In this section, we will try to be familiar with the Windbg.

Let’s start by opening the debugger.

Now i will write simple C Program and compile it to get an executable.

//C Code Number 1
#include <stdio.h>

void main(void)
{
	printf("Uzumaki Rem01x");
}

Now compile it and let’s attach it to windbg.

Now let’s try to get some information about our target.

!peb // DUMP Process Environment Block

Notice the valuable information we got from the application.

Now let’s get information about loaded modules.

lm

Now, let’s assume that we need more information about specific modules.

lmv m ntdll // ntdll is the module name