Symbol Loader doesn't breaks under Win2K

[Plasma]

hi guys,

i got some strange problem with symbol loader in Win2K. every time i want to load an executable in it, it doesn't breaks in.
although i changed the characteristics of the appropriate section to E0000020.
as far as i can remember it worked for me in win98...

what am i doing wrong?

[Aimless]

Are you using the SICE from the Driver Studio?

If so, you have to go to settings menu on the top and go to the loader everytime.

...Have Phun

[Plasma]

i did install DriverStudio v2.6 with SICE and Symbol Loader.
now when i want to load an executable in, it loads it and then the program doesnt even start and the errormessage also doesnt appears like it does normally..
with SICE 4.05 the programs didnt break in, but at least they started

output:

----- Loading symbols for 'D:\Shareware\*.exe' -----
D:\Shareware\*.exe opened successfully
Translating file: D:\Shareware\WinISO\WinISO.exe...
Error: No debug info..
----- 'D:\Shareware\*.exe' symbols not loaded -----

[Solomon]

a little trick to stop at the entry point in Win2k:

1. use LordPE to get the entry point of your target, assume it's XXXXXXXX.
2. BPX LoadLibraryA
3. then use Symbol Loader to load your target. Each time when SICE pops up, just press F12, then check whether we are in the context of RPCRT4.DLL. If so, just clear the breakpoint and type "g XXXXXXXX" to get to the entry point.

It always works.

[roocoon]

In my system it works with a simpler way.
Open up the debugee program with the Softice Loader.
Go to the Loader's Module/Settings/Debugging.
The Load Executable and Stop at WinMain should be checked of course.
If they already are, check the Load Symbols Only, then right after check again Load Executable and click OK.
Back on the main screen click the Load button.
No idea why it works like that. It seems that the Loader doesn't initialize its control structure properly with the Load Executable setting and needs a reminder.

[crUsAdEr]

erm...

I just use LordPE or PEditor "Break 'n Enter".. works all the time....

[Lbolt99]

Quote:

Originally posted by crUsAdEr erm... I just use LordPE or PEditor "Break 'n Enter".. works all the time....

And there I was doing EB FE @ OEP or bpx getversion all the time.. lol.

Thanks for the tip, works great

[Plasma]

thanks for your posts dudes,

i tried the solution from roocoon, and it worked!!!
seems like there's a little bug in SL...

good work!