Why use Softice over Olly?
 

Apart from debugging low level stuff, what advantages does Softice have over Olly?

I love Olly, but I am more comfortable with Softice now.

:D hehe OK

so can you tell me how you wold debug low level windows NT driver and services in Olly? Olly is only Ring3 debugger so you can't debug it in Olly

http://www.exetools.com/forum/showthread.php?t=3981

and

small crackme to show advantages SICE

http://picasso.poupe.net/vbulletin/showthread.php?s=&threadid=562

:)

with Olly you can debug only part of this crackme

because
 

i like olly coz i use it only when needed, contrary to SIce which is always there

Same programs contain SOFTICE anti-debug detection => then use other debugger, for example Olly.

OllyDbg rulez

OllyDbg is pretty fine (by me), but, i personally use SoftICE most of the time.

Quote from Fravia RCE FAQ :
"Is it better to use Softice or Ollydbg?
Even if Softice is more powerfull than Ollydbg, Ollydbg works well on most applications; the main difference is that Softice is kernel-mode and Ollydbg is user-mode... make your choice. "

From my expirience, there is much more 'anti protection' for SoftICE cuz it's more spread thru the crackers...

But, as advanced reverser, you should know how to use both of them, same as u use IDA and W32Dasm for disassembling ...

Hope this helps

-
Fr1c [F8]

I prefer using Olly coz I think it is more comfortable than SICE, but sometimes I have to use SICE coz it's more powerfull (obvious), but software manufacturers use Anti-SICE tricks too much now.
So I think you should be able to use both debuggers. Just choose your favorite one and use it in most cases and the second one will be an alternative tool.

With OllyDbg, we can write a plugin for it. Write a "plugin" for SoftIce is hard, we need to write a KMD (IceDump, IceExt) or a WinDbg extension. Not many people can do it. And with OllyScript, we can automatic do many jobs.
The current version of OllyDbg can not load .pdb file from symbols path. I have mailed to Olek this problem. Hope he will fix it. If he not, I plan to write a plugin to load .pdb files of system DLLs and a plugin to invoke the MSDN from OllyDbg. I need more times.

yes

i have the same opinion as many of us here

it's very very necessary to have many various tools, so it's good to have both of this debugger

then you can choose

i agree that olly is more comfortable than SICE and is much less anti Olly tricks than SICE antidebug :cool:

Good!
 

SI is good & Olly is good,but run on problem ;)

olly is better than Sice, it's much easier to use.

olly works in ring3 and si works in ring0

I can't even get SoftICE to work, so I really don't know the difference.

OllyDbg is working in USER MODE, and S-ICE is working in Kernel MODE(RING3 and RING0).

Olly is easy for newbies but SI is better. I think.

olly is free, sice is very difficult to get the latest version.
i prefer the simple olly, and used sice only when olly cant do a thing.

i rarely do debugging, and putting sice will make windows have debugging drivers always. i like to keep windows clean..

so i use olly when i want, small, no drivers, no integration into window..

May be it can Inside Kernel :confused:

I personally prefer SoftIce for debugging programs. I only use Olly for debugging the app while I am coding a Keygen for it, so I can code the Key Algo and check what must be done whitout stopping the whole system.

Softices docs show the line and where it is that starts softice.
I used older v 3.63 and I used to just comment out the startup line and reboot the computer. When softice is needed, just take the comments off
and reboot again. It isn't elegant, but it will let you have softice on your computer without it running all of the time. The line used to be in the autoexe.bat file on my old win98se I think.
Regards