Image File Execution Options

Every now and than while debugging I need to either determine when a dll/module is loaded or need to attach a debugger to a process at startup that is started outside a debugger. I know there are settings that exist to do this but I always seem to forget exactly what they are. So for future reference here the registry entries.


Force a break while debugging when a dll/module is loaded

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\<modulename.dll>]

Force a process to start under the Visual Studio Debugger

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\<processname.exe>]


Useful links:

Junfeng - Image File Execution Options
Greggm - Breaking when a module loads
Greggm - Inside 'Image File Execution Options' debugging
Oldnewthing - Beware the Image File Execution Options key

No Comments