Windows璋冭瘯宸ュ叿
娉曞緥淇℃伅
宸ュ叿鍜屾枃妗ｅ垪琛?/a>
璋冭瘯鍣?/b>
宸ュ叿鍖呬腑鐨勮皟璇曞櫒
CDB鍜孨TSD
KD
WinDbg
瀹夎鍜岃缃?/b>
璋冭瘯鍣ㄥ畨瑁?/b>
閫夋嫨32浣嶆垨64浣嶈皟璇曞櫒鍖?/a>
浠庣敤鎴锋敮鎸佽瘖鏂瑿D涓婂畨瑁?/a>
閫氳繃Windows SDK瀹夎
閫氳繃Windows Driver Kit瀹夎
浠庣綉椤靛畨瑁?/a>
鑷畾涔夊畨瑁?/a>
鍐呮牳妯″紡璁剧疆
鍐呮牳妯″紡鐨勭‖浠惰缃?/b>
鐩爣鏈哄拰涓绘帶鏈?/a>
璁剧疆Null-Modem鐢电紗杩炴帴
璁剧疆1394鐢电紗杩炴帴
璁剧疆USB2.0璋冭瘯鐢电紗杩炴帴
娴嬭瘯杩炴帴
鐩爣鏈虹殑杞欢閰嶇疆
寮曞閫夐」浠嬬粛
Boot.ini鏂囦欢涓殑寮曞閫夐」
Boot.ini 鏂囦欢姒傝堪
缂栬緫Boot.ini鏂囦欢
澶囦唤Boot.ini鏂囦欢
EFI NVRAM涓殑寮曞閫夐」
EFI寮曞閫夐」姒傝堪
缂栬緫EFI寮曞閫夐」
澶囦唤EFI涓殑寮曞閫夐」
瀵煎嚭鍜屽鍏FI涓殑寮曞鍏ュ彛
涓虹幇鏈夌殑寮曞鍏ュ彛鎵惧埌澶囦唤鏂囦欢
鎵惧嚭宸插垹闄ゅ紩瀵煎叆鍙ｇ殑澶囦唤鏂囦欢
璇嗗埆鏃犵敤鐨勫紩瀵煎叆鍙ｆ枃浠?/a>
Windows Vista鐨勫紩瀵奸€夐」
缂栬緫寮曞閫夐」
娣诲姞寮曞鍏ュ彛
淇敼寮曞鍏ュ彛鐨勫弸濂藉悕
淇敼寮曞鍙傛暟
淇敼榛樿寮曞鍏ュ彛
淇敼寮曞鑿滃崟瓒呮椂
Boot.ini寮曞鍙傛暟鍙傝€?/b>
/3GB
/basevideo
/bootlog
/break
/burnmemory
/crashdebug
/debug
/execute
/fastdetect
/hal
/kernel
/maxmem
/nodebug
/noguiboot
/noexecute
/nolowmem
/nopae
/pae
/pcilock
/redirect
/sos
BCD寮曞閫夐」鍙傝€?/b>
BCDEdit /debug
BCDEdit /dbgsettings
BCDEdit /ems
BCDEdit /emssettings
BCDEdit /set
浣跨敤寮曞鍙傛暟
鐢ㄤ簬鍚敤璋冭瘯鐨勫紩瀵煎弬鏁?/a>
鐢ㄤ簬鎿嶄綔鍐呭瓨鐨勫紩瀵煎弬鏁?/a>
鐢ㄤ簬鍔犺浇灞€閮ㄨ皟璇曠増绯荤粺鐨勫紩瀵煎弬鏁?/a>
鐢ㄤ簬鍚敤EMS閲嶅畾鍚戠殑寮曞鍙傛暟
鐢ㄤ簬閰嶇疆DEP鍜孭AE鐨勫紩瀵煎弬鏁?/a>
缁曡繃寮曞閫夐」
绂佺敤1394鎺у埗鍣?/a>
浣跨敤KDbgCtrl
鍦ㄤ富鎺ф満涓婅繘琛岃蒋浠堕厤缃?/b>
閫夋嫨鍐呮牳璋冭瘯璁剧疆
瀹夎1394铏氭嫙椹卞姩绋嬪簭
瀹夎绗﹀彿鏂囦欢
鐢ㄦ埛妯″紡璁剧疆
鐢ㄦ埛妯″紡璋冭瘯鐨勭‖浠惰缃?/a>
鐢ㄦ埛妯″紡璋冭瘯鐨勮蒋浠惰缃?/b>
鍩烘湰鐢ㄦ埛妯″紡閰嶇疆
閰嶇疆 tools.ini
鑾峰緱杩涚▼ID
鍚敤鍗虫椂璋冭瘯
Windows 95, 98, 鍜孧illennium
鍦╓indows 9x/Me涓婂畨瑁呰皟璇曞櫒
Windows 9x/Me 涓婄殑璋冭瘯闄愬埗
Windows 9x/Me 涓婄殑鍐呮牳璋冭瘯
璋冭瘯鍣ㄦ搷浣?/b>
鍚姩璋冭瘯鍣?/b>
闄勫姞鍒拌繍琛屼腑鐨勮繘绋?鐢ㄦ埛妯″紡)
鍒涘缓涓€涓柊杩涚▼(鐢ㄦ埛妯″紡)
闈炰镜鍏ュ紡璋冭瘯(鐢ㄦ埛妯″紡)
闄勫姞鍒扮洰鏍囨満(鍐呮牳妯″紡)
鎵撳紑宕╂簝Dump
闄勫姞鍒拌櫄鎷熸満(鍐呮牳妯″紡)
闄勫姞鍒拌繍琛孒yper-V鐨勭洰鏍囨満
閫氳繃Null-modem鐢电紗杩炴帴璋冭瘯Hyper-V
閫氳繃1394鐢电紗杩炴帴璋冭瘯Hyper-V
Hyper-V璋冭瘯鐤戦毦瑙ｇ瓟
閫氳繃鍐呮牳璋冭瘯鍣ㄦ帶鍒剁敤鎴锋ā寮忚皟璇曞櫒
鍚姩璋冭瘯浼氳瘽
鍒囨崲妯″紡
浣曟椂浣跨敤璇ユ妧鏈?/a>
鍜岃繙绋嬭皟璇曠粨鍚堜娇鐢?/a>
璋冭瘯鍣ㄥ懡浠ょ獥鍙?/b>
浣跨敤璋冭瘯鍣ㄥ懡浠?/a>
琛ㄨ揪寮忔眰鍊?/a>
浣跨敤澶栧３鍛戒护
浣跨敤鍒悕
浣跨敤鑴氭湰鏂囦欢
浣跨敤璋冭瘯鍣ㄥ懡浠ょ▼搴?/b>
璋冭瘯鍣ㄥ懡浠ょ▼搴忕殑缁勬垚
娴佺▼鎺у埗绗?/a>
鎵ц璋冭瘯鍣ㄥ懡浠ょ▼搴?/a>
璋冭瘯鍣ㄥ懡浠ょ▼搴忕ず渚?/a>
WinDbg Graphical Interface
Using Debugging Information Windows
Opening a Window
Closing a Window
Configuring a Window
Moving Through a Window
Cutting and Pasting Text
Changing Text Properties
Positioning the Windows
Debugging with Floating and Docked Windows
Docking a Window
Tabbing a Window
Undocking a Window
Creating a New Dock
Resizing and Moving a Window
Arranging Windows
Using Workspaces
Creating and Opening a Workspace
Workspace Contents
Using and Customizing WinDbg Themes
Loading a Theme
Customizing a Theme
Using Themes Provided in Debugging Tools for Windows
Using the Toolbar and Status Bar
Using the Help Documentation
