Browse by Tags
All Tags »
windbg (RSS)
One of my favorite features of WinDbg is that it doesn't load all the symbols up-front. That's a huge part of what makes it so much faster than Visual Studio. However, every once in a while you can do things that cause WinDbg to go crazy and load all
Read More...
The problem is to skip out of a kernel driver that we don't have symbols for - what's the best way to break on calls out of that driver. If you used pc (step until the next call instruction), you would hit calls that are inside that driver. Here's another
Read More...
I've looked at this a couple times , but here's another way to break when the error code you're looking at is being returned. .while(@eax != 0xc0000005) { t ; reax } If you want to avoid the output noise, you can do something like this: .while(@eax !=
Read More...
Here's a question that came up a work a little bit back - thought I would share the result around. There is a coding pattern (that I don't ever really use so I may be messing it up) that works like this: T1 res1; T2 res2; T3 res3; res1 = GetRes1(); if
Read More...