windbg ANSI Command Tree 1.0

title {"Microshaoft Commands"}

body

{"cmdtree"}

    {"Microshaoft.WinDbg.CmdTree.txt"} {".cmdtree microshaoft.windbg.cmdtree.txt"}

{"SOS Commands"}

    {"Load SOS and SOSEX"} {".loadby sos mscorwks;.load sosex"}

    {"Microshaoft Load .NET v4.0+ sos.dll"} {".load C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SOS.dll"}

    {"Microshaoft Load .NET v4.0+ mscorwks.dll"} {".load C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorwks.dll"}

    {"Microshaoft Load .NET v3.5- sos.dll"} {".load C:\Windows\Microsoft.NET\Framework64\v2.0.50727\SOS.dll"}

    {"Microshaoft Load .NET v3.5- mscorwks.dll"} {".load C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorwks.dll"}

    {"PSSCOR"}

        {"Microshaoft Load .NET v4.0+ AMD64 psscor4.dll"} {".load D:\WinDbg\Psscor\psscor4\amd64\psscor4.dll"}

        {"Microshaoft Load .NET v3.5- AMD64 psscor2.dll"} {".load D:\WinDbg\Psscor\psscor2\amd64\psscor2.dll"}

    {"Modules"}

        {"All Modules"} {"lm D sm"}

        {"Loaded Modules"} {"lmo D sm"}

        {"Loaded Modules (verbose)"} {"lmvo D sm"}

        {"Modules w/o symbols"} {"lme D sm"}

    {"Threads"}

        {"Managed Threads"} {"!threads"}

        {"Native Threads"} {"~"}

        {"Thread Pool Threads"} {"!threadpool"}

        {"Sync Block Deadlocks"} {"!dlk"}

    {"Stacks"}

        {"Current Managed Stack"} {"!clrstack"}

        {"DumpObj"} {"!do ###"}

        {"Current Managed Stack Parameters and Locals"} {"!vars -w"}

        {"Current Native Stack"} {"kP"}

        {"Current Dump Stack"} {"!dumpstack"}

        {"All Managed Stacks"} {"~*e!clrstack"}

        {"All Managed Stack Parameters and Locals"} {"~*e!vars -w"}

        {"All Native Stacks"} {"~*kP"}

        {"All Dump Stacks"} {"!eestack"}

    {"Memory"}

        {"Stack Objects"} {"!dso"}

        {"GC Heap"} {"!eeheap -gc"}

        {"Heap Stats"} {"!dumpheap -stat"}

        {"Objects > 500 bytes"} {"!dumpheap -min 500"}

        {"Objects > 1000 bytes"} {"!dumpheap -min 1000"}

        {"Gen 2 Objects"} {"!dumpgen -stat 2"}

{"Common Commands"}

    {"Information"}

        {"Time of dump"} {".time"}

        {"Process being debugged"} {"|"}

        {"Dump Location"} {"||"}

        {"Create server on port 9999"} {".server tcp:port=9999"}

        {"Show remote connections"} {".clients"}

        {"Process Environment Block"} {"!peb"}

    {"Logging"}

        {"Open Log"} {".logopen /t /u /d"}

        {"Close Log"} {".logclose"}

    {"Modules"}

        {"All Modules"} {"lm D sm"}

        {"Loaded Modules"} {"lmo D sm"}

        {"Loaded Modules (verbose)"} {"lmvo D sm"}

        {"Modules w/o symbols"} {"lme D sm"}

    {"Stacks"}

        {"Set frame length to 2000"} {".kframes 2000"}

        {"Dump current stack w/ DML"} {"kpM 1000"}

        {"Dump stacks without private info"} {"knL 1000"}

        {"Dump stacks with all parameters"} {"kPn 1000"}

        {"Dump stacks (distance from last frame)"} {"kf 1000"}

        {"Dump stacks with Frame Pointer Omission"} {"kvn 1000"}

        {"Dump all stack"} {"~*kbn 1000"}

        {"Dump unique stacks"} {"!uniqstack -pn"}

        {"Thread environment block"} {"!teb"}

        {"Move to next frame"} {".f+"}

        {"Move to previous frame"} {".f-"}

    {"Memory"}

        {"Dump heaps"} {"!heap -a"}

    {"Automated Task"}

        {"!analyze"} {"!analyze -v"}

        {"Locks"} {"!ntsdexts.locks"}

        {"CPU time for User and Kernel Mode"} {"!runaway 7"}

    {"Managed"}

        {"Load sos"} {".loadby sos mscorwks"}

        {"Microshaoft Load .NET v4.0+ sos.dll"} {".load C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SOS.dll"}

        {"Microshaoft Load .NET v4.0+ mscorwks.dll"} {".load C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorwks.dll"}

        {"Microshaoft Load .NET v3.5- sos.dll"} {".load C:\Windows\Microsoft.NET\Framework64\v2.0.50727\SOS.dll"}

        {"Microshaoft Load .NET v3.5- mscorwks.dll"} {".load C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorwks.dll"}

