-
Notifications
You must be signed in to change notification settings - Fork 4
Expand file tree
/
Copy pathloadExtension.dbg
More file actions
65 lines (53 loc) · 1.83 KB
/
loadExtension.dbg
File metadata and controls
65 lines (53 loc) · 1.83 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
.echo +++++++ loading ${$arg0}
$$ if wrong path is put on the front of extpath, debugger will load the wrong dll which is found firstly, it might cause windbg crash and exit sliently
$$ extpath can be set by environment variable _NT_DEBUGGER_EXTENSION_PATH. if .load extDLL cause windbg exit slient, please check _NT_DEBUGGER_EXTENSION_PATH and .extpath
.extpath+ "${myWinScriptPath}\windbg\debugext\${targetMode}";
.echo
aS ${/v:.ext} $$>a<${$arg0} ;
.echo
.echo if debug js, need to load js extension
.echo https://github.com/MicrosoftEdge/JsDbg
.echo
.echo load windbg extension
.echo
.echo loading Microsoft Remote Procedure Call (RPC) extension[wow64exts.dll]
.load wow64exts
.echo
.echo load Assembly Syntax Highlighting v0.087a [blwdbgue.dll]
.echo modify file 'asm_config.hl' to customize your color.
.load blwdbgue
.if (${/d:$arg1}>=1) {
.echo
.echo loading Microsoft mex extension[mex.dll]
.load mex.dll
.echo
.echo loading Microsoft mex extension[mex.dll]
.load pykd.dll
.echo installed python interpreters
!pykd.info
.echo select 3.x python interpreter
.foreach /ps 99 ( var { .shell -ci "!pykd.info" find /i "3." } ) { .echo !pykd.select -${var} }
.foreach /ps 99 ( var { .shell -ci "!pykd.info" find /i "3." } ) { !pykd.select -${var} }
}
.if (${/d:$arg1}>=2) {
.echo
.echo loading Microsoft Remote Procedure Call (RPC) extension[Rpcexts.dll]
.load Rpcexts
}
.if (${/d:$arg1}>=3) {
.echo
.echo loading Kdexts.dll in kernal mode [Kdexts.dll]
.load Kdexts
.echo
.echo loading WMI Tracing extension[wmitrace.dll]
.load wmitrace
}
.echo
.echo loaded windbg extension list:
.chain
.echo
.echo current parameter is ${/d:$arg1}
.echo 1 for additional mex.dll , pykd.dll
.echo 2 for additional Rpcexts.dll
.echo 3 for additional Kdexts.dll , wmitrace.dll
.echo ------- exiting ${$arg0}