Tuesday, 5 March 2013

Windows Internals - Quick References

Just for my reference

1. PE Format
2. Call Stack
http://stackoverflow.com/questions/1395591/what-is-exactly-the-base-pointer-and-stack-pointer-to-what-do-they-point
http://en.wikipedia.org/wiki/Call_stack
3. asm int 3 equivalent - Debugger.Break();
4. Windows comes with inbuilt dump capture - WER(Windows Error Reporting)
I will followup this post with Demo StackWalk(walking thru call stack) debugging example.