MSDN上关于WinDbg的手册
参考:http://msdn.microsoft.com/en-us/library/windows/hardware/ff540507(v=vs.85).aspx
这是最靠谱的参考了,比.hh要直观。
在Linux上稍作编辑
daniel@daniel-mint ~/windbg $ awk 'BEGIN{maxIndex=0}{idx = index($0, "("); if (idx > maxIndex) maxIndex = idx;}END{print maxIndex}' commands
57
daniel@daniel-mint ~/windbg $ awk 'FS="[()]"{printf("%60s\t%s\n", $1, $2)}' commands > commands_formated
Basic Commands
daniel@daniel-mint ~/windbg $ awk 'FS="[()]"{printf("%60s\t%s\n", $1, $2)}' commands ENTER (Repeat$<, $><, $$<, $$><, $$>a< Run Script File? Command Help? Evaluate Expression?? Evaluate C++ Expression# Search for Disassembly Pattern|| System Status||s Set Current System| Process Status|s Set Current Process~ Thread Status~e Thread-Specific Command~f Freeze Thread~u Unfreeze Thread~n Suspend Thread~m Resume Thread~s Set Current Thread~s Change Current Processora Assemblead Delete Aliasah Assertion Handlingal List Aliasesas, aS Set Aliasba Break on Accessbc Breakpoint Clearbd Breakpoint Disablebe Breakpoint Enablebl Breakpoint Listbp, bu, bm Set Breakpointbr Breakpoint Renumberbs Update Breakpoint Commandbsc Update Conditional Breakpointc Compare Memoryd, da, db, dc, dd, dD, df, dp, dq, du, dw, dW, dyb, dyd Display Memorydda, ddp, ddu, dpa, dpp, dpu, dqa, dqp, dqu Display Referenced Memorydds, dps, dqs Display Words and Symbolsdg Display Selectordl Display Linked Listds, dS Display Stringdt Display Typedv Display Local Variablese, ea, eb, ed, eD, ef, ep, eq, eu, ew, eza, ezu Enter Valuesf, fp Fill Memoryg Gogc Go from Conditional Breakpointgh Go with Exception Handledgn, gN Go with Exception Not Handledgu Go Upib, iw, id Input from Portj Execute If - Elsek, kb, kc, kd, kp, kP, kv Display Stack Backtracel+, l- Set Source Optionsld Load Symbolslm List Loaded Modulesln List Nearest Symbolsls, lsa List Source Lineslsc List Current Sourcelse Launch Source Editorlsf, lsf- Load or Unload Source Filelsp Set Number of Source Linesm Move Memoryn Set Number Baseob, ow, od Output to Portp Steppa Step to Addresspc Step to Next Callpct Step to Next Call or Returnph Step to Next Branching Instructionpt Step to Next Returnq, qq Quitqd Quit and Detachr Registersrdmsr Read MSRrm Register Masks Search Memoryso Set Kernel Debugging Optionssq Set Quiet Modess Set Symbol Suffixsx, sxd, sxe, sxi, sxn, sxr, sx- Set Exceptionst Traceta Trace to Addresstb Trace to Next Branchtc Trace to Next Calltct Trace to Next Call or Returnth Trace to Next Branching Instructiontt Trace to Next Returnu Unassembleuf Unassemble Functionup Unassemble from Physical Memoryur Unassemble Real Mode BIOSux Unassemble x86 BIOSvercommand Show Debugger Command Lineversion Show Debugger Versionvertarget Show Target Computer Versionwrmsr Write MSRwt Trace and Watch Datax Examine Symbolsz Execute While
meta commands
