[Reserved] windbg common command Detailed

windbg common command Detailed

https://blog.csdn.net/chenyujing1234/article/details/7743460

vertarget

General information display the current process

lmvm

You can view the details of any one dll
example: We view the information cyusb.sys

 lmf

List all dll file and the corresponding path of the current process loaded

r

Command displays and modifies the value of the register

d

Esp display command register points to memory

~ Command is used to switch the target thread

0: 018> ~ threads may display information
0: 018> ~ 0s to the current thread switching thread number 0, which is the main thread, prompt after switching becomes 0: 000.

~ * Command lists detailed information about all threads in the current process

~ * Kb command lists all the thread's stack

k command to display the current thread's stack

Like command d, k may be back with many suffix, such kb kp, kn, kv, kl, these suffixes and control the information display format.

KB display three parameters

u command to the code translation into the specified address on the output of the assembler

x Find signed binary address below

Dds print binary value on memory address