Thinking debugging? Think www.windbg.info
By Robert Kuster
Posted : 01 Feb 2009
Updated : 17 Feb 2009
Common WinDbg Commands (Thematically Grouped)
1) Built-in help commands 9) Exceptions, events, and crash analysis 17) Information about variables
2) General WinDbg's commands (clear
screen, ..)
10) Loaded modules and image information 18) Memory
3) Debugging sessions (attach, detach, ..) 11) Process related information 19) Manipulating memory ranges
4) Expressions and commands 12) Thread related information 20) Memory: Heap
5) Debugger markup language (DML) 13) Breakpoints 21) Application Verifier
6) Main extensions 14) Tracing and stepping (F10, F11) 22) Logging extension (logexts.dll)
7) Symbols 15) Call stack
8) Sources 16) Registers
1) Built-in help commands
C m d V a r i a n t s / P a r a m s D e s cr i p t i o n
?
?
? /D
Display regular commands
Display regular commands as DML
.help
.help
.help /D
.help /D a*
Display . commands
Display . commands in DML format (top bar of links is given)
Display . commands that start with a* (wildcard) as DML
.chain
.chain
.chain /D
Lists all loaded debugger extensions
Lists all loaded debugger extensions as DML (where extensions are linked
to a .extmatch)
.extmatch
.extmatch /e ExtDLL FunctionFilter
.extmatch /D /e ExtDLL FunctionFilter
Show all exported functions of an extension DLL. FunctionFilter = wildcard
string
Same in DML format (functions link to "!ExtName.help FuncName"
commands)
Example: .extmatch /D /e uext * (show all exported functions of
uext.dll)
.hh
.hh
.hh Text
Open WinDbg's help
Text = text to look up in the help file index
Example: .hh dt
2) General WinDbg's commands (show version, clear screen, etc.)
C m d V a r i a n t s / P a r a m s D e s c r i p t i o n
version Dump version info of debugger and loaded extension DLLs
vercommand Dump command line that was used to start the debugger
vertarget Version of target computer
CTRL+ALT+V
Toggle verbose mode ON/OFF
In verbose mode some commands (such as register dumping) have more
detailed output.
n n [8 | 10 | 16] Set number base
.
formats
.formats Expression Show number formats = evaluates a numerical expression or symbol and
displays it in multiple numerical formats (hex, decimal, octal, binary,
time, ..)