daniel@daniel-mint ~/windbg $ awk 'FS="[()]"{printf("%30s\t%s\n", $1, $2)}' meta_commands .abandon (Abandon.allow_exec_cmds Allow Execution Commands.allow_image_mapping Allow Image Mapping.apply_dbp Apply Data Breakpoint to Context.asm Change Disassembly Options.attach Attach to Process.beep Speaker Beep.bpcmds Display Breakpoint Commands.bpsync Synchronize Threads at Breakpoint.breakin Break to the Kernel Debugger.browse Display Command in Browser.bugcheck Display Bug Check Data.cache Set Cache Size.call Call Function.chain List Debugger Extensions.childdbg Debug Child Processes.clients List Debugging Clients.closehandle Close Handle.cls Clear Screen.context Set User-Mode Address Context.copysym Copy Symbol Files.cordll Control CLR Debugging.crash Force System Crash.create Create Process.createdir Set Created Process Directory.cxr Display Context Record.dbgdbg Debug Current Debugger.detach Detach from Process.dml_flow Unassemble with Links.dml_start Display DML Starting Point.dump Create Dump File.dumpcab Create Dump File CAB.dvalloc Allocate Memory.dvfree Free Memory.echo Echo Comment.echocpunum Show CPU Number.echotime Show Current Time.echotimestamps Show Time Stamps.ecxr Display Exception Context Record.effmach Effective Machine.enable_long_status Enable Long Integer Display.enable_unicode Enable Unicode Display.endpsrv End Process Server.endsrv End Debugging Server.enumtag Enumerate Secondary Callback Data.event_code Display Event Code.eventlog Display Recent Events.exepath Set Executable Path.expr Choose Expression Evaluator.exptr Display Exception Pointers.exr Display Exception Record.extmatch Display All Matching Extensions.extpath Set Extension Path.f+, .f- Shift Local Context.fiber Set Fiber Context.fiximports Fix Target Module Imports.flash_on_break Flash on Break.fnent Display Function Data.fnret Display Function Return Value.force_radix_output Use Radix for Integers.force_tb Forcibly Allow Branch Tracing.formats Show Number Formats.fpo Control FPO Overrides.frame Set Local Context.help Meta-Command Help.hh Open HTML Help File.hideinjectedcode Hide Injected Code.holdmem Hold and Compare Memory.idle_cmd Set Idle Command.ignore_missing_pages Suppress Missing Page Errors.inline Toggle Inline Function Debugging.imgscan Find Image Headers.kdfiles Set Driver Replacement Map.kframes Set Stack Length.kill Kill Process.lastevent Display Last Event.lines Toggle Source Line Support.load, .loadby Load Extension DLL.locale Set Locale.logappend Append Log File.logclose Close Log File.logfile Display Log File Status.logopen Open Log File.netuse Control Network Connections.noshell Prohibit Shell Commands.noversion Disable Version Checking.ocommand Expect Commands from Target.ofilter Filter Target Output.open Open Source File.opendump Open Dump File.outmask Control Output Mask.pagein Page In Memory.pcmd Set Prompt Command.pop Restore Debugger State.prefer_dml Prefer Debugger Markup Language.process Set Process Context.prompt_allow Control Prompt Display.push Save Debugger State.quit_lock Prevent Accidental Quit.readmem Read Memory from File.reboot Reboot Target Computer.record_branches Enable Branch Recording.reload Reload Module.remote Create Remote.exe Server.remote_exit Exit Debugging Client.restart Restart Target Application.restart Restart Kernel Connection.rrestart Register for Restart.scroll_prefs Control Source Scrolling Preferences.secure Activate Secure Mode.send_file Send File.server Create Debugging Server.servers List Debugging Servers.setdll Set Default Extension DLL.shell Command Shell.show_read_failures .show_sym_failures .sleep Pause