x64 Windows Debugging: Practical Foundations (Paperback)

Written by the founder of DumpAnalysis.org this book is not about bugs or debugging techniques but about background knowledge everyone needs to start experimenting with x64 WinDbg, learn from practical experience and read other advanced debugging books. Solid understanding of fundamentals like pointers is needed to analyze stack traces beyond !analyze -v and lmv WinDbg commands. This is the book to help technical support and escalation engineers and Windows software testers without the knowledge of assembly language to master necessary prerequisites to understand and start debugging and crash dump analysis on x64 Windows platforms. It doesn't require any specific knowledge, fills the gap and lowers the learning curve. The book is also useful for software engineers coming from managed code or Java background, engineers coming from non- Wintel environments, Windows C/C++ software engineers without assembly language background, security researchers and beginners learning x64 Windows software disassembling and reverse engineering techniques. This book can also be used as AMD64 and Intel EM64T assembly language and x64 Windows debugging supplement for relevant undergraduate level courses. For someone, who wants to learn these foundations in the context of 32-bit Windows environments there is a separate x86 book (ISBN: 978-1-906717-10-0). However, this book is completely independent from that earlier book and almost every illustration was recreated to reflect x64 architecture and x64 Windows ILP 32-32-64 model (Integer-Long-Pointer).

這本書是由DumpAnalysis.org的創始人所撰寫，它不是關於錯誤或除錯技巧，而是關於每個人在開始實驗x64 WinDbg、從實際經驗中學習以及閱讀其他高級除錯書籍之前需要的背景知識。要分析堆疊跟踪超出!analyze -v和lmv WinDbg命令，需要對指針等基礎知識有扎實的理解。這本書旨在幫助技術支援和升級工程師以及沒有組合語言知識的Windows軟體測試人員掌握理解和開始在x64 Windows平台上進行除錯和崩潰轉儲分析所需的先決條件。它不需要任何特定的知識，填補了空白並降低了學習曲線。這本書對於從受控代碼或Java背景轉行的軟體工程師、從非Wintel環境轉行的工程師、沒有組合語言背景的Windows C/C++軟體工程師、安全研究人員以及初學者學習x64 Windows軟體反彙編和逆向工程技術的人也很有用。對於想要在32位Windows環境下學習這些基礎知識的人，有一本獨立的x86書籍（ISBN：978-1-906717-10-0）。然而，這本書完全獨立於之前的書籍，幾乎每個插圖都重新創建以反映x64架構和x64 Windows ILP 32-32-64模型（整數-長整數-指針）。