1. Common WinDbg Commands (Thematically Grouped)
(Documents/Command Lists)

...  Variants / Params Description version Dump version info of debugger and loaded extension DLLs vercommand Dump command line that was used to start the debugger vertarget ...

2. Contact & Imprint
(Misc/Legal)

Responsible for the online presence Robert Kuster Slovenia E-mail: mailrkuster@windbg.info   Note: The actual email address does not contain the word “mail“ – spam prevention.   ...

3. CrashMe Application
(Applications and Tools/General Applications)

... we are talking about. Note: If you have an interesting situation that CrashMe doesn't cover please drop us a line or send us your code. Other CrashMe fans might be thankful for your contribution. ...

4. Can macros be set up in WinDbg
(Forum/General Questions)

If I want to perform a common task, for instance, load a specific set of assemblies easily with a hotkey, is there a way to do anything along those lines in WinDbg? I am aware of aliases, but, wanted ...

5. Prodcuts Info
(Forum/General Questions)

... from registered dietitians|and smart strategies for healthy eating|####50 Recipes for Weight Loss SkinnyMs|####20 May 2014|Feel overwhelmed when hunting|for weight loss recipes online|Feel overwhelmed ...

6. Re: Crash location !
(Forum/Crash Dump Analysis )

... but it should look something like: cscript adplus.vbs -crash -pn some.exe When you open the dump file, you should see more information and line numbers if you have PDB files, which will help you ...

7. Re: Finding undocumented swtiches
(Forum/General Questions)

Oh, you mean command line parameters. If you use Process Explorer you could simply click on the process in question and go to the Image tab. For example: [USER POSTED IMAGE] And in WinDbg you could ...

8. Re: Finding undocumented swtiches
(Forum/General Questions)

Thanks for that tip. I am looking more for what switches are embedded with the image itself. It seems that in C/C++ the command line switches correspond to switch statements within the code. I just ...

9. Re: kernel32 symbol in live kernel debug
(Forum/Symbol and Source Files )

Welcome Thongchai. The kernel on 2000, XP, Vista, or Windows 7 never loads user32.dll or kernel32.dll. Both are user mode DLLs and thus get loaded by user-mode applications (generally speaking any Win32 ...

10. Re: Remote debugging of CrashMe with ntsd -d
(Forum/Article Discussions)

... -t tcp:port=1222" When you restart that machine dbgsrv.exe will be up and running waiting for WinDbg connections. Then attaching to Winlogon will be just one more click away.. Bottom line: I would ...

11. Re: sort lm n t by date/time
(Forum/Crash Dump Analysis )

... lines(0), timeStamps(0) c = 0 Do While Not StdIn.AtEndOfStream ReDim Preserve lines(UBound(lines) + 1) ReDim Preserve timeStamps(UBound(timeStamps) + 1) str = StdIn.ReadLine lines(c) ...

12. Re: Unable to load image ntkrnlpa.exe
(Forum/Crash Dump Analysis )

... You target computer being debugged doesn't need to be online. I hope this helps, Robert ...

13. Re: Wrong display of function Names by WinDbg
(Forum/User-Mode Debugging)

... ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\MSVCR80.dll Bottom line: WinDbg should ...

14. Re:Articles/tutorials
(Forum/Suggestion Box)

... more stuff would be on-line. On the other side I would lose control about the quality of what is on-line. Nevertheless, it is very likely that I will turn at least a part of the article section public ...

15. Re:Can handled exceptions be seen with WinDbg
(Forum/Debugging of Managed-Code )

... perspective of the exception dispatcher there are two different situations to cover: In case there is a debugger the exception dispatcher does the following: The bottom line: if a debugger is attached, ...

16. Re:Other forums
(Forum/General Questions)

Hi Will, From my point of view your questions perfectly fit to the forum; that is what it actually is about. Help people with WinDbg, regardless to what their initial skills might be. Hm, if you nevertheless ...

17. Re:Question about COFF deprecation
(Forum/Symbol and Source Files )

... help a debugger to map raw addresses in the PE executable to source-code lines, to analyze internal layout and data of applications, and so on. Obviously symbol files are not limited with backward compatibility ...

18. Remote debugging of CrashMe with ntsd -d
(Forum/Article Discussions)

... I established a kernel connexion and used Image File Execution options (IFEO) registry settings so that winlogon is started through ntsd -d. ntsd -d -G -lines -x -y c:\symcache;c:\windows\system32 -n ...

19. StackOverFlowException in .Net
(Forum/Crash Dump Analysis )

... ByRef) 0030f064 66d289d1 [InlinedCallFrame: 0030f064] 0030f0fc 664c25b0 System.Windows.Forms.Button.WndProc(System.Windows.Forms.Message ByRef) 0030f108 664c86a0 System.Windows.Forms.Control+ControlNativeWindow.OnMessage(System.Windows.Forms.Message ...