閰嶇疆璋冭瘯鍣?/b>
浣跨敤鏃ュ織鏂囦欢
鎸囧畾妯″潡鍜屽嚱鏁版墍鏈夎€?/a>
鎺у埗寮傚父鍜屼簨浠?/a>
璁剧疆璺緞鍜屽姞杞芥枃浠?/b>
鍙墽琛屾槧鍍忚矾寰?/a>
绗﹀彿璺緞
浣跨敤绗﹀彿鏈嶅姟鍣?/a>
婧愮爜璺緞
浣跨敤婧愮爜鏈嶅姟鍣?/a>
璋冭瘯鍣ㄦ搷浣?甯歌)
鎺у埗鐩爣
浣跨敤鏂偣
璇诲彇鍜屽啓鍏ュ唴瀛?/a>
璇诲啓瀵勫瓨鍣ㄥ拰鏍囧織
鏌ョ湅璋冪敤鍫嗘爤
姹囩紪妯″紡璋冭瘯
婧愮爜妯″紡璋冭瘯
璋冭瘯BIOS浠ｇ爜
璋冭瘯澶氫釜鐩爣
缁撴潫璋冭瘯浼氳瘽
璋冭瘯鍣ㄦ搷浣?鐢ㄦ埛妯″紡)
琚垱寤虹殑杩涚▼琛屼负
鎺у埗杩涚▼鍜岀嚎绋?/a>
閲嶆柊闄勫姞鍒扮洰鏍囪繘绋?/a>
璋冭瘯鎵樼浠ｇ爜
璋冭瘯鍣ㄦ搷浣?鍐呮牳妯″紡)
宕╂簝鍜岄噸璧风洰鏍囨満
鍜岀洰鏍囨満鍚屾
鏀瑰彉涓婁笅鏂?/a>
鏄犲皠椹卞姩鏂囦欢
鏈湴鍐呮牳璋冭瘯
璋冭瘯鍣ㄦ墿灞?/b>
鍔犺浇璋冭瘯鍣ㄦ墿灞旸LL
浣跨敤璋冭瘯鍣ㄦ墿灞曞懡浠?/a>
缂栧啓鏂扮殑璋冭瘯鍣ㄦ墿灞?/a>
杩滅▼璋冭瘯
閫夋嫨鏈€濂界殑杩滅▼璋冭瘯鏂规硶
閫氳繃璋冭瘯鍣ㄧ殑杩滅▼璋冭瘯
婵€娲昏皟璇曟湇鍔″櫒
鎼滅储璋冭瘯鏈嶅姟鍣?/a>
婵€娲昏皟璇曞鎴风
瀹㈡埛绔拰鏈嶅姟鍣ㄧず渚?/a>
鎺у埗杩滅▼璋冭瘯浼氳瘽
閫氳繃Remote.exe鐨勮繙绋嬭皟璇?/b>
Remote.exe 瀹炵敤绋嬪簭
寮€濮婻emote.exe浼氳瘽
Remote.exe鎵瑰鐞嗘枃浠?/a>
鍏朵粬杩滅▼璋冭瘯鏂规硶
杩涚▼鏈嶅姟鍣?鐢ㄦ埛妯″紡)
婵€娲昏繘绋嬫湇鍔″櫒
鎼滅储杩涚▼鏈嶅姟鍣?/a>
婵€娲荤伒宸у鎴风
杩涚▼鏈嶅姟鍣ㄧず渚?/a>
鎺у埗杩涚▼鏈嶅姟鍣ㄤ細璇?/a>
KD杩炴帴鏈嶅姟鍣?鍐呮牳妯″紡)
婵€娲籏D杩炴帴鏈嶅姟鍣?/a>
鎼滅储KD杩炴帴鏈嶅姟鍣?/a>
婵€娲荤伒宸у鎴风(鍐呮牳妯″紡)
KD 杩炴帴鏈嶅姟鍣ㄧず渚?/a>
鎺у埗KD杩炴帴鏈嶅姟鍣ㄤ細璇?/a>
杞彂鍣?/b>
婵€娲昏浆鍙戝櫒
浣跨敤杞彂鍣?/a>
杞彂鍣ㄧず渚?/a>
楂樼骇杩滅▼璋冭瘯
璋冭瘯澶氬彴璁＄畻鏈轰笂鐨勭洰鏍?/a>
灞呬腑鐨勭鍙?/a>
鍙岄槻鐏
绗﹀彿
绗﹀彿鏂囦欢锛氭杩?/b>
绗﹀彿鍜岀鍙锋枃浠?/a>
鍏湁鍜岀鏈夌鍙?/a>
璋冭瘯涓殑绗﹀彿璁块棶
瀹夎Windows绗﹀彿鏂囦欢
绗﹀彿鏈嶅姟鍣ㄥ拰绗﹀彿瀛樺偍
SymStore
SymSrv
寰蒋鍏叡绗﹀彿
SymSrv楂樼骇浣跨敤
闃茬伀澧欏拰浠ｇ悊鏈嶅姟鍣?/a>
HTTP绗﹀彿瀛樺偍
SymProxy
瀹夎SymProxy
閰嶇疆娉ㄥ唽琛?/a>
閫夋嫨缃戠粶瀹夊叏璁よ瘉鏂瑰紡
閰嶇疆IIS鏉ヤ娇鐢⊿ymProxy
璁剧疆鎺掗櫎鍒楄〃
澶勭悊涓嶅彲鐢ㄧ殑绗﹀彿瀛樺偍
妫€鏌ュ拰鍗囩骇鐘舵€?/a>
澶勭悊鏂囦欢鎸囬拡
缂撳瓨琚姹傜殑绗﹀彿鏂囦欢
鍏朵粬绗﹀彿瀛樺偍
鍏朵粬绗﹀彿鏈嶅姟鍣?/a>
寤惰繜绗﹀彿鍔犺浇
璋冭瘯鍣ㄥ浣曡瘑鍒鍙?/b>
绗﹀彿璇硶鍜岀鍙峰尮閰?/a>
绗﹀彿閫夐」
绗﹀彿鐘舵€佺缉鍐?/a>
璋冭瘯鏃剁殑绗﹀彿闂
楠岃瘉绗﹀彿
鍖归厤绗﹀彿鍚?/a>
浣跨敤椤甸潰鎹㈠嚭鐨勬枃浠跺ご璇诲彇绗﹀彿
PEB琚〉鎹㈠嚭鏃剁殑绗﹀彿鏄犲皠
涓嶄娇鐢ㄧ鍙疯皟璇曠敤鎴锋ā寮忚繘绋?/a>
璋冭瘯浼樺寲鍚庣殑浠ｇ爜
宕╂簝杞偍鏂囦欢
鍐呮牳妯″紡Dump鏂囦欢
鍚勭涓嶅悓鐨勫唴鏍告ā寮廌ump鏂囦欢
瀹屾暣鍐呭瓨Dump
鍐呮牳Dump
灏忓唴瀛樿浆鍌?/a>
鍒涘缓鍐呮牳妯″紡Dump鏂囦欢
鍚敤鍐呮牳妯″紡Dump鏂囦欢
寮哄埗绯荤粺宕╂簝
浠庤皟璇曞櫒寮哄埗绯荤粺宕╂簝
浠庨敭鐩樺己鍒剁郴缁熷穿婧?/a>
涓嶉€犳垚绯荤粺宕╂簝鐨勬儏鍐典笅鍒涘缓Dump鏂囦欢
楠岃瘉鍐呮牳妯″紡Dump鏂囦欢鐨勫垱寤?/a>
鍒嗘瀽鍐呮牳妯″紡Dump鏂囦欢
浣跨敤KD鍒嗘瀽鍐呮牳妯″紡Dump鏂囦欢
浣跨敤WinDbg鍒嗘瀽鍐呮牳妯″紡Dump鏂囦欢
浣跨敤KAnalyze鍒嗘瀽鍐呮牳妯″紡Dump鏂囦欢
鐢ㄦ埛妯″紡Dump鏂囦欢
鐢ㄦ埛妯″紡Dump鏂囦欢绉嶇被
瀹屾暣鐢ㄦ埛妯″紡Dump
Minidumps
鍒涘缓鐢ㄦ埛妯″紡Dump鏂囦欢
閫夋嫨鏈€濂界殑宸ュ叿
CDB鍜學inDbg
UserDump
鍒嗘瀽鐢ㄦ埛妯″紡Dump鏂囦欢
浣跨敤CDB鍒嗘瀽鐢ㄦ埛妯″紡Dump鏂囦欢
浣跨敤WinDbg鍒嗘瀽鐢ㄦ埛妯″紡Dump鏂囦欢
瀹夊叏鎬?/b>
瀹夊叏寮辩偣
鍐呮牳妯″紡璋冭瘯鏃剁殑瀹夊叏
鐢ㄦ埛妯″紡璋冭瘯鏃剁殑瀹夊叏
鍗虫椂璋冭瘯鐨勫畨鍏?/a>
杩滅▼璋冭瘯鏃剁殑瀹夊叏
瀹夊叏妯″紡
瀹夊叏妯″紡鐨勫姛鑳?/a>
婵€娲诲畨鍏ㄦā寮?/a>
璋冭瘯鍣ㄥ弬鑰?/b>
鍛戒护琛岄€夐」
CDB鍛戒护琛岄€夐」
KD鍛戒护琛岄€夐」
WinDbg鍛戒护琛岄€夐」
DbgSrv鍛戒护琛岄€夐」
KdSrv鍛戒护琛岄€夐」
DbEngPrx鍛戒护琛岄€夐」
KDbgCtrl鍛戒护琛岄€夐」
DbgRpc鍛戒护琛岄€夐」
SymStore鍛戒护琛岄€夐」
鐜鍙橀噺
甯歌鐜鍙橀噺
鍐呮牳妯″紡鐜鍙橀噺
璋冭瘯鍣ㄥ懡浠?/b>
璇硶瑙勫垯
鏁板€艰〃杈惧紡璇硶
MASM 鏁板€煎拰杩愮畻绗?/a>
C++鏁板€煎拰杩愮畻绗?/a>
MASM琛ㄨ揪寮弙s. C++琛ㄨ揪寮?/a>
琛ㄨ揪寮忕ず渚?/a>
绗﹀彿鎵╁睍
瀛楃涓查€氶厤绗﹁娉?/a>
瀵勫瓨鍣ㄨ娉?/a>
浼瘎瀛樺櫒璇硶
婧愮爜琛岃娉?/a>
鍦板潃鍜屽湴鍧€鑼冨洿璇硶
绾跨▼璇硶
杩涚▼璇硶
绯荤粺璇硶
澶氬鐞嗗櫒璇硶
鍛戒护鍏抽敭瀛?/b>
; (鍛戒护鍒嗛殧绗?
{ } (鍧楀垎闅旂)
${ } (鍒悕瑙ｉ噴鍣?
$$ (娉ㄩ噴璇存槑绗?
