Re: Initiation of a Debugger using CreateProcess



As good example look at CrashFinder from
http://www.amazon.com/exec/obidos/tg/detail/-/0735615365/qid=1119704031/sr=8-4/ref=pd_bbs_ur_4/002-0051188-5920051?v=glance&s=books&n=507846
As for SoftIce it change IDT table and that the only way to treat ( debug )
interrupts in the same computer.
WinDbg from MSFT demand to use host/target pair instead.
You'll find description of all debuggers in book I mention

Arkady

"Jacky Luk" <jl@xxxxxxxxxx> wrote in message
news:O8Mzv5VeFHA.1040@xxxxxxxxxxxxxxxxxxxxxxx
> Hi,
> I'm intending to write a private debugger for my own use, but it must be
> started with CreateProcess, how can I retrieve and control its "context"
> such as the base address loaded by the Windows Loader? Is it possible to
> disassemble the exe in this way? Also, how can I implement the feature of
> VB6 debugger (called JIT?)such that I can control the context outside the
> debugger when the debugger is waiting on an event? (so that I can switch
> to other programs) I have encountered this problem when using Softice...
> For example, when Softice is "doing" something, other processes are
> freezed and you jump out of it (Ctrl-D) and come back later, (because of
> its sticky feature), the current address of the debuggee would have
> changed, and it is looking at something else than what I was doing
> before.... quite subtle, hope you understand...
> Thanks
> Jack
>


.



Relevant Pages

  • Compuware Softice (DbgMsg driver) Local Denial Of Service
    ... Compuware Softice (DbgMsg driver) Local Denial Of Service ... On NT based operating systems Debug Messages are being sent by executing ... Debug Messages and display them into the debugger window. ...
    (Bugtraq)
  • [Full-disclosure] Compuware Softice (DbgMsg driver) Local Denial Of Service
    ... Compuware Softice (DbgMsg driver) Local Denial Of Service ... On NT based operating systems Debug Messages are being sent by executing ... Debug Messages and display them into the debugger window. ...
    (Full-Disclosure)
  • Re: Re:Debugging in the device-kernel
    ... A test system to use as a target should cost around $500 to $1000. ... it was the only decent debugger and I used SoftIce on NT ... and it outshines SoftIce just as the sun outshines a match. ...
    (microsoft.public.win32.programmer.kernel)
  • Re: SoftIce crashes with Windows 2000 SP4
    ... A cheap test system can be had for $500 and no ... SoftIce package costs less than $1000. ... you have only one for both the debugger and the OS. ... > But I have all the windows docked on screen, so I don't have to do ...
    (microsoft.public.development.device.drivers)