1. Common WinDbg Commands (Thematically Grouped)
(Documents/Command Lists)

... with break status and handling break first-chance break second-chance notify; don't break ignore event reset filter settings to default values .exr ...

2. Creating a process server
(Forum/Writting Extensions)

... "Error: StartProcessServer() failed: %X\n", hr); return; } But the StartProcessServer() always fails with return value 0x8007053D. :( Why does it fail? Is there anything I missed? Tha ...

3. Help with crash dump
(Forum/Crash Dump Analysis )

... kernel debugger is available get the stack backtrace. Arguments: Arg1: 00000140, memory referenced Arg2: 00000002, IRQL Arg3: 00000000, value 0 = read operation, 1 = write operation Arg4: 804eb5b9, ...

4. How to find parameter values to a method?
(Forum/Debugging of Managed-Code )

... a string as an parameter. But I am not able to identify the value of paramater in !clrstack -p as well.It shows as no data. Please help me out. ...

5. Re: Crashdump bitness
(Forum/General Questions)

... For example, RAX will exist only in 64-bit dumps. 32-bit dump; 32- or 64-bit WinDbg: r rax -> Bad register error in 'r rax' 64-bit dump; 32- or 64-bit WinDbg: r rax -> returns the register value I ...

6. Re: Detail analysis of crashme.exe
(Forum/Article Discussions)

... and make the nParam1 to 9, I just can hack into the assembly and edit the instruction save the binary file or just modify the register value when in debug mode. I will be appreciated your help! Thanks! PS: ...

7. Re: drwtsn32
(Forum/General Questions)

... and will also be transmitted to Microsoft over the Internet. However, if you have manually set the \\HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AeDebug\Auto value to zero, the Don't ...

8. Re: How to find parameter values to a method?
(Forum/Debugging of Managed-Code )

Hi, !dso should show you all the objects on the managed stack. You'll find your string there. Cs.

9. Re: Memory Access errors in the Kernel
(Forum/Kernel-Mode Debugging)

... a look at ntdll.dll and its implementation we see something like this on Windows XP SP3: [USER POSTED IMAGE] Note how a different value is stored into register EAX for each function? Basically this ...

10. Re: ntdll.dll symbols are missing?
(Forum/Symbol and Source Files )

... that ntdll.pdb has been loaded. I debug XP SP3 so the symbols do fit the system. kd> !peb 7ffdb000 PEB at 7ffdb000 error 1 InitTypeRead( nt!_PEB at 7ffdb000)... However this value is the right ...

11. Re: Pattern matching
(Forum/Article Discussions)

... is going on by the "al" (alias list) or "bl" (breakpoint list) commands. If you see some unusual values the following will help: a) "ad *" == deletes all aliases b) Reset the breakpoint in question I'll ...

12. WinDbg psscor4 !ASPXPages -ip not listing anything
(Forum/Debugging of Managed-Code )

...  Client IP Server IP ThreadId Total 42 HttpContext objects This command output list just the headers and no values compared to !ASPXPages which fills in the normal output ...

13. WinDbg showing Wrong Info
(Forum/User-Mode Debugging)

... that some of the member data in my class is NULL... after a lot of investigation I concoluded that this cannot be possible, so I got my code to print out the value of the 'this' pointer once a second. ...