* (娉ㄩ噴琛岃鏄庣)
.block
.break
.catch
.continue
.do
.else
.elsif
.for
.foreach
.if
.leave
.printf
.while
鍛戒护
ENTER (Repeat Last Command)
? (Command Help)
? (Evaluate Expression)
?? (Evaluate C++ Expression)
# (Search for Disassembly Pattern)
|| (System Status)
||s (Set Current System)
| (Process Status)
|s (Set Current Process)
~ (Thread Status)
~e (Thread-Specific Command)
~f (Freeze Thread)
~u (Unfreeze Thread)
~n (Suspend Thread)
~m (Resume Thread)
~s (Set Current Thread)
~s (Change Current Processor)
a (Assemble)
ad (Delete Alias)
ah (Assertion Handling)
al (List Aliases)
as, aS (Set Alias)
ba (Break on Access)
bc (Breakpoint Clear)
bd (Breakpoint Disable)
be (Breakpoint Enable)
bl (Breakpoint List)
bp, bu, bm (Set Breakpoint)
br (Breakpoint Renumber)
bs (Update Breakpoint Command)
bsc (Update Conditional Breakpoint)
c (Compare Memory)
d, da, db, dc, dd, dD, df, dp, dq, du, dw, dW, dyb, dyd (Display Memory)
dda, ddp, ddu, dpa, dpp, dpu, dqa, dqp, dqu (Display Referenced Memory)
dds, dps, dqs (Display Words and Symbols)
dg (Display Selector)
dl (Display Linked List)
ds, dS (Display String)
dt (Display Type)
dv (Display Local Variables)
e, ea, eb, ed, eD, ef, ep, eq, eu, ew, eza, ezu (Enter Values)
f, fp (Fill Memory)
g (Go)
gc (Go from Conditional Breakpoint)
gh (Go with Exception Handled)
gn, gN (Go with Exception Not Handled)
gu (Go Up)
ib, iw, id (Input from Port)
j (Execute If - Else)
k, kb, kd, kp, kP, kv (Display Stack Backtrace)
l+, l- (Set Source Options)
ld (Load Symbols)
lm (List Loaded Modules)
ln (List Nearest Symbols)
ls, lsa (List Source Lines)
lsc (List Current Source)
lse (Launch Source Editor)
lsf, lsf- (Load or Unload Source File)
lsp (Set Number of Source Lines)
m (Move Memory)
n (Set Number Base)
ob, ow, od (Output to Port)
p (Step)
pa (Step to Address)
pc (Step to Next Call)
pct (Step to Next Call or Return)
ph (Step to Next Branching Instruction)
pt (Step to Next Return)
q, qq (Quit)
qd (Quit and Detach)
r (Registers)
rdmsr (Read MSR)
rm (Register Mask)
s (Search Memory)
so (Set Kernel Debugging Options)
sq (Set Quiet Mode)
ss (Set Symbol Suffix)
sx, sxd, sxe, sxi, sxn, sxr, sx- (Set Exceptions)
t (Trace)
ta (Trace to Address)
tb (Trace to Next Branch)
tc (Trace to Next Call)
tct (Trace to Next Call or Return)
th (Trace to Next Branching Instruction)
tt (Trace to Next Return)
u (Unassemble)
uf (Unassemble Function)
up (Unassemble from Physical Memory)
ur (Unassemble Real Mode BIOS)
ux (Unassemble x86 BIOS)
vercommand (Show Debugger Command Line)
version (Show Debugger Version)
vertarget (Show Target Computer Version)
wrmsr (Write MSR)
wt (Trace and Watch Data)
x (Examine Symbols)
z (Execute While)
鍏冨懡浠?/b>
.abandon (Abandon Process)
.allow_exec_cmds (Allow Execution Commands)
.allow_image_mapping (Allow Image Mapping)
.apply_dbp (Apply Data Breakpoint to Context)
.asm (Change Disassembly Options)
.attach (Attach to Process)
.beep (Speaker Beep)
.bpcmds (Display Breakpoint Commands)
.bpsync (Synchronize Threads at Breakpoint)
.breakin (Break to the Kernel Debugger)
.bugcheck (Display Bug Check Data)
.cache (Set Cache Size)
.call (Call Function)
.chain (List Debugger Extensions)
.childdbg (Debug Child Processes)
.clients (List Debugging Clients)
.closehandle (Close Handle)
.cls (Clear Screen)
.context (Set User-Mode Address Context)
.copysym (Copy Symbol Files)
.cordll (Control CLR Debugging)
.crash (Force System Crash)
.create (Create Process)
.createdir (Set Created Process Directory)
.cxr (Display Context Record)
.dbgdbg (Debug Current Debugger)
.detach (Detach from Process)
.dump (Create Dump File)
.dumpcab (Create Dump File CAB)
.dvalloc (Allocate Memory)
.dvfree (Free Memory)
.echo (Echo Comment)
.echocpunum (Show CPU Number)
.echotime (Show Current Time)
.echotimestamps (Show Time Stamps)
.ecxr (Display Exception Context Record)
.effmach (Effective Machine)
.enable_long_status (Enable Long Integer Display)
.enable_unicode (Enable Unicode Display)
.endpsrv (End Process Server)
.endsrv (End Debugging Server)
.enumtag (Enumerate Secondary Callback Data)
.event_code (Display Event Code)
.eventlog (Display Recent Events)
.exepath (Set Executable Path)
.expr (Choose Expression Evaluator)
.exptr (Display Exception Pointers)
.exr (Display Exception Record)
.extmatch (Display All Matching Extensions)
.extpath (Set Extension Path)
.f+, .f- (Shift Local Context)
.fiber (Set Fiber Context)
.fiximports (Fix Target Module Imports)
.flash_on_break (Flash on Break)
.fnent (Display Function Data)
.fnret (Display Function Return Value)
.force_radix_output (Use Radix for Integers)
.force_tb (Forcibly Allow Branch Tracing)
.formats (Show Number Formats)
.fpo (Control FPO Overrides)
.frame (Set Local Context)
.help (Meta-Command Help)
.hh (Open HTML Help File)
.holdmem (Hold and Compare Memory)
.idle_cmd (Set Idle Command)
.ignore_missing_pages (Suppress Missing Page Errors)
.imgscan (Find Image Headers)
.kdfiles (Set Driver Replacement Map)
.kframes (Set Stack Length)
.kill (Kill Process)
.lastevent (Display Last Event)
.lines (Toggle Source Line Support)
.load, .loadby (Load Extension DLL)
.locale (Set Locale)
.logappend (Append Log File)
.logclose (Close Log File)
.logfile (Display Log File Status)
.logopen (Open Log File)
.netuse (Control Network Connections)
.noshell (Prohibit Shell Commands)
.noversion (Disable Version Checking)
.ocommand (Expect Commands from Target)
.ofilter (Filter Target Output)
.open (Open Source File)
.opendump (Open Dump File)
.outmask (Control Output Mask)
.pagein (Page In Memory)
.pcmd (Set Prompt Command)
.pop (Restore Debugger State)
.process (Set Process Context)
.prompt_allow (Control Prompt Display)
.push (Save Debugger State)
.quit_lock (Prevent Accidental Quit)
.readmem (Read Memory from File)
.reboot (Reboot Target Computer)
.record_branches (Enable Branch Recording)
.reload (Reload Module)
.remote (Create Remote.exe Server)
.remote_exit (Exit Debugging Client)
.restart (Restart Target Application)
.restart (Restart Kernel Connection)
.scroll_prefs (Control Source Scrolling Preferences)
.secure (Activate Secure Mode)
.send_file (Send File)
.server (Create Debugging Server)
.servers (List Debugging Servers)
.setdll (Set Default Extension DLL)
.shell (Command Shell)
.sleep (Pause Debugger)
.sound_notify (Use Notification Sound)
.srcfix, .lsrcfix (Use Source Server)
.srcnoisy (Noisy Source Loading)
.srcpath, .lsrcpath (Set Source Path)
.step_filter (Set Step Filter)
.suspend_ui (Suspend WinDbg Interface)
.symfix (Set Symbol Store Path)
.symopt (Set Symbol Options)
.sympath (Set Symbol Path)
.thread (Set Register Context)
.time (Display System Time)
