windbg ANSI Command Tree 1.0

title {"Microshaoft Commands"}

body

{"cmdtree"}

    {"Microshaoft.WinDbg.CmdTree.txt"} {".cmdtree microshaoft.windbg.cmdtree.txt"}

{"SOS Commands"}

    {"Load SOS and SOSEX"} {".loadby sos mscorwks;.load sosex"}

    {"Microshaoft Load .NET v4.0+ sos.dll"} {".load C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SOS.dll"}

    {"Microshaoft Load .NET v4.0+ mscorwks.dll"} {".load C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorwks.dll"}

    {"Microshaoft Load .NET v3.5- sos.dll"} {".load C:\Windows\Microsoft.NET\Framework64\v2.0.50727\SOS.dll"}

    {"Microshaoft Load .NET v3.5- mscorwks.dll"} {".load C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorwks.dll"}

    {"PSSCOR"}

        {"Microshaoft Load .NET v4.0+ AMD64 psscor4.dll"} {".load D:\WinDbg\Psscor\psscor4\amd64\psscor4.dll"}

        {"Microshaoft Load .NET v3.5- AMD64 psscor2.dll"} {".load D:\WinDbg\Psscor\psscor2\amd64\psscor2.dll"}

    {"Modules"}

        {"All Modules"} {"lm D sm"}

        {"Loaded Modules"} {"lmo D sm"}

        {"Loaded Modules (verbose)"} {"lmvo D sm"}

        {"Modules w/o symbols"} {"lme D sm"}

    {"Threads"}

        {"Managed Threads"} {"!threads"}

        {"Native Threads"} {"~"}

        {"Thread Pool Threads"} {"!threadpool"}

        {"Sync Block Deadlocks"} {"!dlk"}

    {"Stacks"}

        {"Current Managed Stack"} {"!clrstack"}

        {"DumpObj"} {"!do ###"}

        {"Current Managed Stack Parameters and Locals"} {"!vars -w"}

        {"Current Native Stack"} {"kP"}

        {"Current Dump Stack"} {"!dumpstack"}

        {"All Managed Stacks"} {"~*e!clrstack"}

        {"All Managed Stack Parameters and Locals"} {"~*e!vars -w"}

        {"All Native Stacks"} {"~*kP"}

        {"All Dump Stacks"} {"!eestack"}

    {"Memory"}

        {"Stack Objects"} {"!dso"}

        {"GC Heap"} {"!eeheap -gc"}

        {"Heap Stats"} {"!dumpheap -stat"}

        {"Objects > 500 bytes"} {"!dumpheap -min 500"}

        {"Objects > 1000 bytes"} {"!dumpheap -min 1000"}

        {"Gen 2 Objects"} {"!dumpgen -stat 2"}

{"Common Commands"}

    {"Information"}

        {"Time of dump"} {".time"}

        {"Process being debugged"} {"|"}

        {"Dump Location"} {"||"}

        {"Create server on port 9999"} {".server tcp:port=9999"}

        {"Show remote connections"} {".clients"}

        {"Process Environment Block"} {"!peb"}

    {"Logging"}

        {"Open Log"} {".logopen /t /u /d"}

        {"Close Log"} {".logclose"}

    {"Modules"}

        {"All Modules"} {"lm D sm"}

        {"Loaded Modules"} {"lmo D sm"}

        {"Loaded Modules (verbose)"} {"lmvo D sm"}

        {"Modules w/o symbols"} {"lme D sm"}

    {"Stacks"}

        {"Set frame length to 2000"} {".kframes 2000"}

        {"Dump current stack w/ DML"} {"kpM 1000"}

        {"Dump stacks without private info"} {"knL 1000"}

        {"Dump stacks with all parameters"} {"kPn 1000"}

        {"Dump stacks (distance from last frame)"} {"kf 1000"}

        {"Dump stacks with Frame Pointer Omission"} {"kvn 1000"}

        {"Dump all stack"} {"~*kbn 1000"}

        {"Dump unique stacks"} {"!uniqstack -pn"}

        {"Thread environment block"} {"!teb"}

        {"Move to next frame"} {".f+"}

        {"Move to previous frame"} {".f-"}

    {"Memory"}

        {"Dump heaps"} {"!heap -a"}

    {"Automated Task"}

        {"!analyze"} {"!analyze -v"}

        {"Locks"} {"!ntsdexts.locks"}

        {"CPU time for User and Kernel Mode"} {"!runaway 7"}

    {"Managed"}

        {"Load sos"} {".loadby sos mscorwks"}

        {"Microshaoft Load .NET v4.0+ sos.dll"} {".load C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SOS.dll"}

        {"Microshaoft Load .NET v4.0+ mscorwks.dll"} {".load C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorwks.dll"}

        {"Microshaoft Load .NET v3.5- sos.dll"} {".load C:\Windows\Microsoft.NET\Framework64\v2.0.50727\SOS.dll"}

        {"Microshaoft Load .NET v3.5- mscorwks.dll"} {".load C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorwks.dll"}