Debugger.sound_notify Use Notification Sound.srcfix, .lsrcfix Use Source Server.srcnoisy Noisy Source Loading.srcpath, .lsrcpath Set Source Path.step_filter Set Step Filter.suspend_ui Suspend WinDbg Interface.symfix Set Symbol Store Path.symopt Set Symbol Options.sympath Set Symbol Path.thread Set Register Context.time Display System Time.tlist List Process IDs.trap Display Trap Frame.tss Display Task State Segment.ttime Display Thread Times.typeopt Set Type Options.unload Unload Extension DLL.unloadall Unload All Extension DLLs.urestart Unregister for Restart.wake Wake Debugger.write_cmd_hist Write Command History.writemem Write Memory to File.wtitle Set Window Title
Kernel Mode Extensions
!ahcache
!alignmentfaults
!analyzebugcheck
!apc
!apicerr
!arbinst
!arbiter
!ate
!bcb
!blockeddrv
!bpid
!btb
!bth
!bugdump
!bushnd
!ca
!callback
!calldata
!can_write_kdump
!cbreg
!cchelp
!chklowmem
!cmreslist
!cpuinfo
!db, !dc, !dd, !dp, !dq, !du, !dw
!dbgprint
!dblink
!dcr
!dcs
!deadlock
!defwrites
!devext
!devhandles
!devnode
!devobj
!devstack
!dflink
!diskspace
!dma
!dpa
!dpcs
!driveinfo
!drivers
!drvobj
!dskheap
!eb, !ed
!ecb, !ecd, !ecw
!ecs
!errlog
!errpkt
!errrec
!exca
!filecache
!filelock
!fileobj
!filetime
!finddata
!findfilelockowner
!for_each_process
!for_each_thread
!fpsearch
!frag
!frozen
!fwver
!gbl
!gentable
!hidppd
!ib, !id, !iw
!icpleak
!idt
!ih
!ihs
!ioresdes
!ioreslist
!iovirp
!ipi
!irp
!irpfind
!irpzone
!irql
!isainfo
!isr
!ivt
!job
!kb, !kv
!loadermemorylist
!lockedpages
!locks (!kdext*.locks)
!logonsession
!lookaside
!lpc
!mca
!memlist
!memusage
!mps
!mtrr
!npx
!ob, !od, !ow
!object
!obtrace
!openmaps
!pars
!pat
!pci
!pciir
!pcitree
!pcm
!pcr
!pcrs
!pfn
!pmc
!pmssa
!pnpevent
!pocaps
!pool
!poolfind
!poolused
!poolval
!popolicy
!pplookaside
!ppmidle
!ppmidleaccounting
!ppmperf
!ppmperfpolicy
!ppmstate
!prcb
!process
!processfields
!processirps
!psp
!pte
!pte2va
!ptov
!qlocks
!ready
!reg
!regkcb
!rellist
!ruleinfo
!running
!scm
!search
!searchpte
!sel
!session
!smt
!spoolsum
!spoolused
!sprocess
!srb
!stacks
!swd
!sysinfo
!sysptes
!thread
!threadfields
!time
!timer
!tokenfields
!trap
!tss
!tz
!tzinfo
!ubc
!ubd
!ube
!ubl
!ubp
!urb
!vad
!vad_reload
!validatelist
!verifier
!vm
!vpb
!vpdd
!vtop
!walklist
!wdmaud
!whattime
!whatperftime
!whea
!wsle
!xpoolmap
!zombies
general extensions
!acl
!address
!analyze
!asd
!atom
!bitcount
!chksym
!chkimg
!cppexr
!cpuid
!cs
!cxr
!dh
!dlls
!dml_proc
!dumpfa
!elog_str
!envvar
!error
!exchain
!exr
!findxmldata
!for_each_frame
!for_each_function
!for_each_local
!for_each_module
!for_each_register
!gflag
!gle
!gs
!handle
!heap
!help
!homedir
!hstring
!hstring2
!htrace
!imggp
!imgreloc
!kuser
!list
!lmi
!mui
!net_send
!obja
!owner
!peb
!rebase
!rtlavl
!sd
!sid
!slist
!std_map
!stl
!str
!sym
!symsrv
!teb
!tls
!token
!tp
!triage
!ustr
!version
!winrterr
user mode extensions
!avrf
!critsec
!dp (!ntsdexts.dp)
!dreg
!dt
!evlog
!findstack
!gatom
!igrep
!locks (!ntsdexts.locks)
!mapped_file
!runaway
!threadtoken
!uniqstack
!vadump
!vprot
转载于:https://www.cnblogs.com/long123king/p/3875145.html
MSDN上关于WinDbg的手册相关推荐
- WinDbg 命令三部曲:(一)WinDbg 命令手册
<WinDbg 命令三部曲:(一)WinDbg 命令手册> <WinDbg 命令三部曲:(二)WinDbg SOS 扩展命令手册> <WinDbg 命令三部曲:(三)Wi ...
