windbg ANSI Command Tree 1.0

title {"Microshaoft Commands"}

body

{"cmdtree"}

    {"Microshaoft.WinDbg.CmdTree.txt"} {".cmdtree microshaoft.windbg.cmdtree.txt"}

{"SOS Commands"}

    {"Load SOS and SOSEX"} {".loadby sos mscorwks;.load sosex"}

    {"Microshaoft Load .NET v4.0+ sos.dll"} {".load C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SOS.dll"}

    {"Microshaoft Load .NET v4.0+ mscorwks.dll"} {".load C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorwks.dll"}

    {"Microshaoft Load .NET v3.5- sos.dll"} {".load C:\Windows\Microsoft.NET\Framework64\v2.0.50727\SOS.dll"}

    {"Microshaoft Load .NET v3.5- mscorwks.dll"} {".load C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorwks.dll"}

    {"PSSCOR"}

        {"Microshaoft Load .NET v4.0+ AMD64 psscor4.dll"} {".load D:\WinDbg\Psscor\psscor4\amd64\psscor4.dll"}

        {"Microshaoft Load .NET v3.5- AMD64 psscor2.dll"} {".load D:\WinDbg\Psscor\psscor2\amd64\psscor2.dll"}

    {"Modules"}

        {"All Modules"} {"lm D sm"}

        {"Loaded Modules"} {"lmo D sm"}

        {"Loaded Modules (verbose)"} {"lmvo D sm"}

        {"Modules w/o symbols"} {"lme D sm"}

    {"Threads"}

        {"Managed Threads"} {"!threads"}

        {"Native Threads"} {"~"}

        {"Thread Pool Threads"} {"!threadpool"}

        {"Sync Block Deadlocks"} {"!dlk"}

    {"Stacks"}

        {"Current Managed Stack"} {"!clrstack"}

        {"DumpObj"} {"!do ###"}

        {"Current Managed Stack Parameters and Locals"} {"!vars -w"}

        {"Current Native Stack"} {"kP"}

        {"Current Dump Stack"} {"!dumpstack"}

        {"All Managed Stacks"} {"~*e!clrstack"}

        {"All Managed Stack Parameters and Locals"} {"~*e!vars -w"}

        {"All Native Stacks"} {"~*kP"}

        {"All Dump Stacks"} {"!eestack"}

    {"Memory"}

        {"Stack Objects"} {"!dso"}

        {"GC Heap"} {"!eeheap -gc"}

        {"Heap Stats"} {"!dumpheap -stat"}

        {"Objects > 500 bytes"} {"!dumpheap -min 500"}

        {"Objects > 1000 bytes"} {"!dumpheap -min 1000"}

        {"Gen 2 Objects"} {"!dumpgen -stat 2"}

{"Common Commands"}

    {"Information"}

        {"Time of dump"} {".time"}

        {"Process being debugged"} {"|"}

        {"Dump Location"} {"||"}

        {"Create server on port 9999"} {".server tcp:port=9999"}

        {"Show remote connections"} {".clients"}

        {"Process Environment Block"} {"!peb"}

    {"Logging"}

        {"Open Log"} {".logopen /t /u /d"}

        {"Close Log"} {".logclose"}

    {"Modules"}

        {"All Modules"} {"lm D sm"}

        {"Loaded Modules"} {"lmo D sm"}

        {"Loaded Modules (verbose)"} {"lmvo D sm"}

        {"Modules w/o symbols"} {"lme D sm"}

    {"Stacks"}

        {"Set frame length to 2000"} {".kframes 2000"}

        {"Dump current stack w/ DML"} {"kpM 1000"}

        {"Dump stacks without private info"} {"knL 1000"}

        {"Dump stacks with all parameters"} {"kPn 1000"}

        {"Dump stacks (distance from last frame)"} {"kf 1000"}

        {"Dump stacks with Frame Pointer Omission"} {"kvn 1000"}

        {"Dump all stack"} {"~*kbn 1000"}

        {"Dump unique stacks"} {"!uniqstack -pn"}

        {"Thread environment block"} {"!teb"}

        {"Move to next frame"} {".f+"}

        {"Move to previous frame"} {".f-"}

    {"Memory"}

        {"Dump heaps"} {"!heap -a"}

    {"Automated Task"}

        {"!analyze"} {"!analyze -v"}

        {"Locks"} {"!ntsdexts.locks"}

        {"CPU time for User and Kernel Mode"} {"!runaway 7"}

    {"Managed"}

        {"Load sos"} {".loadby sos mscorwks"}

        {"Microshaoft Load .NET v4.0+ sos.dll"} {".load C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SOS.dll"}

        {"Microshaoft Load .NET v4.0+ mscorwks.dll"} {".load C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorwks.dll"}

        {"Microshaoft Load .NET v3.5- sos.dll"} {".load C:\Windows\Microsoft.NET\Framework64\v2.0.50727\SOS.dll"}

        {"Microshaoft Load .NET v3.5- mscorwks.dll"} {".load C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorwks.dll"}

        {"clrstack"} {"!clrstack"}

        {"Threads"} {"!threads"}

        {"Stack Objects"} {"!dso"}

        {"Exceptions"} {"!dae"}

{"Crash Dump Analysis Checklist (www.dumpanalysis.org)"}

    {"General"}

        {"Versions and locations"} {"version"}

        {"Set longer stack trace"} {".kframes 100"}

    {"Application crash or hang"}

        {"Default analysis (crash)"} {"!analyze -v"}

        {"Default analysis (hang)"} {"!analyze -v -hang"}

        {"Switch to x86 architecture"} {".load wow64exts; .effmach x86"}

        {"Critical sections (locked)"} {"!locks"}

        {"Modules"} {"lmv"}

        {"Threads (all)"} {"~*kv 250"}

        {"Threads (unique)"} {"!uniqstack"}

        {"Gflags"} {"!gflag"}

        {"Time consumed by thread"} {"!runaway"}

        {"PEB"} {"!peb"}

        {"TEB"} {"!teb"}

        {"Hooked functions (ntdll)"} {"!chkimg -lo 50 -d !ntdll -v"}

        {"Hooked functions (kernel32)"} {"!chkimg -lo 50 -d !kernel32 -v"}

        {"Hooked functions (user32)"} {"!chkimg -lo 50 -d !user32 -v"}

        {"Hooked functions (ALL)"} {"!for_each_module !chkimg -lo 50 -d !${@#ModuleName} -v"}

        {"Exception handlers"} {"!exchain"}

        {"Computer name"} {"!envvar COMPUTERNAME"}

        {"Stack of exception thread"} {"~#kv 250"}

        {"Stack of current thread"} {"~.kv 250"}

        {"Switch to thread"}

            {"#0"} {"~0s"}

            {"#1"} {"~1s"}

            {"#2"} {"~2s"}

            {"#3"} {"~3s"}

            {"#4"} {"~4s"}

            {"#5"} {"~5s"}

            {"#6"} {"~6s"}

            {"#7"} {"~7s"}

            {"#8"} {"~8s"}

            {"#9"} {"~9s"}

    {"System hang"}

        {"Default analysis"} {"!analyze -v -hang"}

        {"ERESOURCE contention"} {"!locks"}

        {"Processes and virtual memory"} {"!vm 4"}

        {"Sorted pool consumption (paged)"} {"!poolused 4"}

        {"Sorted pool consumption (nonpaged)"} {"!poolused 3"}

        {"Waiting threads"} {"!stacks"}

        {"Critical system queues"} {"!exqueue f"}

        {"I/O"} {"!irpfind"}

        {"The list of all thread stack traces"} {"!process 0 ff"}

        {"Critical sections for current process"} {"!ntsdexts.locks"}

        {"Sessions"} {"!session"}

        {"Processes"} {"!process 0 0"}

        {"Running threads"} {"!running"}

        {"Ready threads"} {"!ready"}

        {"DPC queues"} {"!dpcs"}

        {"The list of APCs"} {"!apc"}

        {"Internal queued spinlocks"} {"!qlocks"}

        {"Computer name"} {"dS srv!srvcomputername"}

        {"Switch to processor"}

            {"#0"} {"~0s"}

            {"#1"} {"~1s"}

            {"#2"} {"~2s"}

            {"#3"} {"~3s"}

            {"#4"} {"~4s"}

            {"#5"} {"~5s"}

            {"#6"} {"~6s"}

            {"#7"} {"~7s"}

    {"BSOD"}

        {"Default analysis"} {"!analyze -v"}

        {"Processes and virtual memory"} {"!vm 4"}

        {"Bugcheck callback data (prior to Windows XP SP1)"} {"!bugdump"}

        {"Bugcheck secondary callback data"} {".enumtag"}

        {"Computer name"} {"dS srv!srvcomputername"}

{"Microshaoft .NET"}

    {"show objects on current stack"} {"!dumpstackobjects"}

    {"show ThreadPool running"} {"!threadpool"}

    {"show all threads running time utilization"} {"!runaway"}

    {"gc handles"} {"!gchandles"}

    {"go to thread ~#s"} {"~1s"}

    {"!DumpStack [-EE] [top stack [bottom stack]]"} {"!dumpstack"}

    {"show class instance member value !DumpVC <MethodTable address> <address>"} {"!DumpVC"}

    {"show managed heaps"} {"!eeheap -gc"}

    {"show heaps memory statistic"} {"!dumpheap -min 200 -stat"}

    {"show Byte array heap memory usage"} {"!dumpheap -type Byte[] -min 200"}

    {"show managed heap's MethodTable objects !dumpheap -mt <MethodTable address>"} {"!dumpheap -mt"}

    {"show object reference info !GCRoot [-nostacks] <Object address>"} {"!gcroot"}

    {"show object detail !DumpObj [-nofields] <object address>"} {"!do"}

    {"show data object detail !da <address>"} {"!da"}

    {"show all objects in current stack !DumpStackObjects [-verify] [top stack [bottom stack]]"} {"!dso"}

    {"show object size !ObjSize [<Object address>]"} {"!objsize"}

    {"!PrintException [-nested] [<Exception object address>]"} {"!pe"}

Microshaoft WinDbg cmdtree的更多相关文章

  1. WinDbg常用命令系列---.cmdtree

    .cmdtree 简介 使用形式 .cmdtree cmdfile 参数 cmdfile命令文件,包含多个你需要的命令.必须是一个文本档 使用步骤 1.使用命令创建文本文件test.wl,使用以下示例 ...

