Log in

View Full Version : Any way not to load si405nt


Berger
October 28th, 2004, 17:13
Hi!
I've installed Softice 4.05 on WinXP SP2.
Every thing is working fine.

My only Problem is that i could not find a way NOT to load it on systemstart.

When I change the startup options to "manually" it is still detected by various programs that -as a consequence - refuse to start (skype f.ex.).

What can I do not to load si the next time i start my windows?

Thanks in advance, Berger

Kayaker
October 28th, 2004, 17:49
Hi

From the fossil records which I dug up from a 3+ year old post, this is one nice way of doing it I used to use on Win9x, modify as required...

Kayaker


You can edit autoexec.bat to give you the option of starting up Softice on bootup.

Example courtesy of Eternal Bliss:

--------------------------
@echo off
cls
set Winice1=Yes
set Winice2=No
echo Please Specify Whether You Want To Load SoftIce
echo.
echo Press 1 for %Winice1%
echo.
echo Press 2 for %Winice2%
echo.
echo SoftIce will not be loaded if nothing is pressed within 3 seconds
echo.
choice /c:12 /T:2,3 Choose an option
if errorlevel 2 goto NoLo
if errorlevel 1 goto Lo
:Lo
c:\PROGRA~1\NUMEGA\SOFTIC~1\WINICE.EXE
goto end
:NoLo
echo.
echo SoftIce Will Not Be Loaded
:end
------------------------

naides
October 28th, 2004, 18:03
Quote:
[Originally Posted by Berger]Hi!
I've installed Softice 4.05 on WinXP SP2.
Every thing is working fine.


Perhaps you are very lucky, and Sice 4.05 landed in a particularly friendly system, but as far as I know not even Sice 4.27 was XP compatible. I suggest you perform a more in depth testing to make sure Sice is indeed working as it should in your system.

Berger
October 28th, 2004, 18:49
Kayaker that wont work in my case since under xp si is not loaded via winice.exe like it was with win9k - but thx anyway.

naides i was didnt have to much time to test- but it is starting without errors, ctrl+d brings me to sorftice and the few breakpoints i tried worked too.
The only problem i had at the begining was that pressing ctrl+d turned my screen to black, pressing it again brought me back to windows - i fixed that by including Monitor="0" in winice.dat (i have got the possibility to use 2 monitors and it seems to me si didnt know wich one to use)

Nevertheless i think ill give DS 3.1 a try since it has the posibility to switch the startup mode to "unload" - and thats what i wanted anyway

bilbo
October 29th, 2004, 01:48
Hi, Berger,

you could always 'regedit' HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NTice and set the 'start' value to 4 (0=Boot, 1=System, 2=Automatic, 3=Manual, 4=Disabled)...

Quote:
Nevertheless i think ill give DS 3.1 a try since it has the posibility to switch the startup mode to "unload" - and thats what i wanted anyway

That's a good choice... DS 3.1. has a special driver, bootcfg.sys, which allows you to manually select at boot time the winice configuration.

Regards, bilbo

Berger
October 29th, 2004, 06:03
Hm. Got Ds 3.0 for now.

Now i can perfectly disable it...

But when i load it manually it says it had load successfully, then it brakes:
Quote:
Break Due to KeBugCheckEx (Unhandled kernel mode exception)
Error=50 (PAGE_FAULT_IN_NONPAGED_AREA)


When I press Ctrl+D to get out of SI I get a nasty bluescreen telling me the same Error - time for reboot.

I installed the newes osinfo.dat and osinfob.dat - didnt help.
I'm using WinXp Sp2 (<- )

(Should i have opened another tread for this problem?)

Regards and thx for your help, Berger


EDIT:
Using Symbol Retriever and Symbl Loader did the job - everythin seems to work fine now - thx

nikolatesla20
October 29th, 2004, 07:20
Quote:
[Originally Posted by Berger]

EDIT:
Using Symbol Retriever and Symbl Loader did the job - everythin seems to work fine now - thx



Yes almost all trip up on this problem, the solution has been listed many times, perhaps newbs can be redirected to this exact thread to read the following:

STEP1 TO USING SOFTICE ON WINXP:

GET_THE_FREAKING_SYMBOLS_FROM_M$_BY_USING_
THE_SYMBOL_RETRIEVER!

IF YOU DON'T DO THIS STEP THAN DON'T ASK WHAT'S WRONG !

And have fun reversing

-nt20