Windbg commands I have used

Vertarget displays general information about the current process.

! Peb display process environment Block

Lmvm checks module loading information

. Reload /! Sym load the symbol File

LMF lists all modules loaded in the current process

R: Display and modify register values

D. display the value of the memory address.

E. Modify the value of the memory address.

! Address: Display memory page information

S search memory

! Runaway checks the CPU usage of the thread

~ Switch target thread

Check callstack-display stack backtrace for K, kb, KP, Kv, and kN.

U Disassembly

X. Find the address of the binary symbol.

DDS prints the binary value on the memory address and automatically searches for the symbol corresponding to the binary value.

. Frame switching in stack to check local variables

DT format and display data

Wt watch and trace data, which can trace all the execution processes of a function and provide statistical information

BP sets the breakpoint

BD break point disabled, cancel breakpoint

Ba break on access, set access breakpoint

SX sets exception breakpoint

. Dump: Save the dump file

! Thread displays the information subset of the thread data structure.

! Teb displays all information about the Teb (thread environment block) structure.

! VM displays basic memory management information through memory-related performance counters.

! Process displays the specific process information, including the eprocess block. This command can only be used when the kernel state debugging is used.

! PTE displays page table entry (PTE) information for a specific address.

Ln list the nearest symbol list nearest symbols