Skip to content

Commit 7f544b2

Browse files
committed
[win] add reference to windows kernel undocumented/internal structures
1 parent f511804 commit 7f544b2

File tree

2 files changed

+15
-0
lines changed

2 files changed

+15
-0
lines changed

docs/dev-notes/win-internals/win-debug-recipes/debugger/win-debugging-config.md

+13
Original file line numberDiff line numberDiff line change
@@ -17,6 +17,19 @@
1717
- `1`: enable auto invoke and hide user interaction dialog
1818
- _**`.\AutoExclusionList\[ExeName]=dword:00000001` value:**_ exclude `[ExeName]` from automatic debugging e.g.
1919
- `"DWM.exe"=dword:00000001`
20+
- **`AeDebug` default registry entries**
21+
```txt
22+
HKEY_LOCAL_MACHINE
23+
SOFTWARE
24+
Microsoft
25+
Windows NT
26+
CurrentVersion
27+
AeDebug
28+
Auto = 1
29+
AutoExclusionList
30+
DWM.exe = 1
31+
```
32+
2033
- [(Reference)](https://learn.microsoft.com/en-us/windows/win32/debug/configuring-automatic-debugging)
2134
2235
## Windows Debugging Tips

docs/dev-notes/win-internals/win-debug-recipes/kernel/win-kernel-cheatsheet.md

+2
Original file line numberDiff line numberDiff line change
@@ -8,6 +8,8 @@ Use these repositories to get a sense of what windows might be doing underneath
88
- [WineHQ](https://www.winehq.org/)
99
- [Undocumented NT Internals](http://undocumented.ntinternals.net/): outdated but useful for historical context
1010
- [OSR Community](https://www.osr.com/developer-community/)
11+
- [vergiliusproject](https://www.vergiliusproject.com/): collection of kernel structures/unions/enumerations, most not officially documented/WDK headers
12+
- [terminus (unmaintained)](http://terminus.rewolf.pl/terminus/): automatically generated diff of Windows structures with nice presentation layer
1113

1214
## Windows Kernel Syscall Notes
1315

0 commit comments

Comments
 (0)