        {"clrstack"} {"!clrstack"}

        {"Threads"} {"!threads"}

        {"Stack Objects"} {"!dso"}

        {"Exceptions"} {"!dae"}

{"Crash Dump Analysis Checklist (www.dumpanalysis.org)"}

    {"General"}

        {"Versions and locations"} {"version"}

        {"Set longer stack trace"} {".kframes 100"}

    {"Application crash or hang"}

        {"Default analysis (crash)"} {"!analyze -v"}

        {"Default analysis (hang)"} {"!analyze -v -hang"}

        {"Switch to x86 architecture"} {".load wow64exts; .effmach x86"}

        {"Critical sections (locked)"} {"!locks"}

        {"Modules"} {"lmv"}

        {"Threads (all)"} {"~*kv 250"}

        {"Threads (unique)"} {"!uniqstack"}

        {"Gflags"} {"!gflag"}

        {"Time consumed by thread"} {"!runaway"}

        {"PEB"} {"!peb"}

        {"TEB"} {"!teb"}

        {"Hooked functions (ntdll)"} {"!chkimg -lo 50 -d !ntdll -v"}

        {"Hooked functions (kernel32)"} {"!chkimg -lo 50 -d !kernel32 -v"}

        {"Hooked functions (user32)"} {"!chkimg -lo 50 -d !user32 -v"}

        {"Hooked functions (ALL)"} {"!for_each_module !chkimg -lo 50 -d !${@#ModuleName} -v"}

        {"Exception handlers"} {"!exchain"}

        {"Computer name"} {"!envvar COMPUTERNAME"}

        {"Stack of exception thread"} {"~#kv 250"}

        {"Stack of current thread"} {"~.kv 250"}

        {"Switch to thread"}

            {"#0"} {"~0s"}

            {"#1"} {"~1s"}

            {"#2"} {"~2s"}

            {"#3"} {"~3s"}

            {"#4"} {"~4s"}

            {"#5"} {"~5s"}

            {"#6"} {"~6s"}

            {"#7"} {"~7s"}

            {"#8"} {"~8s"}

            {"#9"} {"~9s"}

    {"System hang"}

        {"Default analysis"} {"!analyze -v -hang"}

        {"ERESOURCE contention"} {"!locks"}

        {"Processes and virtual memory"} {"!vm 4"}

        {"Sorted pool consumption (paged)"} {"!poolused 4"}

        {"Sorted pool consumption (nonpaged)"} {"!poolused 3"}

        {"Waiting threads"} {"!stacks"}

        {"Critical system queues"} {"!exqueue f"}

        {"I/O"} {"!irpfind"}

        {"The list of all thread stack traces"} {"!process 0 ff"}

        {"Critical sections for current process"} {"!ntsdexts.locks"}

        {"Sessions"} {"!session"}

        {"Processes"} {"!process 0 0"}

        {"Running threads"} {"!running"}

        {"Ready threads"} {"!ready"}

        {"DPC queues"} {"!dpcs"}

        {"The list of APCs"} {"!apc"}

        {"Internal queued spinlocks"} {"!qlocks"}

        {"Computer name"} {"dS srv!srvcomputername"}

        {"Switch to processor"}

            {"#0"} {"~0s"}

            {"#1"} {"~1s"}

            {"#2"} {"~2s"}

            {"#3"} {"~3s"}

            {"#4"} {"~4s"}

            {"#5"} {"~5s"}

            {"#6"} {"~6s"}

            {"#7"} {"~7s"}

    {"BSOD"}

        {"Default analysis"} {"!analyze -v"}

        {"Processes and virtual memory"} {"!vm 4"}

        {"Bugcheck callback data (prior to Windows XP SP1)"} {"!bugdump"}

        {"Bugcheck secondary callback data"} {".enumtag"}

        {"Computer name"} {"dS srv!srvcomputername"}

{"Microshaoft .NET"}

    {"show objects on current stack"} {"!dumpstackobjects"}

    {"show ThreadPool running"} {"!threadpool"}

    {"show all threads running time utilization"} {"!runaway"}

    {"gc handles"} {"!gchandles"}

    {"go to thread ~#s"} {"~1s"}

    {"!DumpStack [-EE] [top stack [bottom stack]]"} {"!dumpstack"}

    {"show class instance member value !DumpVC <MethodTable address> <address>"} {"!DumpVC"}

    {"show managed heaps"} {"!eeheap -gc"}

    {"show heaps memory statistic"} {"!dumpheap -min 200 -stat"}

    {"show Byte array heap memory usage"} {"!dumpheap -type Byte[] -min 200"}

    {"show managed heap's MethodTable objects !dumpheap -mt <MethodTable address>"} {"!dumpheap -mt"}

    {"show object reference info !GCRoot [-nostacks] <Object address>"} {"!gcroot"}

    {"show object detail !DumpObj [-nofields] <object address>"} {"!do"}

    {"show data object detail !da <address>"} {"!da"}

    {"show all objects in current stack !DumpStackObjects [-verify] [top stack [bottom stack]]"} {"!dso"}

    {"show object size !ObjSize [<Object address>]"} {"!objsize"}

    {"!PrintException [-nested] [<Exception object address>]"} {"!pe"}

Microshaoft WinDbg cmdtree的更多相关文章

  1. WinDbg常用命令系列---.cmdtree

    .cmdtree 简介 使用形式 .cmdtree cmdfile 参数 cmdfile命令文件,包含多个你需要的命令.必须是一个文本档 使用步骤 1.使用命令创建文本文件test.wl,使用以下示例 ...

