This is a very common question, we encounter almost all the times. Just imagine a situation, we have got a memory dump from somewhere and want to see what operating system which is run there and what SP is installed.. For this, there is a very simple...

Windbg has not only registers reading functionality but it can also modify registers when doing live debugging.. Its really useful sometimes to modify the register values and take different path to check for particular code branch.. You can modify the...