.tlist (List Process IDs)
.trap (Display Trap Frame)
.tss (Display Task State Segment)
.ttime (Display Thread Times)
.typeopt (Set Type Options)
.unload (Unload Extension DLL)
.unloadall (Unload All Extension DLLs)
.wake (Wake Debugger)
.write_cmd_hist (Write Command History)
.writemem (Write Memory to File)
.wtitle (Set Window Title)
鎺у埗閿?/b>
CTRL+A (Toggle Baud Rate)
CTRL+B (Quit Local Debugger)
CTRL+C (Break)
CTRL+D (Toggle Debug Info)
CTRL+F (Break to KD)
CTRL+K (Change Post-Reboot Break State)
CTRL+P (Debug Current Debugger)
CTRL+R (Re-synchronize)
CTRL+V (Toggle Verbose Mode)
CTRL+W (Show Debugger Version)
璋冭瘯鍣ㄦ墿灞曞懡浠?/b>
甯歌鎵╁睍
!acl
!address
!analyze
!asd
!atom
!bitcount
!chksym
!chkimg
!cppexr
!cpuid
!cs
!cxr
!dh
!dlls
!dumpfa
!elog_str
!envvar
!error
!exchain
!exr
!findxmldata
!for_each_frame
!for_each_local
!for_each_module
!gflag
!gle
!gs
!handle
!heap
!help
!homedir
!htrace
!imggp
!imgreloc
!kuser
!list
!lmi
!mui
!net_send
!obja
!owner
!peb
!psr
!rebase
!rtlavl
!sd
!sid
!slist
!std_map
!stl
!str
!sym
!symsrv
!teb
!tls
!token
!tp
!triage
!ustr
!version
鍐呮牳妯″紡鎵╁睍
!ahcache
!alignmentfaults
!analyzebugcheck
!apc
!apicerr
!arbinst
!arbiter
!ate
!bcb
!blockeddrv
!bpid
!btb
!bth
!bugdump
!bushnd
!ca
!callback
!calldata
!can_write_kdump
!cbreg
!cchelp
!chklowmem
!cmreslist
!cpuinfo
!db, !dc, !dd, !dp, !dq, !du, !dw
!dbgprint
!dblink
!dcr
!dcs
!deadlock
!defwrites
!devext
!devhandles
!devnode
!devobj
!devstack
!dflink
!diskspace
!dma
!dpa
!dpcs
!driveinfo
!drivers
!drvobj
!dskheap
!eb, !ed
!ecb, !ecd, !ecw
!ecs
!errlog
!exca
!exqueue
!filecache
!filelock
!fileobj
!filetime
!finddata
!findfilelockowner
!for_each_process
!for_each_thread
!fpsearch
!frag
!frozen
!fwver
!gbl
!gentable
!hidppd
!ib, !id, !iw
!icpleak
!idt
!ih
!ihs
!ioresdes
!ioreslist
!iovirp
!ipi
!irp
!irpfind
!irpzone
!irql
!isainfo
!isr
!ivt
!job
!kb, !kv
!loadermemorylist
!lockedpages
!locks (!kdext*.locks)
!logonsession
!lookaside
!lpc
!mca
!memlist
!memusage
!mps
!mtrr
!npx
!ob, !od, !ow
!object
!obtrace
!openmaps
!pars
!pat
!pci
!pciir
!pcitree
!pcm
!pcr
!pcrs
!pfn
!pmc
!pmssa
!pnpevent
!pocaps
!pool
!poolfind
!poolused
!poolval
!popolicy
!prcb
!process
!processfields
!psp
!pte
!pte2va
!ptov
!qlocks
!ready
!reg
!regkcb
!rellist
!running
!scm
!search
!searchpte
!sel
!session
!smt
!spoolsum
!spoolused
!sprocess
!srb
!stacks
!swd
!sysinfo
!sysptes
!thread
!threadfields
!time
!timer
!tokenfields
!trap
!tss
!tz
!tzinfo
!ubc
!ubd
!ube
!ubl
!ubp
!urb
!vad
!validatelist
!verifier
!vm
!vpb
!vpdd
!vtop
!walklist
!wdmaud
!whattime
!whatperftime
!wsle
!xpoolmap
!zombies
鐢ㄦ埛妯″紡鎵╁睍
!avrf
!critsec
!dp (!ntsdexts.dp)
!dreg
!dt
!evlog
!findstack
!gatom
!igrep
!locks (!ntsdexts.locks)
!mapped_file
!runaway
!threadtoken
!uniqstack
!vadump
!vprot
涓撶敤鎵╁睍
Logger Extensions (Logexts.dll)
!logexts.help
!logexts.logb
!logexts.logc
!logexts.logd
!logexts.loge
!logexts.logi
!logexts.logm
!logexts.logo
NDIS Extensions (Ndiskd.dll)
!ndiskd.dbglevel
!ndiskd.dbgsystems
!ndiskd.filter
!ndiskd.filters
!ndiskd.findpacket
!ndiskd.gminiports
!ndiskd.help
!ndiskd.int_ctxt
!ndiskd.mem
!ndiskd.miniport
!ndiskd.miniports
!ndiskd.mopen
!ndiskd.nb
!ndiskd.nbl
!ndiskd.nbpools
!ndiskd.ndis
!ndiskd.pkt
!ndiskd.pktpool
!ndiskd.pktpools
!ndiskd.protocol
!ndiskd.protocols
RPC Extensions (Rpcexts.dll)
!rpcexts.checkrpcsym
!rpcexts.eeinfo
!rpcexts.eerecord
!rpcexts.getcallinfo
!rpcexts.getclientcallinfo
!rpcexts.getdbgcell
!rpcexts.getendpointinfo
!rpcexts.getthreadinfo
!rpcexts.help
!rpcexts.rpcreadstack
!rpcexts.rpctime
!rpcexts.thread
ACPI Extensions (Acpikd.dll and Kdexts.dll)
!acpicache
!acpiinf
!acpiirqarb
!acpikd.help
!amli ?
!amli bc
!amli bd
!amli be
!amli bl
!amli bp
!amli cl
!amli debugger
!amli dh
!amli dl
!amli dns
!amli do
!amli ds
!amli find
!amli lc
!amli ln
!amli r
!amli set
!amli u
!facs
!fadt
!mapic
!nsobj
!nstree
!rsdt
Graphics Driver Extensions (Gdikdx.dll)
!gdikdx.verifier
Kernel Streaming Extensions (Ks.dll)
!ks.help
!ks.kshelp
!ks.pchelp
!ks.allstreams
!ks.automation
!ks.devhdr
!ks.dhdr
!ks.dump
!ks.dumpbag
!ks.dumpcircuit
!ks.dumplog
!ks.dumpqueue
!ks.enumdevobj
!ks.enumdrvobj
!ks.eval
!ks.findlive
!ks.forcedump
!ks.graph
!ks.libexts
!ks.objhdr
!ks.ohdr
!ks.pciaudio
!ks.pciks
!ks.shdr
!ks.topology
SCSI Miniport Extensions (Scsikd.dll and Minipkd.dll)
!scsikd.help
!scsikd.classext
!scsikd.scsiext
!scsikd.srbdata
!minipkd.help
!minipkd.adapter
!minipkd.adapters
!minipkd.exports
!minipkd.lun
!minipkd.portconfig
!minipkd.req
!minipkd.srb
Kernel-Mode Driver Framework Extensions (Wdfkd.dll)
!wdfkd.help
!wdfkd.wdfchildlist
!wdfkd.wdfcollection
!wdfkd.wdfcrashdump
!wdfkd.wdfdevext
!wdfkd.wdfdevice
!wdfkd.wdfdevicequeues
!wdfkd.wdfdriverinfo
!wdfkd.wdfextendwatchdog
!wdfkd.wdfgetdriver
!wdfkd.wdfhandle
!wdfkd.wdfhelp
!wdfkd.wdfiotarget
!wdfkd.wdfldr
!wdfkd.wdflogdump
!wdfkd.wdflogsave
!wdfkd.wdfmemory
!wdfkd.wdfobject
!wdfkd.wdfpoolusage
!wdfkd.wdfqueue
!wdfkd.wdfrequest
!wdfkd.wdfsettraceprefix
!wdfkd.wdfsetdriver
!wdfkd.wdfspinlock
!wdfkd.wdftagtracker
!wdfkd.wdftmffile
!wdfkd.wdftraceprtdebug
!wdfkd.wdfusbdevice
!wdfkd.wdfusbinterface
!wdfkd.wdfusbpipe
!wdfkd.wdfwmi
User-Mode Driver Framework Extensions (Wudfext.dll)
!wudfext.help
!wudfext.umdevstack
!wudfext.umdevstacks
!wudfext.umfile
!wudfext.umirp
!wudfext.umirps
!wudfext.wudfdevice
!wudfext.wudfdevicequeues
!wudfext.wudfdriverinfo
!wudfext.wudfdumpobjects
!wudfext.wudffile
!wudfext.wudffilehandletarget
!wudfext.wudfiotarget
!wudfext.wudfobject
!wudfext.wudfqueue
!wudfext.wudfrequest
!wudfext.wudfusbinterface
!wudfext.wudfusbpipe
!wudfext.wudfusbtarget
WMI Tracing Extensions (Wmitrace.dll)
!wmitrace.dynamicprint
!wmitrace.help
!wmitrace.logdump
!wmitrace.logger
!wmitrace.logsave
!wmitrace.setprefix
!wmitrace.searchpath
!wmitrace.strdump
!wmitrace.tfp
!wmitrace.tmffile
!wmitrace.traceoperation
OEM Support Extensions (kdex2x86.dll)
Debugger-Related APIs
Symbol Server API
The dbgeng.h Header File
The wdbgexts.h Header File
Debugger Error and Warning Messages
dbgerr001: PEB is Paged Out
dbgerr002: Bad Pointer
dbgerr003: Mismatched Symbols
dbgerr004: Page Not Present in Dump File
dbgerr005: Private Symbols Required
Stack Unwind Information Not Available
No Header Information Available
WinDbg Graphical Interface Features
Debugging Information Windows
Debugger Command Window
Watch Window
Locals Window
Registers Window
Memory Window
Calls Window
Disassembly Window
Scratch Pad
Processes and Threads Window
Command Browser Window
Source Window
File Menu
File | Open Source File
File | Close Current Window
File | Open Executable
File | Attach to a Process
File | Open Crash Dump