  2. Windbg Extension NetExt 使用指南 【3】 ---- 挖掘你想要的数据 Managed Heap

    摘要 : NetExt中有两个比较常用的命令可以用来分析heap上面的对象. 一个是!wheap, 另外一个是!windex. !wheap 这个命令可以用于打印出heap structure信息. ...

  3. 透过WinDBG的视角看String

    摘要 : 最近在博客园里面看到有人在讨论 C# String的一些特性. 大部分情况下是从CODING的角度来讨论String. 本人觉得非常好奇, 在运行时态, String是如何与这些特性联系上的 ...

  4. Windbg Extension NetExt 使用指南 【2】 ---- NetExt 的基本命令介绍

    摘要 : 本章节介绍NetExt常用的命令. 并且对SOS进行一些对比. NetExt的帮助 要想玩好NetExt, 入门就得看帮助. 看NetExt的帮助可以调用!whelp 命令. 这样hi列举出 ...

  5. Windbg Extension NetExt 使用指南 【1】 ---- NetExt 介绍

    摘要 : 在使用WINDBG做debugging的时候,需要一个好的工具帮助进行数据分析. 最常见的extension包括SOS, PSSCOR.  NetExt则是另外一种提供了丰富命令功能的deb ...

  6. Windbg跟踪临界区的BUG

    最近跟踪了一个程序的界面卡死问题,该卡死偶尔出现,在抓到一次dump后用windbg载入分析,打印出函数调用堆栈后,一眼可以看出是临界区死锁了. 代码: 0:000:x86> kb ChildE ...

  7. 使用Windbg在XP下Heap追踪失败的原因

    1.故事背景      最近同事的代码中碰到一个bug会导致奔溃的bug,从dump上看是由于某个对象的堆内存指针被释放了,但代码仍调用了该对象指针的虚函数,从而引起内存访问违法崩溃,由于该类被大量使 ...

  8. Windbg调试命令详解

    作者:张佩][原文:http://www.yiiyee.cn/Blog] 1. 概述 用户成功安装微软Windows调试工具集后,能够在安装目录下发现四个调试器程序,分别是:cdb.exe.ntsd. ...

  9. windbg运行

    运行起来会提示windbg is running. BUSY 这个是正常运行的状态,只有发生异常,或者被指定断点,才会中断.

随机推荐

  1. jsp自定义标签（时间格式化包括Long转时间）

    1.jsp自带标签的格式化: jstl fmt 函数大全:主要针对格式化功能 Tags   fmt:requestEncoding fmt:setLocale fmt:timeZone fmt:set ...

  2. 解读Unity中的CG编写Shader系列七（不透明度与混合）

    转自http://www.itnose.net/detail/6098539.html 1.不透明度 当我们要将两个半透的纹理贴图到一个材质球上的时候就遇到混合的问题,由于前面的知识我们已经知道了片段 ...

  3. Git-windows安装包

    下载地址 http://192.168.168.230/sw-search-sp/soft/4e/30195/Git-2.7.2-32-bit_setup.1457942412.exe 来自为知笔记( ...

  4. zsh 通信脚本

    server #!/bin/zsh #zsh TCP server script zmodload zsh/net/tcp #listening port ztcp -l #This is a fil ...

  5. Divide and conquer:Dropping tests(POJ 2976)

    最大化平均值 题目大意:给定你n个分数,从中找出k个数,使∑a/∑b的最大值 这一题同样的也可以用二分法来做(用DP会超时,可见二分法是多么的实用呵!),大体上是这样子:假设最大的平均值是w,那么题目 ...

  6. 【leetcode】Binary Tree Postorder Traversal (hard) ☆

    二叉树的后序遍历 用标记右子树vector的方法 vector<int> postorderTraversal(TreeNode *root) { vector<int> an ...

  7. ASINetworkQueues(经典2)

    ASINetworkQueues, 它的delegate提供更为丰富的功能 提 供的更多的回调方法如下: a,requestDidStartSelector,请求发起时会调此方法,你可以在此方法中跟据 ...

  8. ios的链式编程笔记

    1.Masonry的语法为啥能连续的使用点语法? >> 底层使用的是:用block当函数的返回参数  > 链式编程思想 2. 使用block当函数的返回参数 // 之前开发中比较习惯 ...

  9. supersr--图形上下文的注意点

    - (void)test { // 不要自己调用drawRect:方法的原因: // 当系统调用drawRect:方法之前, 会创建一个与当前UIView的layer相关的图形上下文, 这样就可以保证 ...

  10. Innodb之监控Buffer pool Load progress

    你可以使用PERFORMANCE SCHEMA中的相关信息监控BUFFER POOL状态加载进程. 1. 启用 stage/innodb/buffer pool load instrument: 2. ...