I was following Microsoft’s advice to install WinDbg as a post mortem debugger, but didn’t get the expected results.
It turns out that WinDbg x64 version will register itself as the post mortem debugger for 64-bit and 32-bit processes, and not just for 64-bit processes:
Of course, WinDbg x86 version will register itself only for 32-bit processes:
So to make sure that WinDbg x64 version will debug only 64-bit processes and WinDbg x86 version will debug 32-bit processes, run the post mortem registration commands in this order:
"c:\Program Files (x86)\Windows Kits\10\Debuggers\x64\windbg.exe" -I "c:\Program Files (x86)\Windows Kits\10\Debuggers\x86\windbg.exe" -I
And of course, run the commands from an elevated command prompt, as you’ll need to write to the HKLM hive. Otherwise you’ll get a reminder:
Didier Stevens 
[…] Quickpost: Windows Debugger as Post Mortem Debugger – 32-bit & 64-bit […]
Pingback by Overview of Content Published In May | Didier Stevens — Tuesday 5 June 2018 @ 0:01