Welcome to the new Woodmann RCE Messageboards Regroupment
Please be patient while the rest of the site is restored.

To all Members of the old RCE Forums:
In order to log in, it will be necessary to reset your forum login password ("I forgot my password") using the original email address you registered with. You will be sent an email with a link to reset your password for that member account.

The old vBulletin forum was converted to phpBB format, requiring the passwords to be reset. If this is a problem for some because of a forgotten email address, please feel free to re-register with a new username. We are happy to welcome old and new members back to the forums! Thanks.

All new accounts are manually activated before you can post. Any questions can be PM'ed to Kayaker.

softice and visual basic

Questions concerning tools (other than OllyDbg) - IDA Pro, SoftIce, member contributions, etc.
<b>NOTE:</b> You must <b>always</b> make sure you cannot find what you are looking for in our <a href="/collaborative/tools">Collaborative RCE Tool Library</a> before asking for <b>any</b> tools that can do this or that though!
Locked
qmark
Junior Member
Posts: 2
Joined: Tue Oct 22, 2013 2:34 am

softice and visual basic

Post by qmark »

Good morning all
I'm having difficulties debugging a visual basic program with softice
I have win xp sp3 installed in vmware and of course softice installed in the virtual machine. it works to set breakpoints on kernel32 functions, but i need to set it to work on msvbvm60.dll functions, in specific rtcMsgBox.

In c:\windows\system32\drivers\winice.dat i have the following:

; WINICE.DAT
; (SystemRoot\System32\Drivers\WINICE.DAT)
; for use with SoftICE for Windows NT (versions 3.0 and greater)
;
; ***** Examples of export symbols that can be included *****
; Change the path to the appropriate drive and directory
; EXP=\SystemRoot\System32\hal.dll
; EXP=\SystemRoot\System32\ntoskrnl.exe
; EXP=\SystemRoot\System32\ntdll.dll
; EXP=\SystemRoot\System32\kernel32.dll
; EXP=\SystemRoot\System32\user32.dll
; EXP=\SystemRoot\System32\csrsrv.dll
; EXP=\SystemRoot\System32\basesrv.dll
; EXP=\SystemRoot\System32\winsrv.dll

I added an extraline without the semicolon
EXP=\SystemRoot\System32\msvbvm60.dll
And removed the semicolons from the others.

But still i'm not able to set a bpx on msvbvm60!rtcMsgBox
I get a "no ldt" from softice

*i start softice manually from "ntice.bat"

If somebody could guide me step by step to be able to put a bpx on rtcmsgbox i'll be in his debt
User avatar
disavowed
Posts: 1290
Joined: Mon Apr 01, 2002 3:00 pm

Post by disavowed »

SoftICE is very outdated. Try http://ollydbg.de/ instead.
tedshred
Junior Member
Posts: 24
Joined: Tue Oct 02, 2007 9:46 pm

Post by tedshred »

SoftICE Symbol Loader
File > Load Exports
qmark
Junior Member
Posts: 2
Joined: Tue Oct 22, 2013 2:34 am

Post by qmark »

@disavowed: I know about olly, i just need to use softice on this matter
@tedshred: I did that, but i get a "no LDT". here's a picture:
The attachment Untitled.png is no longer available
Attachments
Untitled.png
User avatar
Aimless
Senior Member
Posts: 869
Joined: Thu Sep 13, 2001 3:11 am

Post by Aimless »

My *ICE is a bit hazy, but you could first try running:

EXP MSVBVM60.rtcMs* to see if it has *indeed* picked up on the exported functions.

THEN, before you put a bpx, make sure you are in the right CONTEXT (same command).

Have Phun
Blame Microsoft, get l337 !!
Locked