        {"clrstack"} {"!clrstack"}

        {"Threads"} {"!threads"}

        {"Stack Objects"} {"!dso"}

        {"Exceptions"} {"!dae"}

{"Crash Dump Analysis Checklist (www.dumpanalysis.org)"}

    {"General"}

        {"Versions and locations"} {"version"}

        {"Set longer stack trace"} {".kframes 100"}

    {"Application crash or hang"}

        {"Default analysis (crash)"} {"!analyze -v"}

        {"Default analysis (hang)"} {"!analyze -v -hang"}

        {"Switch to x86 architecture"} {".load wow64exts; .effmach x86"}

        {"Critical sections (locked)"} {"!locks"}

        {"Modules"} {"lmv"}

        {"Threads (all)"} {"~*kv 250"}

        {"Threads (unique)"} {"!uniqstack"}

        {"Gflags"} {"!gflag"}

        {"Time consumed by thread"} {"!runaway"}

        {"PEB"} {"!peb"}

        {"TEB"} {"!teb"}

        {"Hooked functions (ntdll)"} {"!chkimg -lo 50 -d !ntdll -v"}

        {"Hooked functions (kernel32)"} {"!chkimg -lo 50 -d !kernel32 -v"}

        {"Hooked functions (user32)"} {"!chkimg -lo 50 -d !user32 -v"}

        {"Hooked functions (ALL)"} {"!for_each_module !chkimg -lo 50 -d !${@#ModuleName} -v"}

        {"Exception handlers"} {"!exchain"}

        {"Computer name"} {"!envvar COMPUTERNAME"}

        {"Stack of exception thread"} {"~#kv 250"}

        {"Stack of current thread"} {"~.kv 250"}

        {"Switch to thread"}

            {"#0"} {"~0s"}

            {"#1"} {"~1s"}

            {"#2"} {"~2s"}

            {"#3"} {"~3s"}

            {"#4"} {"~4s"}

            {"#5"} {"~5s"}

            {"#6"} {"~6s"}

            {"#7"} {"~7s"}

            {"#8"} {"~8s"}

            {"#9"} {"~9s"}

    {"System hang"}

        {"Default analysis"} {"!analyze -v -hang"}

        {"ERESOURCE contention"} {"!locks"}

        {"Processes and virtual memory"} {"!vm 4"}

        {"Sorted pool consumption (paged)"} {"!poolused 4"}

        {"Sorted pool consumption (nonpaged)"} {"!poolused 3"}

        {"Waiting threads"} {"!stacks"}

        {"Critical system queues"} {"!exqueue f"}

        {"I/O"} {"!irpfind"}

        {"The list of all thread stack traces"} {"!process 0 ff"}

        {"Critical sections for current process"} {"!ntsdexts.locks"}

        {"Sessions"} {"!session"}

        {"Processes"} {"!process 0 0"}

        {"Running threads"} {"!running"}

        {"Ready threads"} {"!ready"}

        {"DPC queues"} {"!dpcs"}

        {"The list of APCs"} {"!apc"}

        {"Internal queued spinlocks"} {"!qlocks"}

        {"Computer name"} {"dS srv!srvcomputername"}

        {"Switch to processor"}

            {"#0"} {"~0s"}

            {"#1"} {"~1s"}

            {"#2"} {"~2s"}

            {"#3"} {"~3s"}

            {"#4"} {"~4s"}

            {"#5"} {"~5s"}

            {"#6"} {"~6s"}

            {"#7"} {"~7s"}

    {"BSOD"}

        {"Default analysis"} {"!analyze -v"}

        {"Processes and virtual memory"} {"!vm 4"}

        {"Bugcheck callback data (prior to Windows XP SP1)"} {"!bugdump"}

        {"Bugcheck secondary callback data"} {".enumtag"}

        {"Computer name"} {"dS srv!srvcomputername"}

{"Microshaoft .NET"}

    {"show objects on current stack"} {"!dumpstackobjects"}

    {"show ThreadPool running"} {"!threadpool"}

    {"show all threads running time utilization"} {"!runaway"}

    {"gc handles"} {"!gchandles"}

    {"go to thread ~#s"} {"~1s"}

    {"!DumpStack [-EE] [top stack [bottom stack]]"} {"!dumpstack"}

    {"show class instance member value !DumpVC <MethodTable address> <address>"} {"!DumpVC"}

    {"show managed heaps"} {"!eeheap -gc"}

    {"show heaps memory statistic"} {"!dumpheap -min 200 -stat"}

    {"show Byte array heap memory usage"} {"!dumpheap -type Byte[] -min 200"}

    {"show managed heap's MethodTable objects !dumpheap -mt <MethodTable address>"} {"!dumpheap -mt"}

    {"show object reference info !GCRoot [-nostacks] <Object address>"} {"!gcroot"}

    {"show object detail !DumpObj [-nofields] <object address>"} {"!do"}

    {"show data object detail !da <address>"} {"!da"}

    {"show all objects in current stack !DumpStackObjects [-verify] [top stack [bottom stack]]"} {"!dso"}

    {"show object size !ObjSize [<Object address>]"} {"!objsize"}

    {"!PrintException [-nested] [<Exception object address>]"} {"!pe"}

Microshaoft WinDbg cmdtree的更多相关文章

  1. WinDbg常用命令系列---.cmdtree

    .cmdtree 简介 使用形式 .cmdtree cmdfile 参数 cmdfile命令文件,包含多个你需要的命令.必须是一个文本档 使用步骤 1.使用命令创建文本文件test.wl,使用以下示例 ...

