Re: WinDbg View|options [SEC=UNCLASSIFIED]

windbg saves all its workspace details under this key

C:\>reg query hkcu\software\microsoft\windbg

! REG.EXE VERSION 3.0

HKEY_CURRENT_USER\software\microsoft\windbg

HKEY_CURRENT_USER\software\microsoft\windbg\Workspaces

C:\>

you can delete this key to remove all existing workspace details

C:\>reg delete hkcu\software\microsoft\windbg

Permanently delete the registry key software\microsoft\windbg (Y/N)? y

The operation completed successfully

C:\>

C:\>reg query hkcu\software\microsoft\windbg

Error: The system was unable to find the specified registry key or value

C:\>

now open windbg without any target (a blank windbg window should be open)

clcik the disassembly , memory , registers etc buttons and they will open blank
drag drop them and set them in places where you are comfortable viewing them

i normally have 7 windows (2 command browser , 1 disassembly , 2
memory , 1 register , 1 call stack) windows set in places ( aka
ollydbg display style )

now click close

windbg before closing will ask you if you want to save information for
workspace

notice that the title would be BASE in the msgbox

say yes

windbg will save it to base default workspace

C:\>reg query hkcu\software\microsoft\windbg

! REG.EXE VERSION 3.0

HKEY_CURRENT_USER\software\microsoft\windbg

HKEY_CURRENT_USER\software\microsoft\windbg\Workspaces

C:\>

HKEY_CURRENT_USER\software\microsoft\windbg\workspaces
Default REG_BINARY 574457530100000004000300100004000000000000000000
04000100700268020000000000000000000000000000000000000000000000000000000000000000
FFFFFF0F000000000000000001000000010000000000000000000000000000000000000000000000

now if you open file ->executable
or
file open crashdump
or

windbg -kl
or
windbg in real kernelmode

windbg will open in this default workspace which you have configured

henceforth you can disbale save workspace in following session to have
only this base workspace always

rgrds
raj

On 4/12/12, Wilkinson, Alex wrote:
> This sounds very useful, can you please elaborate on the registry details
> needing to be deleted ?
>
> -Alex
>
> 0n Tue, Apr 10, 2012 at 04:18:34PM -0400, Scott Noone wrote:
>
> >Agreed. I go over this in horrific detail during the first day of debug
> lab
> >for the sake of everyone’s sanity. It’s really, really annoying to have
> to
> >reconfigure your WinDBG environment every time you open up a new dump
> file.
> >
> >-scott
> >
> >–
> >Scott Noone
> >Consulting Associate and Chief System Problem Analyst
> >OSR Open Systems Resources, Inc.
> >http://www.osronline.com
> >
> >wrote in message news:xxxxx@windbg…
> >
> >Slightly off topic, but it might be worth mentioning that if you delete
> all
> >present workspaces (in the registry), then run WinDbg without any
> debuggee,
> >you configure options and exit WinDbg, it will save it into default
> >workspace and will reuse the default workspace for each new debuggee.
> >
> >Yes, it might be good that WinDbg has workspace for each debuggee, but
> I
> >prefer the other approach - having one configuration (layout, symbols,
> >options) for all.
>
> –
> IMPORTANT: This email remains the property of the Australian Defence
> Organisation and is subject to the jurisdiction of section 70 of the
> CRIMES ACT 1914. If you have received this email in error, you are
> requested to contact the sender and delete the email.
> –
>
> —
> WINDBG is sponsored by OSR
>
> For our schedule of WDF, WDM, debugging and other seminars visit:
> http://www.osr.com/seminars
>
> To unsubscribe, visit the List Server section of OSR Online at
> http://www.osronline.com/page.cfm?name=ListServer
>