The following changes have been made to Debugging Tools for Windows:

• Compatibility updates for Windows codename "Longhorn."

• New EngExtCpp C++ extension framework:

• This is a Developer Preview, and APIs are subject to change.

• Headers and samples can be installed by choosing the SDK component during installation of Debugging Tools for Windows.

• Win9x user-mode compatibility fixes:

• Requires MSLU. See debugger documentation for details.

• Win9x debugging is still not a supported scenario.

• USB 2.0 kernel debugging support. Requires a Windows "Longhorn" target computer and some additional software. See debugger documentation for details.

• New tool available: DBH.

• New commands available: .allow_image_mapping, .apply_dbp, .prompt_allow, .step_filter, and .suspend_ui.

• New options available for the lm, uf, .attach, .cxr, .foreach, .opendump, and .printf commands.

• All debuggers now support .wtitle.

• New pseudo-register: $ea2.

• New automatic aliases: $CurrentDumpArchiveFile, $CurrentDumpArchivePath, $CurrentDumpFile, $CurrentDumpPath, $ntsym, $ntnsym, and $ntwsym.

• New extensions available:

• in exts.dll: !bitcount.

• in kdexts.dll:!sysinfo.

• in wmitrace.dll: !buffer, !ckcl, !regtable, and !setprefix.

• in wdfkd.dll: !wdfdevice, !wdfdevicequeues, !wdfdriverinfo, !wdfextendwatchdog, !wdfgetdriver, !wdfldr, !wdfqueue, !wdfrequest, !wdfsetdriver, and !wdftraceprtdebug.

• New extension module fltkd.dll. This contains !cbd, !contextlist, !ctx, !filter, !filters, !fltobj, !frame, !frames, !instance, !irpctrl, !msgq, !namecachelist, !port, !portlist, !relobjs, !stats, !streamlist, !traceflags, !tracelevel, !tree, !volume, and !volumes.

• New options available for the !search extension.

• New symbol quoting syntax.

• WinDbg UI changes, including:

• "Edit->Clear Command Output" allows clearing partial text from command window.

• "File->Open Executable" remembers process arguments and start directory.

• Cascading and tiling of undocked windows.

• Watch window and Locals window context option to invoke 'dt' command.

• Source Server support for Subversion version control system.

• Updated 1394 kernel debugging drivers.

• Updates to many sections of the debugger documentation (debugger.chm).

• New documentation file, Kernel_Debugging_Tutorial.doc, aimed at customers who are familiar with other debugging tools and want to learn how to use WinDbg for kernel debugging.

• Many improvements to the !analyze extension.

• Numerous fixes to bugs in various commands and extensions reported by customers.

For details of all the new features in Debugging Tools for Windows, consult the documentation. To access the documentation, click Start, point to Programs, and then click Debugging Tools for Windows. After the program opens, click Debugging Help.

http://msdl.microsoft.com/download/symbols/debuggers/dbg_x86_6.5.3.7.exe

[课程]Linux pwn 探索篇！