- windbg命令手册
一. WINDBG命令手册 调试准备 为了测试 WinDbg 中使用 SOS 扩展命令,我创建了应用程序 "MemoryLeakApp.exe",Visual Studio 程序选 ...
- 用Zebra 在Linux 上构建路由器实战手册
用Zebra 在Linux 上构建路由器实战手册 一.Zebra 介绍 Zebra 是一个 TPC/IP 路由软件,支持 BGP-4.BGP-4+.OSPFv2. OSPFv3.RIPv1.RIPv2 ...
- 【读书笔记】MSDN 上关于加密解密的一个例子
MSDN上的一个不错的例子: 那从内存清除密码的句子有个问题. 需要再看看这个问题到底是怎么回事,怎么解决 cannot convert from Sytem.InPtr to ref string ...
- MSDN上的Mutex代码及其执行结果
MSDN上的Mutex代码及其执行结果 #include <windows.h> #include <stdio.h>#define THREADCOUNT 2HANDLE g ...
- MSDN上的异步socket 服务端例子
MSDN上的异步socket 服务端例子 2006-11-22 17:12:01| 分类: 代码学习 | 标签: |字号大中小 订阅 Imports System Imports System.N ...
- 这个网站收录了MSDN上基本所有的镜像文件的电驴链接
https://msdn.itellyou.cn/ 这个网站收录了MSDN上基本所有的镜像文件的电驴链接 转载于:https://www.cnblogs.com/wenzeBlog/p/85 ...
- 「mysql优化专题」90%程序员面试都用得上的索引优化手册(5)【面试重点】
本专题讲到索引查询优化,恭喜你,已经达到mysql优化的中级水平.这篇我们要讲的是mysql优化中重点中的重点--索引优化.面试官百分百必问 目录 多关于索引,分为以下几点来讲解: 一.索引的概述(什 ...
- 教你打入clr内部: 配置windows上的windbg,linux上的lldb
一:背景 1. 讲故事 前几天公众号里有位兄弟看了几篇文章之后,也准备用windbg试试看,结果这一配就花了好几天,(づ╥﹏╥)づ,我想也有很多跃跃欲试的朋友在配置的时候肯定会遇到这样和那样的问题,所 ...
最新文章
- 猎头出500万年薪挖百度某高T,却被对方拒绝!网友:钱不是最重要的!
- awk,sed,grep基本用法列举
- C语言中的位运算和逻辑运算
- 运维工具SaltStack
- 关于 quick-cocos 状态机
- 手把手教你写C语言的动态库的开发
- 金蝶Apusic应用服务器的数据源管理(转)
- 程序员面试金典 - 面试题 01.06. 字符串压缩(字符串)
- 个人站立会议(11月16日)
- 计算机图像类型ppt,计算机图像处理.ppt
- java基本类型运算溢出_JAVACard 基本数据类型的运算及溢出问题
- 数学建模——matlab基本使用
- python 典型相关分析_Canonical Correlation Analysis 典型相关分析
- dropdownlist下拉框变透明_Unity3D 4.x利用原生UGUI完成下拉列表DropDownList
- JavaScript 指定小数位数 toFixed() 方法
- html css精灵,CSS spirit /css精灵
- (转载)云计算系统测试
- Nero刻录ISO文件的过程步骤详解
- JS刷新页面的几种类型
- 使用SD Card Formatter工具格式化还原容量变少的SD卡TF卡