Results 1 to 5 of 5

Thread: BPRW <Module> code:T...

  1. #1
    Programmer Run Amock... Bengaly's Avatar
    Join Date
    Aug 2001
    Location
    Somewhere over the Rainbow
    Posts
    289
    Blog Entries
    1

    BPRW <Module> code:T...

    OK that's wierd..it seems SoftICE won't break on
    any BPR i tell it to..
    Even if the module is loaded in Symbol loaded...
    nothing it just says:
    "module not found" <== and the module is already loaded in sumbol loader...
    weird..anyone has suggestion??

    [bpx works fine ;P]
    "knowledge is now free at last, everything should be free from now on, enjoy knowledge and life and never work for everybody else"

  2. #2
    noname
    Guest
    Bengaly (08-11-2001 02:08):
    OK that's wierd..it seems SoftICE won't break on
    any BPR i tell it to..
    Even if the module is loaded in Symbol loaded...
    nothing it just says:
    "module not found" <== and the module is already loaded in sumbol loader...
    weird..anyone has suggestion??

    [bpx works fine ;P]
    Heya,
    First of all you post this on the wrong forum
    you should post it in Tools of the Trade forum you can see it below
    in the list box.
    Ok to the point.how do you breakpoint?
    Please read the faq before posting anything.

    example:
    bpr low eip high eip r w

    bpr 403000 405000 r w
    noname
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  3. #3
    Programmer Run Amock... Bengaly's Avatar
    Join Date
    Aug 2001
    Location
    Somewhere over the Rainbow
    Posts
    289
    Blog Entries
    1
    That's not what i have Ment Nomane.
    BPR works fine, i know how to sue bpr.

    It's just BPRM <Module Name> T
    is not Breaking..
    Or u mean i need to add the Low/High EIP as well?
    But i don't think i need to.
    i wanna use BPRM in order to do BACKTRACE using loaded APP in SYmbol Loader.
    if u have another suggestions plz let me know.
    "knowledge is now free at last, everything should be free from now on, enjoy knowledge and life and never work for everybody else"

  4. #4
    Teach, Not Flame Kayaker's Avatar
    Join Date
    Oct 2000
    Posts
    4,081
    Blog Entries
    5
    Bengaly (08-11-2001 08:43):

    It's just BPRM <Module Name> T
    is not Breaking..
    Hi,

    I'm sure you realize it's bprW for one

    Make sure the module is actually loaded and that's the context you're setting up the backtrace in. Type TASK in SoftIce, the task with the asterik beside it is the one running and this is the actual module-name you need to use.

    'BPRW Notepad T' should work for Notepad. If it doesn't, then are you running NT?, I hear BPR commands don't work in NT.

    Also, if your module name has a long filename (> 8 chars?) SI may not recognize it, so it's best to rename it first before using BPRW.

    Hope this helps,
    Kayaker

  5. #5
    Programmer Run Amock... Bengaly's Avatar
    Join Date
    Aug 2001
    Location
    Somewhere over the Rainbow
    Posts
    289
    Blog Entries
    1
    Yes i realize it's BPRW now..
    but still there is no effect of the breakPoint,
    I am running on win98.
    And it seems either: BPR/BPM/BPRW are not working.
    like i load the program into SYMBOL LOADED.
    while in Sice i press "SHOW" and i see the module name running, but 'BPRW <Module> T'
    Telling me "Module not found"..
    I use Sice 4.0.5 Built 334.
    Hope to get more Answers.

    Have Fun ;D
    "knowledge is now free at last, everything should be free from now on, enjoy knowledge and life and never work for everybody else"

Similar Threads

  1. Hidden Kernel Module (Driver) detection techniques
    By Ramsey in forum Advanced Reversing and Programming
    Replies: 12
    Last Post: March 10th, 2011, 09:08
  2. Processor Module absolute address problems
    By hwnd in forum Tools of Our Trade (TOT) Messageboard
    Replies: 2
    Last Post: November 5th, 2009, 15:15
  3. Replies: 0
    Last Post: January 12th, 2008, 00:08
  4. Different papers about SMC, polymorph code and anti trace code...
    By OHPen in forum Advanced Reversing and Programming
    Replies: 7
    Last Post: March 29th, 2007, 15:45
  5. How to Trace Our Module
    By Zkhan13 in forum The Newbie Forum
    Replies: 3
    Last Post: May 3rd, 2003, 06:20

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •