer me anything? Do they know the answer?

I think I have common sense, but the people without have a different definitition of it so that they have it also. How can I answer who has more knowledge if I dont know them?


@esther:
The manual says you can only see one window at the same time. But the new Softice 4.30 has a new WD command so you can have up to five windows (even if the command help only shows you up to four). The problem is that you can see five windows on the screen, but you (or at least my version) only changes the address of the first window when using the "D" or "E" commands.

Two steps back.
Look at the contents of the postings
Looking at the mood.

Let us not get into another pissing contest. This thread should be moved to the Numega support board for the short fused/emotionally unstable,

and stop feeding the troll.

1.
I most certainly did not say that "the DATA command can only show one window at the same time", you really should read my post again.

2.
And where should you ask "too hard" questions? The answer is: nowhere. A question being "too hard" probably means that people would have to spend too much time doing research for you to answer it, research which you should instead do yourself. Another good tip is not to start whining about people not answering your questions, but instead think about what's wrong with the question, do the research yourself, and then possibly return with a rephrased set of questions. It's probably a pretty bad idea to start offending people who just gave you the correct answer too.

3.
Please look up the words "moderator" and "administrator" in your thesaurus again. If necessary, look up the word "thesaurus" in your dictionary first.

4.
To prevent any further "missunderstandments" or flamewars, this thread is now closed. If you still want to get kicked from the board really badly, you can PM me.


dELTA