Soulami T. - Inside Windows Debugging [2012, PDF/EPUB, ENG]

A Bit of Background
Chapter 1 : Software Development in Windows
Windows Evolution
Windows Architecture
Windows Developer Interface
Microsoft Developer Tools
Summary

Debugging for Fun and Profit
Chapter 2 : Getting Started
Introducing the Debugging Tools
User-Mode Debugging
Kernel-Mode Debugging
Summary

Chapter 3 : How Windows Debuggers Work
User-Mode Debugging
Kernel-Mode Debugging
Managed-Code Debugging
Script Debugging
Remote Debugging
Summary

Chapter 4 : Postmortem Debugging
Just-in-Time Debugging
Dump Debugging
Summary

Chapter 5 : Beyond the Basics
Noninvasive Debugging
Data Breakpoints
Scripting the Debugger
WOW64 Debugging
Windows Debugging Hooks (GFLAGS)
Summary

Chapter 6 : Code Analysis Tools
Static Code Analysis
Runtime Code Analysis
Summary

Chapter 7 : Expert Debugging Tricks
Essential Tricks
More Useful Tricks
Kernel-Mode Debugging Tricks
Summary

Chapter 8 : Common Debugging Scenarios, Part 1
Debugging Access Violations
Debugging Heap Corruptions
Debugging Stack Corruptions
Debugging Stack Overflows
Debugging Handle Leaks
Debugging User-Mode Memory Leaks
Debugging Kernel-Mode Memory Leaks
Summary

Chapter 9 : Common Debugging Scenarios, Part 2
Debugging Race Conditions
Debugging Deadlocks
Debugging Access-Check Problems
Summary

Chapter 10 : Debugging System Internals
The Windows Console Subsystem
Anatomy of System Calls
Summary

Observing and Analyzing Software Behavior
Chapter 11 : Introducing Xperf
Acquiring Xperf
Your First Xperf Investigation
Xperf’s Strengths and Limitations
Summary

Chapter 12 : Inside ETW
ETW Architecture
Existing ETW Instrumentation in Windows
Understanding ETW Stack-Walk Events
Adding ETW Logging to Your Code
Boot Tracing in ETW
Summary

Chapter 13 : Common Tracing Scenarios
Analyzing Blocked Time
Analyzing Memory Usage
Tracing as a Debugging Aid
Summary

Appendix : WinDbg User-Mode Debugging Quick Start
Starting a User-Mode Debugging Session
Fixing the Symbols Path
Fixing the Sources Path
Displaying the Command Line of the Target Process
Control Flow Commands
Listing Loaded Modules and Their Version
Resolving Function Addresses
Setting Code (Software) Breakpoints
Setting Data (Hardware) Breakpoints
Switching Between Threads
Displaying Call Stacks
Displaying Function Parameters
Displaying Local Variables
Displaying Data Members of Native Types
Navigating Between Call Frames
Listing Function Disassembly
Displaying and Modifying Memory and Register Values
Ending a User-Mode Debugging Session

Appendix : WinDbg Kernel-Mode Debugging Quick Start
Starting a Kernel-Mode Debugging Session
Switching Between CPU Contexts
Displaying Process Information
Displaying Thread Information
Switching Process and Thread Contexts
Listing Loaded Modules and Their Version
Setting Code (Software) Breakpoints Inside Kernel-Mode Code
Setting Code (Software) Breakpoints Inside User-Mode Code
Setting Data (Hardware) Breakpoints
Ending a Kernel-Mode Debugging Session