debugging - 我应该使用 windbg_x86 在 64 位窗口中调试 32 位应用程序吗？

Question

我使用带有英特尔 CPU 的 Windows 7 x64。哪个 windbg 工作正常，我应该用于调试 x86 应用程序吗？
还有另一个类似的问题，我将 windows XP x86 安装为 vmware guest 进行内核调试。我的主机是 x64 windows 7。我应该使用哪个 windbg？，windbg x86 还是 x64 进行内核调试？

Answer 1

我不想说 RTFM，但在这种情况下，这就是答案。
这是 WinDbg 帮助的摘录:

Host computer running a 32-bit version of Windows If your host computer is running a 32-bit version of Windows, use the 32-bit debugging tools. (This situation applies to both x86-based and x64-based targets.)

x64-based host computer running a 64-bit version of Windows If your host computer uses an x64-based processor and is running a 64-bit version of Windows, the following rules apply:

• If you are analyzing a dump file, you can use either the 32-bit debugging tools or the 64-bit debugging tools. (It is not important whether the dump file is a user-mode dump file or a kernel-mode dump file, and it is not important whether the dump file was made on an x86-based or an x64-based platform.)

• If you are performing live kernel-mode debugging, you can use either the 32-bit debugging tools or the x64 debugging tools. (This situation applies to both x86-based and x64-based targets.)

• If you are debugging live user-mode code that is running on the same computer as the debugger, use the 64-bit tools for debugging 64-bit code and 32-bit code running on WOW64. To set the debugger for 32-bit or 64-bit mode, use the .effmach command.

• If you are debugging live 32-bit user-mode code that is running on a separate target computer, use the 32-bit debugging tools.