Microsoft Debugger, anyone using it?

[JMI]

You will find useful reading by doing a simple search with something like;

softice vs. windbg

http://www.google.com/search?hl=en&lr=&ie=UTF-8&q=softice+vs+windbg

Perhaps you need some more "general" knowledge about debuggers and ring0 and ring3 for general understanding of why someone might chose one debugger over another in certain circumstances and depending on what they are doing.

Regards,

The reason so many use Softice, and why it's overrated, is because back in the day 1997-2001, that's what all the tutorials were based on. just read any of tuts, and they will all involve Softice and Hmemcpy.

One tut after the other, softice and Hmemcpy.... softice hmemcpy... softice hmemcpy...

[bilbo]

the symboltables one can download for each MS OS seems big, I guess they contain more than just the exports for the system level dlls?

You're right, Wannabe, explore them with the tool you can download from http://pdpdump.sourceforge.net: you will find a lot of interesting things!

Regards, bilbo

edited: sorry, mates, PDP has gone, old hobbit is not fast enough to forget it!. Correct link is http://pdbdump.sourceforge.net. By the way, it is a project by Andrew de Quincey, a great reverser! Regards

[JMI]

Boy those Hobbits are fast. They can go from one side of the world to the other in just moments. (warning, warning: EXCEPTION_DEBUG_EVENT.) You know what I mean.

Regards,