windbg ANSI Command Tree 1.0 title {"Microshaoft Commands"} body {"cmdtree"} {"Microshaoft.WinDbg.CmdTree.txt"} {".cmdtree microshaoft.windbg.cmdtree.txt"} {"SOS Commands"} {"Load SOS and SOSEX"} {".loadby sos mscorwks;.load sosex"} {"Microshaoft Load .NET v4.0+ sos.dll"} {".load C:WindowsMicrosoft.NETFramework64v4.0.30319SOS.dll"} {"Microshaoft Load .NET v4.0+ mscorwks.dll"} {".load C:WindowsMicrosoft.NETFramework64v4.0.30319mscorwks.dll"} {"Microshaoft Load .NET v3.5- sos.dll"} {".load C:WindowsMicrosoft.NETFramework64v2.0.50727SOS.dll"} {"Microshaoft Load .NET v3.5- mscorwks.dll"} {".load C:WindowsMicrosoft.NETFramework64v2.0.50727mscorwks.dll"} {"PSSCOR"} {"Microshaoft Load .NET v4.0+ AMD64 psscor4.dll"} {".load D:WinDbgPsscorpsscor4amd64psscor4.dll"} {"Microshaoft Load .NET v3.5- AMD64 psscor2.dll"} {".load D:WinDbgPsscorpsscor2amd64psscor2.dll"} {"Modules"} {"All Modules"} {"lm D sm"} {"Loaded Modules"} {"lmo D sm"} {"Loaded Modules (verbose)"} {"lmvo D sm"} {"Modules w/o symbols"} {"lme D sm"} {"Threads"} {"Managed Threads"} {"!threads"} {"Native Threads"} {"~"} {"Thread Pool Threads"} {"!threadpool"} {"Sync Block Deadlocks"} {"!dlk"} {"Stacks"} {"Current Managed Stack"} {"!clrstack"} {"DumpObj"} {"!do ###"} {"Current Managed Stack Parameters and Locals"} {"!vars -w"} {"Current Native Stack"} {"kP"} {"Current Dump Stack"} {"!dumpstack"} {"All Managed Stacks"} {"~*e!clrstack"} {"All Managed Stack Parameters and Locals"} {"~*e!vars -w"} {"All Native Stacks"} {"~*kP"} {"All Dump Stacks"} {"!eestack"} {"Memory"} {"Stack Objects"} {"!dso"} {"GC Heap"} {"!eeheap -gc"} {"Heap Stats"} {"!dumpheap -stat"} {"Objects > 500 bytes"} {"!dumpheap -min 500"} {"Objects > 1000 bytes"} {"!dumpheap -min 1000"} {"Gen 2 Objects"} {"!dumpgen -stat 2"} {"Common Commands"} {"Information"} {"Time of dump"} {".time"} {"Process being debugged"} {"|"} {"Dump Location"} {"||"} {"Create server on port 9999"} {".server tcp:port=9999"} {"Show remote connections"} {".clients"} {"Process Environment Block"} {"!peb"} {"Logging"} {"Open Log"} {".logopen /t /u /d"} {"Close Log"} {".logclose"} {"Modules"} {"All Modules"} {"lm D sm"} {"Loaded Modules"} {"lmo D sm"} {"Loaded Modules (verbose)"} {"lmvo D sm"} {"Modules w/o symbols"} {"lme D sm"} {"Stacks"} {"Set frame length to 2000"} {".kframes 2000"} {"Dump current stack w/ DML"} {"kpM 1000"} {"Dump stacks without private info"} {"knL 1000"} {"Dump stacks with all parameters"} {"kPn 1000"} {"Dump stacks (distance from last frame)"} {"kf 1000"} {"Dump stacks with Frame Pointer Omission"} {"kvn 1000"} {"Dump all stack"} {"~*kbn 1000"} {"Dump unique stacks"} {"!uniqstack -pn"} {"Thread environment block"} {"!teb"} {"Move to next frame"} {".f+"} {"Move to previous frame"} {".f-"} {"Memory"} {"Dump heaps"} {"!heap -a"} {"Automated Task"} {"!analyze"} {"!analyze -v"} {"Locks"} {"!ntsdexts.locks"} {"CPU time for User and Kernel Mode"} {"!runaway 7"} {"Managed"} {"Load sos"} {".loadby sos mscorwks"} {"Microshaoft Load .NET v4.0+ sos.dll"} {".load C:WindowsMicrosoft.NETFramework64v4.0.30319SOS.dll"} {"Microshaoft Load .NET v4.0+ mscorwks.dll"} {".load C:WindowsMicrosoft.NETFramework64v4.0.30319mscorwks.dll"} {"Microshaoft Load .NET v3.5- sos.dll"} {".load C:WindowsMicrosoft.NETFramework64v2.0.50727SOS.dll"} {"Microshaoft Load .NET v3.5- mscorwks.dll"} {".load C:WindowsMicrosoft.NETFramework64v2.0.50727mscorwks.dll"} {"clrstack"} {"!clrstack"} {"Threads"} {"!threads"} {"Stack