  2. Windbg Extension NetExt 使用指南 【3】 ---- 挖掘你想要的数据 Managed Heap

    摘要 : NetExt中有两个比较常用的命令可以用来分析heap上面的对象. 一个是!wheap, 另外一个是!windex. !wheap 这个命令可以用于打印出heap structure信息. ...

  3. 透过WinDBG的视角看String

    摘要 : 最近在博客园里面看到有人在讨论 C# String的一些特性. 大部分情况下是从CODING的角度来讨论String. 本人觉得非常好奇, 在运行时态, String是如何与这些特性联系上的 ...

  4. Windbg Extension NetExt 使用指南 【2】 ---- NetExt 的基本命令介绍

    摘要 : 本章节介绍NetExt常用的命令. 并且对SOS进行一些对比. NetExt的帮助 要想玩好NetExt, 入门就得看帮助. 看NetExt的帮助可以调用!whelp 命令. 这样hi列举出 ...

  5. Windbg Extension NetExt 使用指南 【1】 ---- NetExt 介绍

    摘要 : 在使用WINDBG做debugging的时候,需要一个好的工具帮助进行数据分析. 最常见的extension包括SOS, PSSCOR.  NetExt则是另外一种提供了丰富命令功能的deb ...

  6. Windbg跟踪临界区的BUG

    最近跟踪了一个程序的界面卡死问题,该卡死偶尔出现,在抓到一次dump后用windbg载入分析,打印出函数调用堆栈后,一眼可以看出是临界区死锁了. 代码: 0:000:x86> kb ChildE ...

  7. 使用Windbg在XP下Heap追踪失败的原因

    1.故事背景      最近同事的代码中碰到一个bug会导致奔溃的bug,从dump上看是由于某个对象的堆内存指针被释放了,但代码仍调用了该对象指针的虚函数,从而引起内存访问违法崩溃,由于该类被大量使 ...

  8. Windbg调试命令详解

    作者:张佩][原文:http://www.yiiyee.cn/Blog] 1. 概述 用户成功安装微软Windows调试工具集后,能够在安装目录下发现四个调试器程序,分别是:cdb.exe.ntsd. ...

  9. windbg运行

    运行起来会提示windbg is running. BUSY 这个是正常运行的状态,只有发生异常,或者被指定断点,才会中断.

随机推荐

  1. 【自动部署】Ansible 怎么通过堡垒机/跳板机 访问目标机器

    Ansible机器的 /root/.ssh/config 配置如下即可:Host 目标机器IP User root IdentityFile=/root/.ssh/xxx_id_rsa ProxyCo ...

  2. C#中 int.TryParse 的用法

    int i = -1;bool b = int.TryParse(null, out i);执行完毕后,b等于false,i等于0,而不是等于-1,切记. int i = -1;bool b = in ...

  3. MVC RadioButton

    本文介绍如何创建radiobutton. Step 1: 创建一个类用于获取所有的选项. public class Company { public string SelectedDepartment ...

  4. Effective C++ -----条款18：让接口容易被正确使用，不易被误用

    好的接口很容易被正确使用,不容易被误用.你应该在你IDE所有接口中努力达成这些性质. “促进正确使用”的办法包括接口的一致性,以及与内置类型的行为兼容. “阻止误用"的办法包括建立新类型.限 ...

  5. Greedy:Paint Color(AOJ 0531)

    涂颜料 题目大意:在一个1000000*1000000的矩阵中放入几块木板,问你这些木板把矩阵划分成了几个区域?输入会给左下角和右上角的坐标,输入W==0且H==0结束. 这一题是书上的作业题,书上有 ...

  6. BestCoder27 1002.Taking Bus（hdu 5163） 解题报告

    题目链接:http://acm.hdu.edu.cn/showproblem.php?pid=5163 题目意思:有 n 个车站,给出相邻两个车站的距离,即车站 i 和车站 i+1 的距离为 di ( ...

  7. SQL删除约束

    )禁止所有表约束的SQL select 'alter table '+name+' nocheck constraint all' from sysobjects where type='U' )删除 ...

  8. Jquery 实现 “下次自动登录” 记住用户名密码功能

    转载自:http://blog.csdn.net/aspnet_lyc/article/details/12030039?utm_source=tuicool&utm_medium=refer ...

  9. mybatis，批量新增、修改，删除

    转载自:http://blog.csdn.net/sanyuesan0000/article/details/19998727 最近需要用到Mybatis批量新增oracle数据库,刚开始在网上找到的 ...

  10. 为Kindeditor控件添加图片自动上传功能

    Kindeditor是一款功能强大的开源在线HTML编辑器,支持所见即所得的编辑效果.它使用JavaScript编写,可以无缝地与多个不同的语言环境进行集成,如.NET.PHP.ASP.Java等.官 ...