====== windbg ====== $ a=`perl -e print "'A' x 10000"` $ echo $a > overflow kv = view call stack gh = go with exception handling gn = go with no exception handling ==== Referencia de windbg ==== B[C|D|E][] - clear/disable/enable breakpoint(s) BL - list breakpoints BA - set processor breakpoint BP
- set soft breakpoint D[type][] - dump memory DT [-n|y] [[mod!]name] [[-n|y]fields] [address] [-l list] [-a[]|c|i|o|r[#]|v] - dump using type information DV [] - dump local variables E[type]
[] - enter memory values G[H|N] [=
[
...]] - go K - stacktrace KP - stacktrace with source arguments LM[k|l|u|v] - list modules LN - list nearest symbols P [=] [] - step over Q - quit R [[ [= ]]] - view or set registers S[] - search memory SX [{e|d|i|n} [-c "Cmd1"] [-c2 "Cmd2"] [-h] {Exception|Event|*}] - event filter T [=
] [] - trace into U [] - unassemble version - show debuggee and debugger version X [<*|module>!]<*|symbol> - view symbols ? - display expression ?? - display C++ expression $< - take input from a command file unary ops: + - not by wo dwo qwo poi hi low binary ops: + - * / mod(%) and(&) xor(^) or(|) comparisons: == (=) < > != operands: number in current radix, public symbol, : b (byte), w (word), d[s] (doubleword [with symbols]), a (ascii), c (dword and Char), u (unicode), l (list) f (float), D (double), s|S (ascii/unicode string) q (quadword) : [(nt | )!] ( can include ? and *) :
:
L User-mode options: ~ - list threads status ~#s - set default thread | - list processes status |#s - set default process x86 options: DG - dump selector : [e]ax, [e]bx, [e]cx, [e]dx, [e]si, [e]di, [e]bp, [e]sp, [e]ip, [e]fl, al, ah, bl, bh, cl, ch, dl, dh, cs, ds, es, fs, gs, ss dr0, dr1, dr2, dr3, dr6, dr7 fpcw, fpsw, fptw, st0-st7, mm0-mm7 xmm0-xmm7 : iopl, of, df, if, tf, sf, zf, af, pf, cf : #<16-bit protect-mode [seg:]address>, &