Objects"} {"!dso"} {"Exceptions"} {"!dae"} {"Crash Dump Analysis Checklist (www.dumpanalysis.org)"} {"General"} {"Versions and locations"} {"version"} {"Set longer stack trace"} {".kframes 100"} {"Application crash or hang"} {"Default analysis (crash)"} {"!analyze -v"} {"Default analysis (hang)"} {"!analyze -v -hang"} {"Switch to x86 architecture"} {".load wow64exts; .effmach x86"} {"Critical sections (locked)"} {"!locks"} {"Modules"} {"lmv"} {"Threads (all)"} {"~*kv 250"} {"Threads (unique)"} {"!uniqstack"} {"Gflags"} {"!gflag"} {"Time consumed by thread"} {"!runaway"} {"PEB"} {"!peb"} {"TEB"} {"!teb"} {"Hooked functions (ntdll)"} {"!chkimg -lo 50 -d !ntdll -v"} {"Hooked functions (kernel32)"} {"!chkimg -lo 50 -d !kernel32 -v"} {"Hooked functions (user32)"} {"!chkimg -lo 50 -d !user32 -v"} {"Hooked functions (ALL)"} {"!for_each_module !chkimg -lo 50 -d !${@#ModuleName} -v"} {"Exception handlers"} {"!exchain"} {"Computer name"} {"!envvar COMPUTERNAME"} {"Stack of exception thread"} {"~#kv 250"} {"Stack of current thread"} {"~.kv 250"} {"Switch to thread"} {"#0"} {"~0s"} {"#1"} {"~1s"} {"#2"} {"~2s"} {"#3"} {"~3s"} {"#4"} {"~4s"} {"#5"} {"~5s"} {"#6"} {"~6s"} {"#7"} {"~7s"} {"#8"} {"~8s"} {"#9"} {"~9s"} {"System hang"} {"Default analysis"} {"!analyze -v -hang"} {"ERESOURCE contention"} {"!locks"} {"Processes and virtual memory"} {"!vm 4"} {"Sorted pool consumption (paged)"} {"!poolused 4"} {"Sorted pool consumption (nonpaged)"} {"!poolused 3"} {"Waiting threads"} {"!stacks"} {"Critical system queues"} {"!exqueue f"} {"I/O"} {"!irpfind"} {"The list of all thread stack traces"} {"!process 0 ff"} {"Critical sections for current process"} {"!ntsdexts.locks"} {"Sessions"} {"!session"} {"Processes"} {"!process 0 0"} {"Running threads"} {"!running"} {"Ready threads"} {"!ready"} {"DPC queues"} {"!dpcs"} {"The list of APCs"} {"!apc"} {"Internal queued spinlocks"} {"!qlocks"} {"Computer name"} {"dS srv!srvcomputername"} {"Switch to processor"} {"#0"} {"~0s"} {"#1"} {"~1s"} {"#2"} {"~2s"} {"#3"} {"~3s"} {"#4"} {"~4s"} {"#5"} {"~5s"} {"#6"} {"~6s"} {"#7"} {"~7s"} {"BSOD"} {"Default analysis"} {"!analyze -v"} {"Processes and virtual memory"} {"!vm 4"} {"Bugcheck callback data (prior to Windows XP SP1)"} {"!bugdump"} {"Bugcheck secondary callback data"} {".enumtag"} {"Computer name"} {"dS srv!srvcomputername"} {"Microshaoft .NET"} {"show objects on current stack"} {"!dumpstackobjects"} {"show ThreadPool running"} {"!threadpool"} {"show all threads running time utilization"} {"!runaway"} {"gc handles"} {"!gchandles"} {"go to thread ~#s"} {"~1s"} {"!DumpStack [-EE] [top stack [bottom stack]]"} {"!dumpstack"} {"show class instance member value !DumpVC <MethodTable address> <address>"} {"!DumpVC"} {"show managed heaps"} {"!eeheap -gc"} {"show heaps memory statistic"} {"!dumpheap -min 200 -stat"} {"show Byte array heap memory usage"} {"!dumpheap -type Byte[] -min 200"} {"show managed heap's MethodTable objects !dumpheap -mt <MethodTable address>"} {"!dumpheap -mt"} {"show object reference info !GCRoot [-nostacks] <Object address>"} {"!gcroot"} {"show object detail !DumpObj [-nofields] <object address>"} {"!do"} {"show data object detail !da <address>"} {"!da"} {"show all objects in current stack !DumpStackObjects [-verify] [top stack [bottom stack]]"} {"!dso"} {"show object size !ObjSize [<Object address>]"} {"!objsize"} {"!PrintException [-nested] [<Exception object address>]"} {"!pe"} |