windbg ANSI Command Tree 1.0

title {"Microshaoft Commands"}

body

{"cmdtree"}

    {"Microshaoft.WinDbg.CmdTree.txt"} {".cmdtree microshaoft.windbg.cmdtree.txt"}

{"SOS Commands"}

    {"Load SOS and SOSEX"} {".loadby sos mscorwks;.load sosex"}

    {"Microshaoft Load .NET v4.0+ sos.dll"} {".load C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SOS.dll"}

    {"Microshaoft Load .NET v4.0+ mscorwks.dll"} {".load C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorwks.dll"}

    {"Microshaoft Load .NET v3.5- sos.dll"} {".load C:\Windows\Microsoft.NET\Framework64\v2.0.50727\SOS.dll"}

    {"Microshaoft Load .NET v3.5- mscorwks.dll"} {".load C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorwks.dll"}

    {"PSSCOR"}

        {"Microshaoft Load .NET v4.0+ AMD64 psscor4.dll"} {".load D:\WinDbg\Psscor\psscor4\amd64\psscor4.dll"}

        {"Microshaoft Load .NET v3.5- AMD64 psscor2.dll"} {".load D:\WinDbg\Psscor\psscor2\amd64\psscor2.dll"}

    {"Modules"}

        {"All Modules"} {"lm D sm"}

        {"Loaded Modules"} {"lmo D sm"}

        {"Loaded Modules (verbose)"} {"lmvo D sm"}

        {"Modules w/o symbols"} {"lme D sm"}

    {"Threads"}

        {"Managed Threads"} {"!threads"}

        {"Native Threads"} {"~"}

        {"Thread Pool Threads"} {"!threadpool"}

        {"Sync Block Deadlocks"} {"!dlk"}

    {"Stacks"}

        {"Current Managed Stack"} {"!clrstack"}

        {"DumpObj"} {"!do ###"}

        {"Current Managed Stack Parameters and Locals"} {"!vars -w"}

        {"Current Native Stack"} {"kP"}

        {"Current Dump Stack"} {"!dumpstack"}

        {"All Managed Stacks"} {"~*e!clrstack"}

        {"All Managed Stack Parameters and Locals"} {"~*e!vars -w"}

        {"All Native Stacks"} {"~*kP"}

        {"All Dump Stacks"} {"!eestack"}

    {"Memory"}

        {"Stack Objects"} {"!dso"}

        {"GC Heap"} {"!eeheap -gc"}

        {"Heap Stats"} {"!dumpheap -stat"}

        {"Objects > 500 bytes"} {"!dumpheap -min 500"}

        {"Objects > 1000 bytes"} {"!dumpheap -min 1000"}

        {"Gen 2 Objects"} {"!dumpgen -stat 2"}

{"Common Commands"}

    {"Information"}

        {"Time of dump"} {".time"}

        {"Process being debugged"} {"|"}

        {"Dump Location"} {"||"}

        {"Create server on port 9999"} {".server tcp:port=9999"}

        {"Show remote connections"} {".clients"}

        {"Process Environment Block"} {"!peb"}

    {"Logging"}

        {"Open Log"} {".logopen /t /u /d"}

        {"Close Log"} {".logclose"}

    {"Modules"}

        {"All Modules"} {"lm D sm"}

        {"Loaded Modules"} {"lmo D sm"}

        {"Loaded Modules (verbose)"} {"lmvo D sm"}

        {"Modules w/o symbols"} {"lme D sm"}

    {"Stacks"}

        {"Set frame length to 2000"} {".kframes 2000"}

        {"Dump current stack w/ DML"} {"kpM 1000"}

        {"Dump stacks without private info"} {"knL 1000"}

        {"Dump stacks with all parameters"} {"kPn 1000"}

        {"Dump stacks (distance from last frame)"} {"kf 1000"}

        {"Dump stacks with Frame Pointer Omission"} {"kvn 1000"}

        {"Dump all stack"} {"~*kbn 1000"}

        {"Dump unique stacks"} {"!uniqstack -pn"}

        {"Thread environment block"} {"!teb"}

        {"Move to next frame"} {".f+"}

        {"Move to previous frame"} {".f-"}

    {"Memory"}

        {"Dump heaps"} {"!heap -a"}

    {"Automated Task"}

        {"!analyze"} {"!analyze -v"}

        {"Locks"} {"!ntsdexts.locks"}

        {"CPU time for User and Kernel Mode"} {"!runaway 7"}

    {"Managed"}

        {"Load sos"} {".loadby sos mscorwks"}

        {"Microshaoft Load .NET v4.0+ sos.dll"} {".load C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SOS.dll"}

        {"Microshaoft Load .NET v4.0+ mscorwks.dll"} {".load C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorwks.dll"}

        {"Microshaoft Load .NET v3.5- sos.dll"} {".load C:\Windows\Microsoft.NET\Framework64\v2.0.50727\SOS.dll"}

        {"Microshaoft Load .NET v3.5- mscorwks.dll"} {".load C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorwks.dll"}