File | Connect to Remote Session
File | Connect to Remote Stub
File | Kernel Debug
File | Symbol File Path
File | Source File Path
File | Image File Path
File | Open Workspace
File | Save Workspace
File | Save Workspace As
File | Clear Workspace
File | Delete Workspaces
File | Open Workspace in File
File | Save Workspace to File
File | Map Network Drive
File | Disconnect Network Drive
File | Recent Files
File | Exit
Edit Menu
Edit | Cut
Edit | Copy
Edit | Paste
Edit | Select All
Edit | Write Window Text to File
Edit | Add to Command Output
Edit | Clear Command Output
Edit | Evaluate Selection
Edit | Display Selected Type
Edit | Find
Edit | Find Next
Edit | Go to Address
Edit | Go to Line
Edit | Go to Current Instruction
Edit | Set Current Instruction
Edit | Breakpoints
Edit | Open/Close Log File
View Menu
View | Command
View | Watch
View | Locals
View | Registers
View | Memory
View | Call Stack
View | Disassembly
View | Scratch Pad
View | Processes and Threads
View | Command Browser
View | Verbose Output
View | Show Version
View | Toolbar
View | Status Bar
View | Font
View | Options
View | Source language file extensions
View | WinDbg Command Line
Debug Menu
Debug | Go
Debug | Go Unhandled Exception
Debug | Go Handled Exception
Debug | Restart
Debug | Stop Debugging
Debug | Detach Debuggee
Debug | Break
Debug | Step Into
Debug | Step Over
Debug | Step Out
Debug | Run to Cursor
Debug | Source Mode
Debug | Resolve Unqualified Symbols
Debug | Event Filters
Debug | Modules
Debug | Kernel Connection | Cycle Baud Rate
Debug | Kernel Connection | Cycle Initial Break
Debug | Kernel Connection | Resynchronize
Window Menu
Window | Close All Source Windows
Window | Close All Error Windows
Window | Open Dock
Window | Dock All
Window | Undock All
Window | MDI Emulation
Window | Automatically Open Disassembly
List of Open Windows
Help Menu
Help | Contents
Help | Index
Help | Search
Help | About
Toolbar Buttons
Keyboard Shortcuts
Debugging Techniques
Elementary Debugging Techniques
Using the !analyze Extension
Setting a Conditional Breakpoint
Executing Until a Specified State is Reached
Converting Virtual Addresses to Physical Addresses
Tracking Down a Processor Hog
Extracting Information from a Dump File
Determining the ACL of an Object
Displaying a Critical Section
Debugging an Application Failure
Messages from the Target
Breaking Into the Debugger
Sending Output to the Debugger
Reading and Filtering Debugging Messages
Determining if a Debugger is Attached
Bug Checks (Blue Screens)
Blue Screen Data
General Troubleshooting Tips
Bug Check Code Reference
Bug Check 0x1: APC_INDEX_MISMATCH
Bug Check 0x2: DEVICE_QUEUE_NOT_BUSY
Bug Check 0x3: INVALID_AFFINITY_SET
Bug Check 0x4: INVALID_DATA_ACCESS_TRAP
Bug Check 0x5: INVALID_PROCESS_ATTACH_ATTEMPT
Bug Check 0x6: INVALID_PROCESS_DETACH_ATTEMPT
Bug Check 0x7: INVALID_SOFTWARE_INTERRUPT
Bug Check 0x8: IRQL_NOT_DISPATCH_LEVEL
Bug Check 0x9: IRQL_NOT_GREATER_OR_EQUAL
Bug Check 0xA: IRQL_NOT_LESS_OR_EQUAL
Bug Check 0xB: NO_EXCEPTION_HANDLING_SUPPORT
Bug Check 0xC: MAXIMUM_WAIT_OBJECTS_EXCEEDED
Bug Check 0xD: MUTEX_LEVEL_NUMBER_VIOLATION
Bug Check 0xE: NO_USER_MODE_CONTEXT
Bug Check 0xF: SPIN_LOCK_ALREADY_OWNED
Bug Check 0x10: SPIN_LOCK_NOT_OWNED
Bug Check 0x11: THREAD_NOT_MUTEX_OWNER
Bug Check 0x12: TRAP_CAUSE_UNKNOWN
Bug Check 0x13: EMPTY_THREAD_REAPER_LIST
Bug Check 0x14: CREATE_DELETE_LOCK_NOT_LOCKED
Bug Check 0x15: LAST_CHANCE_CALLED_FROM_KMODE
Bug Check 0x16: CID_HANDLE_CREATION
Bug Check 0x17: CID_HANDLE_DELETION
Bug Check 0x18: REFERENCE_BY_POINTER
Bug Check 0x19: BAD_POOL_HEADER
Bug Check 0x1A: MEMORY_MANAGEMENT
Bug Check 0x1B: PFN_SHARE_COUNT
Bug Check 0x1C: PFN_REFERENCE_COUNT
Bug Check 0x1D: NO_SPIN_LOCK_AVAILABLE
Bug Check 0x1E: KMODE_EXCEPTION_NOT_HANDLED
Bug Check 0x1F: SHARED_RESOURCE_CONV_ERROR
Bug Check 0x20: KERNEL_APC_PENDING_DURING_EXIT
Bug Check 0x21: QUOTA_UNDERFLOW
Bug Check 0x22: FILE_SYSTEM
Bug Check 0x23: FAT_FILE_SYSTEM
Bug Check 0x24: NTFS_FILE_SYSTEM
Bug Check 0x25: NPFS_FILE_SYSTEM
Bug Check 0x26: CDFS_FILE_SYSTEM
Bug Check 0x27: RDR_FILE_SYSTEM
Bug Check 0x28: CORRUPT_ACCESS_TOKEN
Bug Check 0x29: SECURITY_SYSTEM
Bug Check 0x2A: INCONSISTENT_IRP
Bug Check 0x2B: PANIC_STACK_SWITCH
Bug Check 0x2C: PORT_DRIVER_INTERNAL
Bug Check 0x2D: SCSI_DISK_DRIVER_INTERNAL
Bug Check 0x2E: DATA_BUS_ERROR
Bug Check 0x2F: INSTRUCTION_BUS_ERROR
Bug Check 0x30: SET_OF_INVALID_CONTEXT
Bug Check 0x31: PHASE0_INITIALIZATION_FAILED
Bug Check 0x32: PHASE1_INITIALIZATION_FAILED
Bug Check 0x33: UNEXPECTED_INITIALIZATION_CALL
Bug Check 0x34: CACHE_MANAGER
Bug Check 0x35: NO_MORE_IRP_STACK_LOCATIONS
Bug Check 0x36: DEVICE_REFERENCE_COUNT_NOT_ZERO
Bug Check 0x37: FLOPPY_INTERNAL_ERROR
Bug Check 0x38: SERIAL_DRIVER_INTERNAL
Bug Check 0x39: SYSTEM_EXIT_OWNED_MUTEX
Bug Check 0x3A: SYSTEM_UNWIND_PREVIOUS_USER
Bug Check 0x3B: SYSTEM_SERVICE_EXCEPTION
Bug Check 0x3C: INTERRUPT_UNWIND_ATTEMPTED
Bug Check 0x3D: INTERRUPT_EXCEPTION_NOT_HANDLED
Bug Check 0x3E: MULTIPROCESSOR_CONFIGURATION_NOT_SUPPORTED
Bug Check 0x3F: NO_MORE_SYSTEM_PTES
Bug Check 0x40: TARGET_MDL_TOO_SMALL
Bug Check 0x41: MUST_SUCCEED_POOL_EMPTY
Bug Check 0x42: ATDISK_DRIVER_INTERNAL
Bug Check 0x43: NO_SUCH_PARTITION
Bug Check 0x44: MULTIPLE_IRP_COMPLETE_REQUESTS
Bug Check 0x45: INSUFFICIENT_SYSTEM_MAP_REGS
Bug Check 0x46: DEREF_UNKNOWN_LOGON_SESSION
Bug Check 0x47: REF_UNKNOWN_LOGON_SESSION
Bug Check 0x48: CANCEL_STATE_IN_COMPLETED_IRP
Bug Check 0x49: PAGE_FAULT_WITH_INTERRUPTS_OFF
Bug Check 0x4A: IRQL_GT_ZERO_AT_SYSTEM_SERVICE
Bug Check 0x4B: STREAMS_INTERNAL_ERROR
Bug Check 0x4C: FATAL_UNHANDLED_HARD_ERROR
Bug Check 0x4D: NO_PAGES_AVAILABLE
Bug Check 0x4E: PFN_LIST_CORRUPT
Bug Check 0x4F: NDIS_INTERNAL_ERROR
Bug Check 0x50: PAGE_FAULT_IN_NONPAGED_AREA
Bug Check 0x51: REGISTRY_ERROR
Bug Check 0x52: MAILSLOT_FILE_SYSTEM
Bug Check 0x53: NO_BOOT_DEVICE
Bug Check 0x54: LM_SERVER_INTERNAL_ERROR
Bug Check 0x55: DATA_COHERENCY_EXCEPTION
Bug Check 0x56: INSTRUCTION_COHERENCY_EXCEPTION
Bug Check 0x57: XNS_INTERNAL_ERROR
Bug Check 0x58: FTDISK_INTERNAL_ERROR
Bug Check 0x59: PINBALL_FILE_SYSTEM
Bug Check 0x5A: CRITICAL_SERVICE_FAILED
Bug Check 0x5B: SET_ENV_VAR_FAILED
Bug Check 0x5C: HAL_INITIALIZATION_FAILED
Bug Check 0x5D: UNSUPPORTED_PROCESSOR
Bug Check 0x5E: OBJECT_INITIALIZATION_FAILED
Bug Check 0x5F: SECURITY_INITIALIZATION_FAILED
Bug Check 0x60: PROCESS_INITIALIZATION_FAILED
Bug Check 0x61: HAL1_INITIALIZATION_FAILED
Bug Check 0x62: OBJECT1_INITIALIZATION_FAILED
Bug Check 0x63: SECURITY1_INITIALIZATION_FAILED
Bug Check 0x64: SYMBOLIC_INITIALIZATION_FAILED
Bug Check 0x65: MEMORY1_INITIALIZATION_FAILED
