How Does a Debugger Work - Debug Events Explained

How does a windows debugger work under the hood? What are debug events and how are they used to control a target? Expand for more...

Our 7-part tutorial series on debugging fundamentals:

-----
OALABS DISCORD

OALABS PATREON

Twitch

OALABS GITHUB

UNPACME - AUTOMATED MALWARE UNPACKING
-----

[zxborg]

Very cool. I'm writing an 8 bit multi-CPU symbolic simulator with static analysis and code tracing/debug capabilities, it's cool to see how the main OS's implement the debug/single step functions. Thanks for the explanation.

[antonantochi]

Hex God bless you and your short tutors 👍

[Bianchi]

Creative video, thanks for sharing it :)

[mytechnotalent]

I am old enough to use dos debug now I feel old and wish I never admitted that.

[fikrahack]

Bro thnx for all what you do, i have question i make simple program just createprocessA and put it in debuger. And make bp in Ldrinitializethunk in ntdll, now when i goon it start first in bp after that it go to the same bp and createprocess in suspend mode, after i click continus it createprocess normaly, my stupid question, there is parrent procees and child process but the same LdrInitializethunk controle the two !!!

[saultube]

Can you please add support for old MSDOS .exe .sys and .com files?