Confirmed users
25
edits
User:Mook/win64debug: Difference between revisions
m
→WinDbg Command
mNo edit summary |
m (→WinDbg Command) |
||
| Line 1: | Line 1: | ||
== WinDbg Command == | == WinDbg Command == | ||
This might be useful for windbg debugging. | This might be useful for windbg debugging. | ||
!htrace -enable;gh;bp /1 ADVAPI32!RegOpenKeyExW "$$ print args info;!handle rcx;!htrace rcx;du rdx;r r8;r r9;dp rsp+28h;dp poi(rsp+28h);r rsp;bp /1 ADVAPI32!LocalBaseRegOpenKey+0x25"; | !htrace -enable;gh;bp /1 ADVAPI32!RegOpenKeyExW "$$ print args info;!handle rcx;!htrace rcx;du rdx;r r8;r r9;dp rsp+28h;dp poi(rsp+28h);r rsp;bp /1 ADVAPI32!LocalBaseRegOpenKey \"r rcx;r rdx;gh;\";bp /1 ADVAPI32!LocalBaseRegOpenKey+0x25 \"r xmm6;\";gh;";gh; | ||
== Crash Stack == | == Crash Stack == | ||
# Child-SP RetAddr Call Site | # Child-SP RetAddr Call Site | ||