Bug Check 0x66: CACHE_INITIALIZATION_FAILED
Bug Check 0x67: CONFIG_INITIALIZATION_FAILED
Bug Check 0x68: FILE_INITIALIZATION_FAILED
Bug Check 0x69: IO1_INITIALIZATION_FAILED
Bug Check 0x6A: LPC_INITIALIZATION_FAILED
Bug Check 0x6B: PROCESS1_INITIALIZATION_FAILED
Bug Check 0x6C: REFMON_INITIALIZATION_FAILED
Bug Check 0x6D: SESSION1_INITIALIZATION_FAILED
Bug Check 0x6E: SESSION2_INITIALIZATION_FAILED
Bug Check 0x6F: SESSION3_INITIALIZATION_FAILED
Bug Check 0x70: SESSION4_INITIALIZATION_FAILED
Bug Check 0x71: SESSION5_INITIALIZATION_FAILED
Bug Check 0x72: ASSIGN_DRIVE_LETTERS_FAILED
Bug Check 0x73: CONFIG_LIST_FAILED
Bug Check 0x74: BAD_SYSTEM_CONFIG_INFO
Bug Check 0x75: CANNOT_WRITE_CONFIGURATION
Bug Check 0x76: PROCESS_HAS_LOCKED_PAGES
Bug Check 0x77: KERNEL_STACK_INPAGE_ERROR
Bug Check 0x78: PHASE0_EXCEPTION
Bug Check 0x79: MISMATCHED_HAL
Bug Check 0x7A: KERNEL_DATA_INPAGE_ERROR
Bug Check 0x7B: INACCESSIBLE_BOOT_DEVICE
Bug Check 0x7C: BUGCODE_NDIS_DRIVER
Bug Check 0x7D: INSTALL_MORE_MEMORY
Bug Check 0x7E: SYSTEM_THREAD_EXCEPTION_NOT_HANDLED
Bug Check 0x7F: UNEXPECTED_KERNEL_MODE_TRAP
Bug Check 0x80: NMI_HARDWARE_FAILURE
Bug Check 0x81: SPIN_LOCK_INIT_FAILURE
Bug Check 0x82: DFS_FILE_SYSTEM
Bug Check 0x85: SETUP_FAILURE
Bug Check 0x8B: MBR_CHECKSUM_MISMATCH
Bug Check 0x8E: KERNEL_MODE_EXCEPTION_NOT_HANDLED
Bug Check 0x8F: PP0_INITIALIZATION_FAILED
Bug Check 0x90: PP1_INITIALIZATION_FAILED
Bug Check 0x92: UP_DRIVER_ON_MP_SYSTEM
Bug Check 0x93: INVALID_KERNEL_HANDLE
Bug Check 0x94: KERNEL_STACK_LOCKED_AT_EXIT
Bug Check 0x96: INVALID_WORK_QUEUE_ITEM
Bug Check 0x97: BOUND_IMAGE_UNSUPPORTED
Bug Check 0x98: END_OF_NT_EVALUATION_PERIOD
Bug Check 0x99: INVALID_REGION_OR_SEGMENT
Bug Check 0x9A: SYSTEM_LICENSE_VIOLATION
Bug Check 0x9B: UDFS_FILE_SYSTEM
Bug Check 0x9C: MACHINE_CHECK_EXCEPTION
Bug Check 0x9E: USER_MODE_HEALTH_MONITOR
Bug Check 0x9F: DRIVER_POWER_STATE_FAILURE
Bug Check 0xA0: INTERNAL_POWER_ERROR
Bug Check 0xA1: PCI_BUS_DRIVER_INTERNAL
Bug Check 0xA2: MEMORY_IMAGE_CORRUPT
Bug Check 0xA3: ACPI_DRIVER_INTERNAL
Bug Check 0xA4: CNSS_FILE_SYSTEM_FILTER
Bug Check 0xA5: ACPI_BIOS_ERROR
Bug Check 0xA7: BAD_EXHANDLE
Bug Check 0xAB: SESSION_HAS_VALID_POOL_ON_EXIT
Bug Check 0xAC: HAL_MEMORY_ALLOCATION
Bug Check 0xAD: VIDEO_DRIVER_DEBUG_REPORT_REQUEST
Bug Check 0xB4: VIDEO_DRIVER_INIT_FAILURE
Bug Check 0xB8: ATTEMPTED_SWITCH_FROM_DPC
Bug Check 0xB9: CHIPSET_DETECTED_ERROR
Bug Check 0xBA: SESSION_HAS_VALID_VIEWS_ON_EXIT
Bug Check 0xBB: NETWORK_BOOT_INITIALIZATION_FAILED
Bug Check 0xBC: NETWORK_BOOT_DUPLICATE_ADDRESS
Bug Check 0xBE: ATTEMPTED_WRITE_TO_READONLY_MEMORY
Bug Check 0xBF: MUTEX_ALREADY_OWNED
Bug Check 0xC1: SPECIAL_POOL_DETECTED_MEMORY_CORRUPTION
Bug Check 0xC2: BAD_POOL_CALLER
Bug Check 0xC4: DRIVER_VERIFIER_DETECTED_VIOLATION
Bug Check 0xC5: DRIVER_CORRUPTED_EXPOOL
Bug Check 0xC6: DRIVER_CAUGHT_MODIFYING_FREED_POOL
Bug Check 0xC7: TIMER_OR_DPC_INVALID
Bug Check 0xC8: IRQL_UNEXPECTED_VALUE
Bug Check 0xC9: DRIVER_VERIFIER_IOMANAGER_VIOLATION
Bug Check 0xCA: PNP_DETECTED_FATAL_ERROR
Bug Check 0xCB: DRIVER_LEFT_LOCKED_PAGES_IN_PROCESS
Bug Check 0xCC: PAGE_FAULT_IN_FREED_SPECIAL_POOL
Bug Check 0xCD: PAGE_FAULT_BEYOND_END_OF_ALLOCATION
Bug Check 0xCE: DRIVER_UNLOADED_WITHOUT_CANCELLING_PENDING_OPERATIONS
Bug Check 0xCF: TERMINAL_SERVER_DRIVER_MADE_INCORRECT_MEMORY_REFERENCE
Bug Check 0xD0: DRIVER_CORRUPTED_MMPOOL
Bug Check 0xD1: DRIVER_IRQL_NOT_LESS_OR_EQUAL
Bug Check 0xD2: BUGCODE_ID_DRIVER
Bug Check 0xD3: DRIVER_PORTION_MUST_BE_NONPAGED
Bug Check 0xD4: SYSTEM_SCAN_AT_RAISED_IRQL_CAUGHT_IMPROPER_DRIVER_UNLOAD
Bug Check 0xD5: DRIVER_PAGE_FAULT_IN_FREED_SPECIAL_POOL
Bug Check 0xD6: DRIVER_PAGE_FAULT_BEYOND_END_OF_ALLOCATION
Bug Check 0xD7: DRIVER_UNMAPPING_INVALID_VIEW
Bug Check 0xD8: DRIVER_USED_EXCESSIVE_PTES
Bug Check 0xD9: LOCKED_PAGES_TRACKER_CORRUPTION
Bug Check 0xDA: SYSTEM_PTE_MISUSE
Bug Check 0xDB: DRIVER_CORRUPTED_SYSPTES
Bug Check 0xDC: DRIVER_INVALID_STACK_ACCESS
Bug Check 0xDE: POOL_CORRUPTION_IN_FILE_AREA
Bug Check 0xDF: IMPERSONATING_WORKER_THREAD
Bug Check 0xE0: ACPI_BIOS_FATAL_ERROR
Bug Check 0xE1: WORKER_THREAD_RETURNED_AT_BAD_IRQL
Bug Check 0xE2: MANUALLY_INITIATED_CRASH
Bug Check 0xE3: RESOURCE_NOT_OWNED
Bug Check 0xE4: WORKER_INVALID
Bug Check 0xE6: DRIVER_VERIFIER_DMA_VIOLATION
Bug Check 0xE7: INVALID_FLOATING_POINT_STATE
Bug Check 0xE8: INVALID_CANCEL_OF_FILE_OPEN
Bug Check 0xE9: ACTIVE_EX_WORKER_THREAD_TERMINATION
Bug Check 0xEA: THREAD_STUCK_IN_DEVICE_DRIVER
Bug Check 0xEB: DIRTY_MAPPED_PAGES_CONGESTION
Bug Check 0xEC: SESSION_HAS_VALID_SPECIAL_POOL_ON_EXIT
Bug Check 0xED: UNMOUNTABLE_BOOT_VOLUME
Bug Check 0xEF: CRITICAL_PROCESS_DIED
Bug Check 0xF1: SCSI_VERIFIER_DETECTED_VIOLATION
Bug Check 0xF3: DISORDERLY_SHUTDOWN
Bug Check 0xF4: CRITICAL_OBJECT_TERMINATION
Bug Check 0xF5: FLTMGR_FILE_SYSTEM
Bug Check 0xF6: PCI_VERIFIER_DETECTED_VIOLATION
Bug Check 0xF7: DRIVER_OVERRAN_STACK_BUFFER
Bug Check 0xF8: RAMDISK_BOOT_INITIALIZATION_FAILED
Bug Check 0xF9: DRIVER_RETURNED_STATUS_REPARSE_FOR_VOLUME_OPEN
Bug Check 0xFA: HTTP_DRIVER_CORRUPTED
Bug Check 0xFC: ATTEMPTED_EXECUTE_OF_NOEXECUTE_MEMORY
Bug Check 0xFD: DIRTY_NOWRITE_PAGES_CONGESTION
Bug Check 0xFE: BUGCODE_USB_DRIVER
Bug Check 0xFF: RESERVE_QUEUE_OVERFLOW
Bug Check 0x100: LOADER_BLOCK_MISMATCH
Bug Check 0x101: CLOCK_WATCHDOG_TIMEOUT
Bug Check 0x103: MUP_FILE_SYSTEM
Bug Check 0x104: AGP_INVALID_ACCESS
Bug Check 0x105: AGP_GART_CORRUPTION
Bug Check 0x106: AGP_ILLEGALLY_REPROGRAMMED
Bug Check 0x108: THIRD_PARTY_FILE_SYSTEM_FAILURE
Bug Check 0x109: CRITICAL_STRUCTURE_CORRUPTION
Bug Check 0x10A: APP_TAGGING_INITIALIZATION_FAILED
Bug Check 0x10C: FSRTL_EXTRA_CREATE_PARAMETER_VIOLATION
Bug Check 0x10D: WDF_VIOLATION
Bug Check 0x10E: VIDEO_MEMORY_MANAGEMENT_INTERNAL
Bug Check 0x10F: RESOURCE_MANAGER_EXCEPTION_NOT_HANDLED
Bug Check 0x111: RECURSIVE_NMI
Bug Check 0x112: MSRPC_STATE_VIOLATION
Bug Check 0x113: VIDEO_DXGKRNL_FATAL_ERROR
Bug Check 0x114: VIDEO_SHADOW_DRIVER_FATAL_ERROR
Bug Check 0x115: AGP_INTERNAL
Bug Check 0x116: VIDEO_TDR_ERROR
Bug Check 0x117: VIDEO_TDR_TIMEOUT_DETECTED
Bug Check 0x119: VIDEO_SCHEDULER_INTERNAL_ERROR
Bug Check 0x11A: EM_INITIALIZATION_FAILURE
Bug Check 0x11B: DRIVER_RETURNED_HOLDING_CANCEL_LOCK
Bug Check 0x11C: ATTEMPTED_WRITE_TO_CM_PROTECTED_STORAGE
Bug Check 0x11D: EVENT_TRACING_FATAL_ERROR
Bug Check 0x121: DRIVER_VIOLATION
Bug Check 0x122: WHEA_INTERNAL_ERROR
Bug Check 0x124: WHEA_UNCORRECTABLE_ERROR
Bug Check 0x127: PAGE_NOT_ZERO
Bug Check 0x12B: FAULTY_HARDWARE_CORRUPTED_PAGE
Bug Check 0x12C: EXFAT_FILE_SYSTEM
Bug Check 0x1000007E: SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M
Bug Check 0x1000007F: UNEXPECTED_KERNEL_MODE_TRAP_M
Bug Check 0x1000008E: KERNEL_MODE_EXCEPTION_NOT_HANDLED_M
Bug Check 0x100000EA: THREAD_STUCK_IN_DEVICE_DRIVER_M
Bug Check 0xC0000218: STATUS_CANNOT_LOAD_REGISTRY_FILE
Bug Check 0xC000021A: STATUS_SYSTEM_PROCESS_TERMINATED
Bug Check 0xC0000221: STATUS_IMAGE_CHECKSUM_MISMATCH
Bug Check 0xDEADDEAD: MANUALLY_INITIATED_CRASH1
Processor Architecture
The x86 Processor
x86 Architecture
x86 Instructions
Annotated x86 Disassembly
The x64 Processor
x64 Architecture
x64 Instructions
Annotated x64 Disassembly
The Itanium Processor
Itanium Architecture
Itanium Instructions
Annotated Itanium Disassembly
RPC Debugging
Overview of RPC Debugging
Enabling RPC State Information
Displaying RPC State Information
Using the RPC Debugger Extensions
Using the DbgRpc Tool
Get RPC Cell Information
Get RPC Endpoint Information
Get RPC Thread Information
Get RPC Call Information
Get RPC Client Call Information
Common RPC Debugging Techniques
Analyzing a Stuck Call Problem
Tracking Contention in the Server Process
Checking for Stuck Threads
Identifying the Caller From the Server Thread
RPC State Information Internals
ACPI Debugging
The AMLI Debugger
Introduction to the AMLI Debugger
Setting Up an AML Debugging Session
Basic AML Debugging
Using AMLI Debugger Extensions
Using AMLI Debugger Commands
AML Debugging Examples
Other ACPI Debugging Extensions
NDIS Debugging
Overview of NDIS Debugging
Preparing for NDIS Debugging
Enabling NDIS Debug Tracing
Enabling NDIS Debug Tracing By Setting Registry Values
Kernel Streaming Debugging
Overview of Kernel Streaming Debugging
Analyzing a Video Stream Stall
Determining the Cause of a Video Stream Stall
Debugging a Processing Stall
Using Logging to Track Important Events
Interpreting Bug Check 0xCB
Analyzing a Capture Stall
Live Local Debugging
Graph Analysis with Unloadable Modules
Using !ks.graph
SCSI Miniport Debugging
Overview of SCSI Miniport Debugging
Extensions for Debugging SCSI Miniport Drivers
Bug Checks for SCSI Miniport Debugging
Analyzing Stalled Drivers and Time-Outs
Important Breakpoints for Analyzing Reproducible Problems
Kernel-Mode Driver Framework Debugging
User-Mode Driver Framework Debugging
Plug and Play Debugging
Extensions for Debugging Plug and Play Drivers
Determining the Status of a Device
Device Node Status Flags
Device Manager Problem Codes
Checking for Resource Conflicts
Advanced Debugging Techniques
Finding a Memory Leak
Determining Whether a Leak Exists
Finding a Kernel-Mode Memory Leak
Using PoolMon to Find a Kernel-Mode Memory Leak
Using the Kernel Debugger to Find a Kernel-Mode Memory Leak
Using Driver Verifier to Find a Kernel-Mode Memory Leak
Finding a User-Mode Memory Leak
Using Performance Monitor to Find a User-Mode Memory Leak
Using UMDH to Find a User-Mode Memory Leak
Debugging a Stalled System
Finding the Failed Process
Debugging an Interrupt Storm
Debugging a Time Out
Resource Time Outs
Critical Section Time Outs
Debugging a Service Application
Choosing the Best Method
Preparing to Debug the Service Application
Debugging the Service Application Automatically
Debugging the Service Application Manually
Getting a Stack Trace
Anatomy of a Stack Trace
Manually Walking a Stack
Debugging a Stack Overflow
Debugging a Failed Driver Unload
Debugging a Deadlock
Reading Bug Check Callback Data
Debugging an Itanium Firmware Failure
Debugging a Dual-Boot Machine
Debugging Windows Setup and the OS Loader
Debugging CSRSS with NTSD
Debugging WinLogon with NTSD
Debugging a User-Mode Failure with KD
Extra Tools
ADPlus
Introduction to ADPlus
ADPlus Overview
When ADPlus Can Be Used
ADPlus Limitations and Restrictions
ADPlus Modes of Operation
Hang Mode
Crash Mode
Running ADPlus
Running ADPlus for the First Time
ADPlus Command Line
ADPlus Configuration Files
ADPlus Configuration File Sections
Settings
PreCommands
PostCommands
Exceptions
Breakpoints
HangActions
LinkConfig
Using ADPlus Configuration Files
Using the j Command in Configuration Files
ADPlus Configuration File Samples
Sample Configuration File for Breakpoints
Sample Configuration File for Conditional Breakpoints
Sample Configuration File for Custom Exceptions
Sample Configuration File for Conditional CLR Exceptions
Windows Server Configuration
Windows 2000 Server Configuration
Common ADPlus Scenarios
Process Hangs or Consumes 100 Percent of CPU
Process Ends Unexpectedly
MTS or COM+ Server Application Ends Unexpectedly
Running in Crash Mode Remotely
Monitoring ADPlus in Crash Mode
ADPlus Command-Line Options
Application Verifier
Dr. Watson
Using Dr. Watson to Create a Dump File
Installing Dr. Watson as the Postmortem Debugger
Reading a Dr. Watson Log File
Dr. Watson Command-Line Options
DumpChk
Using DumpChk
DumpChk Command-Line Options
GFlags
GFlags Overview
GFlags Details
GFlags Commands
GFlags Flag Table
GFlags and PageHeap
Global Flags Dialog Box
Opening the Dialog Box
Setting and Clearing System-wide Flags
Setting and Clearing Kernel Flags
Setting and Clearing Image File Flags
Launching a Program with Flags
Running a Program in a Debugger
Configuring Special Pool
Requesting Special Pool by Pool Tag
Requesting Special Pool by Allocation Size
Canceling Requests for Special Pool
Detecting Overruns and Underruns
Configuring Object Reference Tracing
GFlags Examples
Example 1: Displaying Global Flags
Example 2: Setting a Flag by Using a Flag Abbreviation
Example 3: Setting a Flag by Using Its Hexadecimal Value
Example 4: Setting Multiple Flags
Example 5: Clearing a Flag
Example 6: Clearing All Flags
Example 7: Clearing All Flags for an Image File
Example 8: Enlarging the User-Mode Stack Trace Database
Example 9: Detecting a Pool Memory Leak
Example 10: Detecting a Heap Memory Leak in a Process
Example 11: Enabling Page Heap Verification
Example 12: Using Page Heap Verification to Find a Bug
Example 13: Listing Image Files with Global Flags
Example 14: Configuring Special Pool
Example 15: Using Object Reference Tracing
Global Flag Reference
Buffer DbgPrint Output
Create kernel mode stack trace database
Create user mode stack trace database
Debug initial command
Debug WinLogon
Disable heap coalesce on free
Disable paging of kernel stacks
Disable protected DLL verification
Disable stack extension
Early critical section event creation
Enable application verifier
Enable bad handles detection
Enable close exception
Enable debugging of Win32 subsystem
Enable exception logging
Enable heap free checking
Enable heap parameter checking
Enable heap tagging
Enable heap tagging by DLL
Enable heap tail checking
Enable heap validation on call
