Search This Blog

Wednesday, March 15, 2017

Windows Debugging and Troubleshooting

great session  from you-tube

https://youtu.be/2rGS5fYGtJ4

some commands :
g = go/continue
r - regisers
db - display RAM bytes
dc - display as dword
~ - thread
k = stack
~* - for each thread run the next commnd  = e.g ~*k - show stacks for all threads
lm - list module
!peb  - get some info about the dump process such as command line , env settinsg








No comments: