windbg ANSI Command Tree 1.0

title {"Microshaoft Commands"}

body

{"cmdtree"}

    {"Microshaoft.WinDbg.CmdTree.txt"} {".cmdtree microshaoft.windbg.cmdtree.txt"}

{"SOS Commands"}

    {"Load SOS and SOSEX"} {".loadby sos mscorwks;.load sosex"}

    {"Microshaoft Load .NET v4.0+ sos.dll"} {".load C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SOS.dll"}

    {"Microshaoft Load .NET v4.0+ mscorwks.dll"} {".load C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorwks.dll"}

    {"Microshaoft Load .NET v3.5- sos.dll"} {".load C:\Windows\Microsoft.NET\Framework64\v2.0.50727\SOS.dll"}

    {"Microshaoft Load .NET v3.5- mscorwks.dll"} {".load C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorwks.dll"}

    {"PSSCOR"}

        {"Microshaoft Load .NET v4.0+ AMD64 psscor4.dll"} {".load D:\WinDbg\Psscor\psscor4\amd64\psscor4.dll"}

        {"Microshaoft Load .NET v3.5- AMD64 psscor2.dll"} {".load D:\WinDbg\Psscor\psscor2\amd64\psscor2.dll"}

    {"Modules"}

        {"All Modules"} {"lm D sm"}

        {"Loaded Modules"} {"lmo D sm"}

        {"Loaded Modules (verbose)"} {"lmvo D sm"}

        {"Modules w/o symbols"} {"lme D sm"}

    {"Threads"}

        {"Managed Threads"} {"!threads"}

        {"Native Threads"} {"~"}

        {"Thread Pool Threads"} {"!threadpool"}

        {"Sync Block Deadlocks"} {"!dlk"}

    {"Stacks"}

        {"Current Managed Stack"} {"!clrstack"}

        {"DumpObj"} {"!do ###"}

        {"Current Managed Stack Parameters and Locals"} {"!vars -w"}

        {"Current Native Stack"} {"kP"}

        {"Current Dump Stack"} {"!dumpstack"}

        {"All Managed Stacks"} {"~*e!clrstack"}

        {"All Managed Stack Parameters and Locals"} {"~*e!vars -w"}

        {"All Native Stacks"} {"~*kP"}

        {"All Dump Stacks"} {"!eestack"}

    {"Memory"}

        {"Stack Objects"} {"!dso"}

        {"GC Heap"} {"!eeheap -gc"}

        {"Heap Stats"} {"!dumpheap -stat"}

        {"Objects > 500 bytes"} {"!dumpheap -min 500"}

        {"Objects > 1000 bytes"} {"!dumpheap -min 1000"}

        {"Gen 2 Objects"} {"!dumpgen -stat 2"}

{"Common Commands"}

    {"Information"}

        {"Time of dump"} {".time"}

        {"Process being debugged"} {"|"}

        {"Dump Location"} {"||"}

        {"Create server on port 9999"} {".server tcp:port=9999"}

        {"Show remote connections"} {".clients"}

        {"Process Environment Block"} {"!peb"}

    {"Logging"}

        {"Open Log"} {".logopen /t /u /d"}

        {"Close Log"} {".logclose"}

    {"Modules"}

        {"All Modules"} {"lm D sm"}

        {"Loaded Modules"} {"lmo D sm"}

        {"Loaded Modules (verbose)"} {"lmvo D sm"}

        {"Modules w/o symbols"} {"lme D sm"}

    {"Stacks"}

        {"Set frame length to 2000"} {".kframes 2000"}

        {"Dump current stack w/ DML"} {"kpM 1000"}

        {"Dump stacks without private info"} {"knL 1000"}

        {"Dump stacks with all parameters"} {"kPn 1000"}

        {"Dump stacks (distance from last frame)"} {"kf 1000"}

        {"Dump stacks with Frame Pointer Omission"} {"kvn 1000"}

        {"Dump all stack"} {"~*kbn 1000"}

        {"Dump unique stacks"} {"!uniqstack -pn"}

        {"Thread environment block"} {"!teb"}

        {"Move to next frame"} {".f+"}

        {"Move to previous frame"} {".f-"}

    {"Memory"}

        {"Dump heaps"} {"!heap -a"}

    {"Automated Task"}

        {"!analyze"} {"!analyze -v"}

        {"Locks"} {"!ntsdexts.locks"}

        {"CPU time for User and Kernel Mode"} {"!runaway 7"}

    {"Managed"}

        {"Load sos"} {".loadby sos mscorwks"}

        {"Microshaoft Load .NET v4.0+ sos.dll"} {".load C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SOS.dll"}

        {"Microshaoft Load .NET v4.0+ mscorwks.dll"} {".load C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorwks.dll"}

        {"Microshaoft Load .NET v3.5- sos.dll"} {".load C:\Windows\Microsoft.NET\Framework64\v2.0.50727\SOS.dll"}

        {"Microshaoft Load .NET v3.5- mscorwks.dll"} {".load C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorwks.dll"}

        {"clrstack"} {"!clrstack"}

        {"Threads"} {"!threads"}

        {"Stack Objects"} {"!dso"}

        {"Exceptions"} {"!dae"}

{"Crash Dump Analysis Checklist (www.dumpanalysis.org)"}

    {"General"}

        {"Versions and locations"} {"version"}

        {"Set longer stack trace"} {".kframes 100"}

    {"Application crash or hang"}

        {"Default analysis (crash)"} {"!analyze -v"}

        {"Default analysis (hang)"} {"!analyze -v -hang"}

        {"Switch to x86 architecture"} {".load wow64exts; .effmach x86"}

        {"Critical sections (locked)"} {"!locks"}

        {"Modules"} {"lmv"}

        {"Threads (all)"} {"~*kv 250"}

        {"Threads (unique)"} {"!uniqstack"}

        {"Gflags"} {"!gflag"}

        {"Time consumed by thread"} {"!runaway"}

        {"PEB"} {"!peb"}

        {"TEB"} {"!teb"}

        {"Hooked functions (ntdll)"} {"!chkimg -lo 50 -d !ntdll -v"}

        {"Hooked functions (kernel32)"} {"!chkimg -lo 50 -d !kernel32 -v"}

        {"Hooked functions (user32)"} {"!chkimg -lo 50 -d !user32 -v"}

        {"Hooked functions (ALL)"} {"!for_each_module !chkimg -lo 50 -d !${@#ModuleName} -v"}

        {"Exception handlers"} {"!exchain"}

        {"Computer name"} {"!envvar COMPUTERNAME"}

        {"Stack of exception thread"} {"~#kv 250"}

        {"Stack of current thread"} {"~.kv 250"}

        {"Switch to thread"}

            {"#0"} {"~0s"}

            {"#1"} {"~1s"}

            {"#2"} {"~2s"}

            {"#3"} {"~3s"}

            {"#4"} {"~4s"}

            {"#5"} {"~5s"}

            {"#6"} {"~6s"}

            {"#7"} {"~7s"}

            {"#8"} {"~8s"}

            {"#9"} {"~9s"}

    {"System hang"}

        {"Default analysis"} {"!analyze -v -hang"}

        {"ERESOURCE contention"} {"!locks"}

        {"Processes and virtual memory"} {"!vm 4"}

        {"Sorted pool consumption (paged)"} {"!poolused 4"}

        {"Sorted pool consumption (nonpaged)"} {"!poolused 3"}

        {"Waiting threads"} {"!stacks"}

        {"Critical system queues"} {"!exqueue f"}

        {"I/O"} {"!irpfind"}

        {"The list of all thread stack traces"} {"!process 0 ff"}

        {"Critical sections for current process"} {"!ntsdexts.locks"}

        {"Sessions"} {"!session"}

        {"Processes"} {"!process 0 0"}

        {"Running threads"} {"!running"}

        {"Ready threads"} {"!ready"}

        {"DPC queues"} {"!dpcs"}

        {"The list of APCs"} {"!apc"}

        {"Internal queued spinlocks"} {"!qlocks"}

        {"Computer name"} {"dS srv!srvcomputername"}

        {"Switch to processor"}

            {"#0"} {"~0s"}

            {"#1"} {"~1s"}

            {"#2"} {"~2s"}

            {"#3"} {"~3s"}

            {"#4"} {"~4s"}

            {"#5"} {"~5s"}

            {"#6"} {"~6s"}

            {"#7"} {"~7s"}

    {"BSOD"}

        {"Default analysis"} {"!analyze -v"}

        {"Processes and virtual memory"} {"!vm 4"}

        {"Bugcheck callback data (prior to Windows XP SP1)"} {"!bugdump"}

        {"Bugcheck secondary callback data"} {".enumtag"}

        {"Computer name"} {"dS srv!srvcomputername"}

{"Microshaoft .NET"}

    {"show objects on current stack"} {"!dumpstackobjects"}

    {"show ThreadPool running"} {"!threadpool"}

    {"show all threads running time utilization"} {"!runaway"}

    {"gc handles"} {"!gchandles"}

    {"go to thread ~#s"} {"~1s"}

    {"!DumpStack [-EE] [top stack [bottom stack]]"} {"!dumpstack"}

    {"show class instance member value !DumpVC <MethodTable address> <address>"} {"!DumpVC"}

    {"show managed heaps"} {"!eeheap -gc"}

    {"show heaps memory statistic"} {"!dumpheap -min 200 -stat"}

    {"show Byte array heap memory usage"} {"!dumpheap -type Byte[] -min 200"}

    {"show managed heap's MethodTable objects !dumpheap -mt <MethodTable address>"} {"!dumpheap -mt"}

    {"show object reference info !GCRoot [-nostacks] <Object address>"} {"!gcroot"}

    {"show object detail !DumpObj [-nofields] <object address>"} {"!do"}

    {"show data object detail !da <address>"} {"!da"}

    {"show all objects in current stack !DumpStackObjects [-verify] [top stack [bottom stack]]"} {"!dso"}

    {"show object size !ObjSize [<Object address>]"} {"!objsize"}

    {"!PrintException [-nested] [<Exception object address>]"} {"!pe"}

Microshaoft WinDbg cmdtree的更多相关文章

  1. WinDbg常用命令系列---.cmdtree

    .cmdtree 简介 使用形式 .cmdtree cmdfile 参数 cmdfile命令文件,包含多个你需要的命令.必须是一个文本档 使用步骤 1.使用命令创建文本文件test.wl,使用以下示例 ...

  2. Windbg Extension NetExt 使用指南 【3】 ---- 挖掘你想要的数据 Managed Heap

    摘要 : NetExt中有两个比较常用的命令可以用来分析heap上面的对象. 一个是!wheap, 另外一个是!windex. !wheap 这个命令可以用于打印出heap structure信息. ...

  3. 透过WinDBG的视角看String

    摘要 : 最近在博客园里面看到有人在讨论 C# String的一些特性. 大部分情况下是从CODING的角度来讨论String. 本人觉得非常好奇, 在运行时态, String是如何与这些特性联系上的 ...

  4. Windbg Extension NetExt 使用指南 【2】 ---- NetExt 的基本命令介绍

    摘要 : 本章节介绍NetExt常用的命令. 并且对SOS进行一些对比. NetExt的帮助 要想玩好NetExt, 入门就得看帮助. 看NetExt的帮助可以调用!whelp 命令. 这样hi列举出 ...

  5. Windbg Extension NetExt 使用指南 【1】 ---- NetExt 介绍

    摘要 : 在使用WINDBG做debugging的时候,需要一个好的工具帮助进行数据分析. 最常见的extension包括SOS, PSSCOR.  NetExt则是另外一种提供了丰富命令功能的deb ...

  6. Windbg跟踪临界区的BUG

    最近跟踪了一个程序的界面卡死问题,该卡死偶尔出现,在抓到一次dump后用windbg载入分析,打印出函数调用堆栈后,一眼可以看出是临界区死锁了. 代码: 0:000:x86> kb ChildE ...

  7. 使用Windbg在XP下Heap追踪失败的原因

    1.故事背景      最近同事的代码中碰到一个bug会导致奔溃的bug,从dump上看是由于某个对象的堆内存指针被释放了,但代码仍调用了该对象指针的虚函数,从而引起内存访问违法崩溃,由于该类被大量使 ...

  8. Windbg调试命令详解

    作者:张佩][原文:http://www.yiiyee.cn/Blog] 1. 概述 用户成功安装微软Windows调试工具集后,能够在安装目录下发现四个调试器程序,分别是:cdb.exe.ntsd. ...

  9. windbg运行

    运行起来会提示windbg is running. BUSY 这个是正常运行的状态,只有发生异常,或者被指定断点,才会中断.

随机推荐

  1. Calico在Docker中的搭建

    一,Multi-host网络需求 开始之前推荐两篇文章 http://xelatex.github.io/2015/11/15/Battlefield-Calico-Flannel-Weave-and ...

  2. C#读写SQL Server数据库图片

    效果图: 下载链接: http://download.csdn.net/detail/u010312811/9492402 1.创建一个Winform窗体,窗体分为“数据上传”和“数据读取”两部分: ...

  3. php实验一

    实验准备 实验一:PHP开发环境配置,学习安装和使用集成PHP开发环境. 一. 分别下载和安装WAMP ,AppServ,XAMPP,phpstudy等软件,并测试页面. 开发环境配置 1)单独需要三 ...

  4. perl 二维数组

    perl没有真正的二维数组,所谓的二维数组其实是把一维数组以引用的方式放到另外一个一维数组. 二维数组定义 : my @array1=([1,2],[3,4],[45,9],[66,-5]);     ...

  5. “假学习“&”真学习“？(摘)

    什么叫做“假学习”? 一.看书 买一堆书,有空看看.看书,这是典型的假学习.看书看不懂还在看,就是假学习,欺骗自己,安慰自己正在学习而已.专业书都写得很好,但大都是写给已经懂的人看的.看书的最大作用就 ...

  6. nyoj_148_fibonacci数列(二)_矩阵快速幂

    fibonacci数列(二) 时间限制:1000 ms  |  内存限制:65535 KB 难度:3   描述 In the Fibonacci integer sequence, F0 = 0, F ...

  7. 针对Xcode的警告忽略消除处理

    一.问题描述 html代码如下 <html> <head> <meta charset="utf-8"/> <title>我的网页& ...

  8. VC++ LoadLibrary失败，错误126（找不到指定的模块）

    在VS中调用一个资源模块dll,LoadLibrary返回值为NULL,没有加载成功.GetLastError后原因为"找不到指定的模块"!代码如下: HINSTANCE hIns ...

  9. php策略模式的研究

    <?php abstract class Moshi{     private $num;     public $price;     const Ted=1;     const Sed=2 ...

  10. [Android Pro] Android性能优化典范第一季

    reference to : http://www.cnblogs.com/hanyonglu/p/4244035.html#undefined 2015年伊始,Google发布了关于Android性 ...