In windbg, How to set a breakpoint for all functions in kernel32.dll?

Question

I want to find out the sequence of calls and functions for kernel32.dll in function example()in example.DLL.

In windbg, how to set a breakpoint for all functions in kernel32.dll?

I tried bm kernel32!*but it doesn't seem to work.

Answer 1

I would not say that. Of course, this is possible, but if it is done using bm /a kernel32!*, you inadvertently set bps on data characters as well (as opposed to actual functions). In your case wt, the trace and view data (you can find it in debugger.chm that comes with your windbg package), maybe this is what you need.

Answer 2

DLL- .

API rohitab, DLL, .

Answer 3

Kernel32 - DLL - , , , . kernel32, , .

, "link/dump/exports kernel32.dll", , script, "bp kernel32!" + . windbg.

There is probably an easy way to do this with scripting support in debuggers, but you could hack the above script together in less time spent learning how to do this using debugger scripts.