vineri, 5 aprilie 2013

[Windbg] Get Process Information from a Dump File


Use !dml_proc

Others: 


  • | (pipe) - Print status of all processes being debugged
  • .tlist - lists all processes running on the system
  • !peb - display formatted view of the process's environment block (PEB)



0:000> !dml_proc
DbgId  PID    Image file name
0      1ee0   ...\IxNProtocols\7.10.0.828\IxNetwork.RBProtocols.exe

References:
http://www.windbg.info/doc/1-common-cmds.html#11_process