WinDbg
Developed by Microsoft to perform debugging on Microsoft Windows, WinDbg is a powerful tool that can debug in user and kernel mode. It can load memory dumps and crash dumps caused by errors flagged by Windows itself. In kernel mode, it can be used to remotely debug a device driver or a Windows operating system. It can load symbol files linked to the program that aid the developer or analyst in identifying the proper library function format and other information.
WinDbg has a graphical user interface, and by default, shows a command box where you can type in and enter commands. You can add a set of information windows and dock them. It can show the disassembly, registers and flags, the stack (using the memory dump window), and a memory ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access