  2. Windbg Extension NetExt 使用指南 【3】 ---- 挖掘你想要的数据 Managed Heap

    摘要 : NetExt中有两个比较常用的命令可以用来分析heap上面的对象. 一个是!wheap, 另外一个是!windex. !wheap 这个命令可以用于打印出heap structure信息. ...

  3. 透过WinDBG的视角看String

    摘要 : 最近在博客园里面看到有人在讨论 C# String的一些特性. 大部分情况下是从CODING的角度来讨论String. 本人觉得非常好奇, 在运行时态, String是如何与这些特性联系上的 ...

  4. Windbg Extension NetExt 使用指南 【2】 ---- NetExt 的基本命令介绍

    摘要 : 本章节介绍NetExt常用的命令. 并且对SOS进行一些对比. NetExt的帮助 要想玩好NetExt, 入门就得看帮助. 看NetExt的帮助可以调用!whelp 命令. 这样hi列举出 ...

  5. Windbg Extension NetExt 使用指南 【1】 ---- NetExt 介绍

    摘要 : 在使用WINDBG做debugging的时候,需要一个好的工具帮助进行数据分析. 最常见的extension包括SOS, PSSCOR.  NetExt则是另外一种提供了丰富命令功能的deb ...

  6. Windbg跟踪临界区的BUG

    最近跟踪了一个程序的界面卡死问题,该卡死偶尔出现,在抓到一次dump后用windbg载入分析,打印出函数调用堆栈后,一眼可以看出是临界区死锁了. 代码: 0:000:x86> kb ChildE ...

  7. 使用Windbg在XP下Heap追踪失败的原因

    1.故事背景      最近同事的代码中碰到一个bug会导致奔溃的bug,从dump上看是由于某个对象的堆内存指针被释放了,但代码仍调用了该对象指针的虚函数,从而引起内存访问违法崩溃,由于该类被大量使 ...

  8. Windbg调试命令详解

    作者:张佩][原文:http://www.yiiyee.cn/Blog] 1. 概述 用户成功安装微软Windows调试工具集后,能够在安装目录下发现四个调试器程序,分别是:cdb.exe.ntsd. ...

  9. windbg运行

    运行起来会提示windbg is running. BUSY 这个是正常运行的状态,只有发生异常,或者被指定断点,才会中断.

随机推荐

  1. jquery实现input输入框实时输入触发事件代码 ---jQuery 中bind(),live(),delegate(),on() 区别

    复制代码 代码如下: <input id="productName" name="productName" value="" /> ...

  2. oracle：安装笔记

  3. Interleaving Positive and Negative Numbers

    Given an array with positive and negative integers. Re-range it to interleaving with positive and ne ...

  4. 【leetcode】Word Ladder II

      Word Ladder II Given two words (start and end), and a dictionary, find all shortest transformation ...

  5. Enum:Face The Right Way(POJ 3276)

    面朝大海,春暖花开 题目大意:农夫有一群牛,牛排成了一排,现在需要把这些牛都面向正确的方向,农夫买了一个机器,一次可以处理k只牛,现在问你怎么处理这些牛才可以使操作数最小? 这道题很有意思,其实这道题 ...

  6. IsNullOrEmpty与IsNullOrWhiteSpace区别

    IsNullOrEmpty public static bool IsNullOrEmpty(String value) { return (value == null || value.Length ...

  7. io流对文件读写操作

    public static void main(String[] args) throws IOException { BufferedReader reader = new BufferedRead ...

  8. IOS-01零碎知识总结

    1. 变量的@public @private @package @protected 声明有什么含义? @public  可以被所有的类访问 @private  只有该类的方法可以访问,子类的都不能访 ...

  9. 如何解决exe4j生成exe文件后弹出提示信息

    使用exe4j生成exe文件时会提示以上一段信息,这个主要是没有注册导致的,在welcome to exe4j的右下角有一个注册信息的地方,去找个注册码,就OK了. 通用注册码:L-g782dn2d- ...

  10. Linear regression with multiple variables(多特征的线型回归)算法实例_梯度下降解法(Gradient DesentMulti)以及正规方程解法(Normal Equation)

    ,, ,, ,, ,, ,, ,, ,, ,, ,, ,, ,, ,, ,, ,, ,, ,, ,, ,, ,, ,, ,, ,, ,, ,, ,, ,, ,, ,, ,, ,, ,, ,, ,, , ...