Log in

View Full Version : Loading OllyDbg at BootTime


karthikbalaguru
January 6th, 2005, 23:26
Hi all,
How could i use OllyDbg to take control at the start of the
boottime itself so that i can use it for debugging of
my win98 diplay driver ?

clearly,
That is, it should be able to take control at the initial stage itself
and be able to load other drivers/modules so that i can
identify the time at which mine gets loaded and step into it.

Do let me know,
Thnx in advanc,
karthik bala guru

hosiminh
January 7th, 2005, 02:48
Ollydbg is Ring-3 debugger thus it cannot debug ring-0 processes (kernel od OS).
Softice (part of the DriverStudio) is ring-0 debugger , so you can debug kernel , display drivers and other processes that run on ring-0 privileges and of course all other processes .

A short word with those rings : you can "jump" from ring-0 to ring-1 (or higher) . You cannot jump from ring-3 to ring-0

blabberer
January 7th, 2005, 02:51
ollydbg is a ring 3 (user mode debugger) it is not a kernel debugger
and as such ollydbg doesnt need to be loaded at boot
ollydbg doesnt use any drivers to do the debugging
if you are planning to debug a driver and are looking for a kernel debugger then softice (a commercial debugger that works on standalone machine would be the best choice)
if not you can try to get windbg from microsoft (some kind of eula based
half baked free licenseware )
it is a usermode debugger as well as kernel debugger
the problem with kernel debugging with this debugger is you need
two computers one running debugger and other running the debuggee
connected through some thing called nullmodem cable (i think that is the term)
or if you are using xp or w2k3 server then you can even do local debugging of kernel upto certain extent
or this functionality can be extended to w2k if you get
livekd from sysinternals another freeware

but you want to debug a dll it seems from your other post
dlls can be debugged directly with ollydbg as they run in user mode
not in kernlemode afaik

hope the explanation helps
have fun