Exetools  

Go Back   Exetools > General > General Discussion

Notices

 
 
Thread Tools Display Modes
Prev Previous Post   Next Post Next
  #7  
Old 09-07-2004, 03:10
Maviee
 
Posts: n/a
Hi

@armmad8: This sounds a bit strange. I have the following theory. You said, you bpx'ed a specific adress first. Now I don't know how you did it, but it could have happend that you added a breakpoint in the wrong process. If you just le SICE pop up, you are mostly in a system process or so. When you now bpx an adress you would set it in the system process.
As you breaked on getlocaltime first, I assume that you certainly were in the correct process (your app you want to reverse) and so the breakpoint was set correctly (in the right process + at the right place). So always make sre you put a breakpoint in the correct process

@General dicussion: The approach with GetLocalTime and GetSystemTime is not really nice, but well...if you really have to do it, don't even think about settin this breakpoints globally (this would keep you pretty busy for a few hours ). Let Softice break on the Enrypoint and do a

bpx.p GetSystemTime or bpx.p GetLocalTime

The bpx.p limits the breakpoint to the current process (which would be the process of the app you wanna reverse, if you break on the entrypoint) and makes your life easier

Greetings
Mav
Reply With Quote
 


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Softice help beob1 General Discussion 3 01-05-2003 22:50
WinXP + Loaded SoftICE (NuMega DS 2.6 || SoftICE Suite 2.6) NOT SHOTDOWNING... sky General Discussion 0 08-23-2002 06:24


All times are GMT +8. The time now is 00:48.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )