Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options not deleted user 3556

A graphical stand-alone multipurpose debugger for Microsoft Windows, distributed on the web by Microsoft.

6 votes
Accepted

Windbg breakpoint counter

0072 (0100) : 0072 - this is the number of passes remaining before the breakpoint is hit. (0100) - this is the original limit passed in. Note that these are hexidecimal values, so the crash was hi …
josh poley's user avatar
3 votes
Accepted

x64 Memory Pointer and Addressing modes

The main reason to align the data is for performance (some architectures will fault on misaligned data, but since you tagged this with windbg, we will assume amd/intel x64 + windows). …
josh poley's user avatar
3 votes

How to set breakpoint on C++ symbols?

class TokenHandle { public: int data; TokenHandle(int i) { data = i; } TokenHandle operator-(TokenHandle& in) { return TokenHandle(data - in.data); } }; WinDbg
josh poley's user avatar
1 vote

Windows 7x86 System Freezes when running assembly program with int 3h

Make sure you are setting both of them to the appropriate version of windbg. …
josh poley's user avatar
1 vote
Accepted

How to find the name of the method in Managed Code using Windbg and SOS?

You can use the ip2md sos command to get the method name for jitted code. 0:016> k # Child-SP RetAddr Call Site 00 00000000`013fe688 00007ffb`4567ddb8 win32u!NtUserWaitMessage+0x1 …
josh poley's user avatar
1 vote

Does opening a crash dump run a file in memory?

In short, yes it is safe. The debuggers won't map crash dumps into executable memory, and extensions such as .call only work in live debugging.
josh poley's user avatar