WinDBG
Online reference
http://msdn.microsoft.com/en-us/library/ff540507.aspx
http://www.osronline.com/ddkx/ddtools/gflags_7u5v.htm
Useful commands
command | description |
---|---|
ta | trace to address; |
x *! | full modules list (atm lm is only showing basic modules); |
!gflag +soe | catch all exceptions (first exception handling) apart from STATUS_PORT_DISCONNECTED or if the exception code is not an error code; |
!process 0 0 | list all process with basic info; |
!process <addr> 0x1c | list detailed info of attached process, with its threads; |
!process <addr> | attach to the process of a given address; |
!thread <addr> | attach to the thread of a given address; |
.reload /user | reloads user symbols and enables resolving of usermode |