Search This Blog

Monday, 25 August 2014

WinDbg : The Different Type Of Commands

WinDbg (lovingly called Wind Bag) is a very powerful and versatile debugger. Till date, I haven't met anyone who claims to know the entire command set for WinDbg. While in the subsequent posts I would be detailing out some of the most frequently used commands, I wanted to start with giving a concept of the different command types which WinDbg supports.

These are the different type of commands in WinDbg:


Type
Example
Explanation
Regular commands
kb, lm dt
Apply to the current debugging session. E.g. show stack dump etc.
Meta commands (prefixed with a dot)
.load, .sympath, .lines, .process, .thread, .hh
Apply to the debugger itself. E.g. load extensions, show help and so forth.
Extension commands  (prefixed with an exclamation mark also called bang)
!analyze, !teb, !peb, !pcr, !irp, !idt, !process, !thread, !locks
These are defined in debugger extensions (DLLs that provide additional functionality).


No comments:

Post a Comment