WinDbg Learning (0x0004) Debugging session

Additional debugging

In an existing session. Attach

WINDBG Attach

Windbg-p pid or-PN processsname

Set WinDbg to JIT debugger (application crashes start startup WinDbg)

No intrusion additional debugging

Check the Attach-v or UI:

Creating a Process Debug

Open Execute

. Create

Pass the application command line to WinDbg when you start WinDbg

Automatically start WinDbg (in the registry) when you start the application

Kernel debugging

Dump file debugging

Stop Debugging

The Stop debugging stops debugging and exits the debug process or Q exits directly WinDbg

Deattach debugging or. Detach separation

. Abandon after discarding the process is still in a pending state need to attach again and then exit this state: Windbg-pe-p PID then stop

. Kill

. restart

Debug context

• Session context

• Process context

• Register context

• Local context

Symbol file

LM Command View module

LD. Reload Loading module symbols

X-Analysis Symbols

WinDbg Learning (0x0004) Debugging session