WinDBG Introduction

1. download from MS: http://www.microsoft.com/whdc/devtools/debugging/installx86.mspx
2. Windbg support kernel mode and user mode debug, here is some basic information in user mode
3. tips
   1. command prompt: [system num]:[process num]:[thread num]>
4. some usefull commands:
   1. .hh
   2. ENTER   the last command
   3. $$ / * comments
   4. ? expression
   5. ?? c++ expression
   6. # search for disassemblly pattern
   7. ||  system information
   8. |   process information,  | s set the current process
   9. ~  list all the thread
   10. $$<  run the windbg script
   11. .cls  clear the command window
   12. .dump /ma dumpfile.dmp
   13. !analyze -v
   14. kb  call stack
   15. kp  stack
   16. bp  break point
   17. lm  show loaded modules
   18. !locks
   19. !handles
   20. !memusage   physical memery usage
   21. !vm  virtual memery usage
   22. !process  process information
   23. ba, bc, bd, be, bl, bp, bu, bm, br, bs, bsc   break point related
   24. !dlls    show the entry of the dll