        {"clrstack"} {"!clrstack"}

        {"Threads"} {"!threads"}

        {"Stack Objects"} {"!dso"}

        {"Exceptions"} {"!dae"}

{"Crash Dump Analysis Checklist (www.dumpanalysis.org)"}

    {"General"}

        {"Versions and locations"} {"version"}

        {"Set longer stack trace"} {".kframes 100"}

    {"Application crash or hang"}

        {"Default analysis (crash)"} {"!analyze -v"}

        {"Default analysis (hang)"} {"!analyze -v -hang"}

        {"Switch to x86 architecture"} {".load wow64exts; .effmach x86"}

        {"Critical sections (locked)"} {"!locks"}

        {"Modules"} {"lmv"}

        {"Threads (all)"} {"~*kv 250"}

        {"Threads (unique)"} {"!uniqstack"}

        {"Gflags"} {"!gflag"}

        {"Time consumed by thread"} {"!runaway"}

        {"PEB"} {"!peb"}

        {"TEB"} {"!teb"}

        {"Hooked functions (ntdll)"} {"!chkimg -lo 50 -d !ntdll -v"}

        {"Hooked functions (kernel32)"} {"!chkimg -lo 50 -d !kernel32 -v"}

        {"Hooked functions (user32)"} {"!chkimg -lo 50 -d !user32 -v"}

        {"Hooked functions (ALL)"} {"!for_each_module !chkimg -lo 50 -d !${@#ModuleName} -v"}

        {"Exception handlers"} {"!exchain"}

        {"Computer name"} {"!envvar COMPUTERNAME"}

        {"Stack of exception thread"} {"~#kv 250"}

        {"Stack of current thread"} {"~.kv 250"}

        {"Switch to thread"}

            {"#0"} {"~0s"}

            {"#1"} {"~1s"}

            {"#2"} {"~2s"}

            {"#3"} {"~3s"}

            {"#4"} {"~4s"}

            {"#5"} {"~5s"}

            {"#6"} {"~6s"}

            {"#7"} {"~7s"}

            {"#8"} {"~8s"}

            {"#9"} {"~9s"}

    {"System hang"}

        {"Default analysis"} {"!analyze -v -hang"}

        {"ERESOURCE contention"} {"!locks"}

        {"Processes and virtual memory"} {"!vm 4"}

        {"Sorted pool consumption (paged)"} {"!poolused 4"}

        {"Sorted pool consumption (nonpaged)"} {"!poolused 3"}

        {"Waiting threads"} {"!stacks"}

        {"Critical system queues"} {"!exqueue f"}

        {"I/O"} {"!irpfind"}

        {"The list of all thread stack traces"} {"!process 0 ff"}

        {"Critical sections for current process"} {"!ntsdexts.locks"}

        {"Sessions"} {"!session"}

        {"Processes"} {"!process 0 0"}

        {"Running threads"} {"!running"}

        {"Ready threads"} {"!ready"}

        {"DPC queues"} {"!dpcs"}

        {"The list of APCs"} {"!apc"}

        {"Internal queued spinlocks"} {"!qlocks"}

        {"Computer name"} {"dS srv!srvcomputername"}

        {"Switch to processor"}

            {"#0"} {"~0s"}

            {"#1"} {"~1s"}

            {"#2"} {"~2s"}

            {"#3"} {"~3s"}

            {"#4"} {"~4s"}

            {"#5"} {"~5s"}

            {"#6"} {"~6s"}

            {"#7"} {"~7s"}

    {"BSOD"}

        {"Default analysis"} {"!analyze -v"}

        {"Processes and virtual memory"} {"!vm 4"}

        {"Bugcheck callback data (prior to Windows XP SP1)"} {"!bugdump"}

        {"Bugcheck secondary callback data"} {".enumtag"}

        {"Computer name"} {"dS srv!srvcomputername"}

{"Microshaoft .NET"}

    {"show objects on current stack"} {"!dumpstackobjects"}

    {"show ThreadPool running"} {"!threadpool"}

    {"show all threads running time utilization"} {"!runaway"}

    {"gc handles"} {"!gchandles"}

    {"go to thread ~#s"} {"~1s"}

    {"!DumpStack [-EE] [top stack [bottom stack]]"} {"!dumpstack"}

    {"show class instance member value !DumpVC <MethodTable address> <address>"} {"!DumpVC"}

    {"show managed heaps"} {"!eeheap -gc"}

    {"show heaps memory statistic"} {"!dumpheap -min 200 -stat"}

    {"show Byte array heap memory usage"} {"!dumpheap -type Byte[] -min 200"}

    {"show managed heap's MethodTable objects !dumpheap -mt <MethodTable address>"} {"!dumpheap -mt"}

    {"show object reference info !GCRoot [-nostacks] <Object address>"} {"!gcroot"}

    {"show object detail !DumpObj [-nofields] <object address>"} {"!do"}

    {"show data object detail !da <address>"} {"!da"}

    {"show all objects in current stack !DumpStackObjects [-verify] [top stack [bottom stack]]"} {"!dso"}

    {"show object size !ObjSize [<Object address>]"} {"!objsize"}

    {"!PrintException [-nested] [<Exception object address>]"} {"!pe"}

Microshaoft WinDbg cmdtree的更多相关文章

  1. WinDbg常用命令系列---.cmdtree

    .cmdtree 简介 使用形式 .cmdtree cmdfile 参数 cmdfile命令文件,包含多个你需要的命令.必须是一个文本档 使用步骤 1.使用命令创建文本文件test.wl,使用以下示例 ...

  2. Windbg Extension NetExt 使用指南 【3】 ---- 挖掘你想要的数据 Managed Heap

    摘要 : NetExt中有两个比较常用的命令可以用来分析heap上面的对象. 一个是!wheap, 另外一个是!windex. !wheap 这个命令可以用于打印出heap structure信息. ...

  3. 透过WinDBG的视角看String

    摘要 : 最近在博客园里面看到有人在讨论 C# String的一些特性. 大部分情况下是从CODING的角度来讨论String. 本人觉得非常好奇, 在运行时态, String是如何与这些特性联系上的 ...

  4. Windbg Extension NetExt 使用指南 【2】 ---- NetExt 的基本命令介绍

    摘要 : 本章节介绍NetExt常用的命令. 并且对SOS进行一些对比. NetExt的帮助 要想玩好NetExt, 入门就得看帮助. 看NetExt的帮助可以调用!whelp 命令. 这样hi列举出 ...

  5. Windbg Extension NetExt 使用指南 【1】 ---- NetExt 介绍

    摘要 : 在使用WINDBG做debugging的时候,需要一个好的工具帮助进行数据分析. 最常见的extension包括SOS, PSSCOR.  NetExt则是另外一种提供了丰富命令功能的deb ...

  6. Windbg跟踪临界区的BUG

    最近跟踪了一个程序的界面卡死问题,该卡死偶尔出现,在抓到一次dump后用windbg载入分析,打印出函数调用堆栈后,一眼可以看出是临界区死锁了. 代码: 0:000:x86> kb ChildE ...

  7. 使用Windbg在XP下Heap追踪失败的原因

    1.故事背景      最近同事的代码中碰到一个bug会导致奔溃的bug,从dump上看是由于某个对象的堆内存指针被释放了,但代码仍调用了该对象指针的虚函数,从而引起内存访问违法崩溃,由于该类被大量使 ...

  8. Windbg调试命令详解

    作者:张佩][原文:http://www.yiiyee.cn/Blog] 1. 概述 用户成功安装微软Windows调试工具集后,能够在安装目录下发现四个调试器程序,分别是:cdb.exe.ntsd. ...

  9. windbg运行

    运行起来会提示windbg is running. BUSY 这个是正常运行的状态,只有发生异常,或者被指定断点,才会中断.

随机推荐

  1. Oracle 数据操作

    查询及删除重复记录的SQL语句   1.查找表中多余的重复记录,重复记录是根据单个字段(Id)来判断   select * from 表 where Id in (select Id from 表 g ...

  2. CentOS 7部署flume

    CentOS 7部署flume 准备工作: 安装java并设置java环境变量,在`/etc/profile`中加入 export JAVA_HOME=/usr/java/jdk1.8.0_65 ex ...

  3. markdown 基本语法

    代码块: ```console.log(1);```--- 标题: # h1## h2### h3 --- 粗斜体: *斜体***粗体*****粗斜体*** --- 强调:`强调` --- 链接:[百 ...

  4. Divide and conquer:K Best(POJ 3111)

     挑选最美的珠宝 题目大意:挑选k个珠宝使得∑a/∑b最大,输出组合数 最大化平均值的标准题型,二分法就好了,一定要注意范围(10e-7),如果是10e-8就会tle,10e-6就是wa #inclu ...

  5. eclipse修改项目名称

    一. 右键工程:Refactor->Rename,或选中工程按F2,修改名称二.右键工程:Properties->Web Project Settings,修改Context Root 三 ...

  6. Jquery 点击按钮将其背景图换成另一张，再次点击恢复默认图片

    这是Jquery代码: $(function () { $("#h1").toggle(function () { $("#h1").css("bac ...

  7. iOS进阶面试题----多线程

    1 多线程是什么 多线程是个复杂的概念,按字面意思是同步完成多 项任务,提高了资源的使用效率,从硬件.操作系统.应用软件不同的角度去看,多线程被赋予不同的内涵,对于硬件,现在市面上多数的CPU都是多核 ...

  8. osg四元数设置roll pitch heading角度

    roll绕Y轴旋转 pitch绕X轴旋转 heading绕Z轴旋转 单位是弧度,可以使用osg::inDegrees(45)将45角度转换为弧度 定义一个四元数 osg::Quat q( roll,o ...

  9. Windows Form 中快捷键设置

    在Windows Form程序中使用带下划线的快捷键只需要进行设置: 就能够工作.

  10. 关于安装Ubuntu后触摸板无法使用的解决方案

    安装了Ubuntu后发现触摸板无法使用,以为是修改了安装文件导致(之前拿安装源文件做了小实验),于是重装,之后触摸板仍无法使用,在一个长满小广告的页面上找到了解决方案. 以下是原文章内容: 最近突然发 ...