Enable loading of kernel debugger symbols
Enable object handle type tagging
Enable page heap
Enable pool tagging
Enable system critical breaks
Load DLLs top-down
Load image using large pages if possible
Maintain a list of objects for each type
Object Reference Tracing
Show loader snaps
Special Pool
Stop on exception
Stop on hung GUI
Kill Tool
Kill Tool Commands
Kill Tool Examples
Logger and LogViewer
Logger
Using the Debugger and Logexts.dll
Using Logger.exe
Choosing the Best Logger Vehicle
Logger Restrictions and Limitations
LogViewer
Reading the LogViewer Display
Filtering the LogViewer Function List
Exporting LogViewer Files to Text
The Logger Manifest
Overview of the Logging Manifest
Manifest File Placement
Manifest File Format
Remote Tool
Remote Tool Concepts
Remote Tool Commands
Remote Server Syntax
Remote Client Syntax
Remote Server Query Command
Remote Session Commands
Remote Tool Examples
TList
TList Commands
TList Examples
UMDH
Preparing to Use UMDH
UMDH Commands
Analyze a Running Process
Analyze UMDH Logs
Interpreting a UMDH Log
Interpreting a Log Comparison
USBView
Tools Related to Symbol Files and Source Files
AgeStore
Using AgeStore
AgeStore Command-Line Options
DBH
Using DBH
Additional DBH Examples
DBH Command-Line Options
DBH Commands
PDBCopy
Using PDBCopy
Choosing Which Public Symbols to Remove
PDBCopy Command-Line Options
SrcSrv
Using SrcSrv
Source Indexing
Source Control Systems
Using Visual SourceSafe
Debugging with Visual SourceSafe
Using CVS
Using Other Source Control Systems
Creating Your Own Provider Module
Creating Your Own Source Control System
Language Specification 1
Language Specification 2
HTTP Sites and UNC Shares
Setting Up the Web Site
Extracting Source Files
Modifying the Source Indexing Streams in a .pdb File
Using UNC Shares
Using HTTP Sites and UNC Shares in Conjuction with Regular Version Control
SymChk
Using SymChk
SymChk Command-Line Options
Debugger Engine and Extension APIs
Introduction
Debugger Engine Overview
Debugging Session and Execution Model
Client Objects
Input and Output
杩滅▼璋冭瘯
Targets
Events
Breakpoints
绗﹀彿
Memory
Threads and Processes
Using the Debugger Engine API
Debugger Engine API Overview
Interacting with the Engine
Using Client Objects
Using Callback Objects
Using Input and Output
Monitoring Events
Event Filters
Event Information
浣跨敤鏂偣
Setting Breakpoints
Controlling Breakpoint Flags and Parameters
Memory Access
Virtual and Physical Memory
Registers
Other Data Spaces
Examining the Stack Trace
Controlling Threads and Processes
Using Symbols
Modules
Types
Scopes and Symbol Groups
Using Source Files
Connecting to Targets
Live User-Mode Targets
Live Kernel-Mode Targets
Dump-File Targets
Remote Targets
Target Information
Target State
Calling Extensions and Extension Functions
Assembling and Disassembling Instructions
Debugger Engine Reference
Client Functions
DebugConnect
DebugCreate
Client COM Interfaces
IDebugAdvanced
GetThreadContext
SetThreadContext
Request
DEBUG_REQUEST_SOURCE_PATH_HAS_SOURCE_SERVER
DEBUG_REQUEST_TARGET_EXCEPTION_CONTEXT
DEBUG_REQUEST_TARGET_EXCEPTION_THREAD
DEBUG_REQUEST_TARGET_EXCEPTION_RECORD
DEBUG_REQUEST_GET_ADDITIONAL_CREATE_OPTIONS
DEBUG_REQUEST_SET_ADDITIONAL_CREATE_OPTIONS
DEBUG_REQUEST_GET_WIN32_MAJOR_MINOR_VERSIONS
DEBUG_REQUEST_READ_USER_MINIDUMP_STREAM
DEBUG_REQUEST_TARGET_CAN_DETACH
DEBUG_REQUEST_SET_LOCAL_IMPLICIT_COMMAND_LINE
DEBUG_REQUEST_GET_CAPTURED_EVENT_CODE_OFFSET
DEBUG_REQUEST_READ_CAPTURED_EVENT_CODE_STREAM
DEBUG_REQUEST_EXT_TYPED_DATA_ANSI
EXT_TDOP_COPY
EXT_TDOP_RELEASE
EXT_TDOP_SET_FROM_EXPR
EXT_TDOP_SET_FROM_U64_EXPR
EXT_TDOP_GET_FIELD
EXT_TDOP_EVALUATE
EXT_TDOP_GET_TYPE_NAME
EXT_TDOP_OUTPUT_TYPE_NAME
EXT_TDOP_OUTPUT_SIMPLE_VALUE
EXT_TDOP_OUTPUT_FULL_VALUE
EXT_TDOP_HAS_FIELD
EXT_TDOP_GET_FIELD_OFFSET
EXT_TDOP_GET_ARRAY_ELEMENT
EXT_TDOP_GET_DEREFERENCE
EXT_TDOP_GET_TYPE_SIZE
EXT_TDOP_OUTPUT_TYPE_DEFINITION
EXT_TDOP_GET_POINTER_TO
EXT_TDOP_SET_FROM_TYPE_ID_AND_U64
EXT_TDOP_SET_PTR_FROM_TYPE_ID_AND_U64
GetSourceFileInformation
FindSourceFileAndToken
GetSymbolInformation
GetSystemObjectInformation
IDebugClient
DispatchCallbacks
ExitDispatch
FlushCallbacks
GetEventCallbacks
SetEventCallbacks
GetNumberEventCallbacks
GetInputCallbacks
SetInputCallbacks
GetNumberInputCallbacks
GetOutputCallbacks
SetOutputCallbacks
GetNumberOutputCallbacks
CreateClient
AddDumpInformationFile
AddDumpInformationFileWide
GetDumpFile
GetNumberDumpFiles
OpenDumpFile
OpenDumpFileWide
WriteDumpFile
WriteDumpFile2
WriteDumpFileWide
GetExitCode
GetIdentity
OutputIdentity
AttachKernel
GetKernelConnectionOptions
SetKernelConnectionOptions
IsKernelDebuggerEnabled
GetOutputMask
SetOutputMask
GetOtherOutputMask
SetOtherOutputMask
AttachProcess
CreateProcess
CreateProcess2
CreateProcessAndAttach
CreateProcessAndAttach2
DetachProcesses
TerminateProcesses
AbandonCurrentProcess
DetachCurrentProcess
TerminateCurrentProcess
AddProcessOptions
GetProcessOptions
RemoveProcessOptions
SetProcessOptions
GetRunningProcessDescription
GetRunningProcessSystemIds
GetRunningProcessSystemIdByExecutableName
ConnectProcessServer
DisconnectProcessServer
EndProcessServer
StartProcessServer
WaitForProcessServerEnd
OutputServers
StartServer
ConnectSession
EndSession
IDebugControl
Assemble
AddAssemblyOptions
GetAssemblyOptions
RemoveAssemblyOptions
SetAssemblyOptions
Disassemble
Evaluate
Execute
ExecuteCommandFile
AddBreakpoint
RemoveBreakpoint
GetBreakpointById
GetBreakpointByIndex
GetNumberBreakpoints
GetBreakpointParameters
ReadBugCheckData
GetCodeLevel
SetCodeLevel
GetDebuggeeType
GetDisassembleEffectiveOffset
OutputDisassembly
OutputDisassemblyLines
GetDumpFormatFlags
AddEngineOptions
GetEngineOptions
RemoveEngineOptions
SetEngineOptions
GetSystemErrorControl
SetSystemErrorControl
GetNotifyEventHandle
SetNotifyEventHandle
GetNumberEvents
GetCurrentEventIndex
SetNextEventIndex
GetEventIndexDescription
GetExpressionSyntax
SetExpressionSyntax
GetExpressionSyntaxNames
SetExpressionSyntaxByName
GetNumberExpressionSyntaxes
AddExtension
RemoveExtension
CallExtension
GetExtensionByPath
GetExtensionFunction
GetWindbgExtensionApis64
WaitForEvent
GetEventFilterCommand
SetEventFilterCommand
GetNumberEventFilters
GetEventFilterText
GetLastEventInformation
GetStoredEventInformation
GetExceptionFilterParameters
SetExceptionFilterParameters
GetExceptionFilterSecondCommand
SetExceptionFilterSecondCommand
GetSpecificFilterArgument
SetSpecificFilterArgument
GetSpecificFilterParameters
SetSpecificFilterParameters
Input
ReturnInput
GetNearInstruction
GetInterrupt
SetInterrupt
GetInterruptTimeout
SetInterruptTimeout
CloseLogFile
GetLogFile
GetLogFile2
OpenLogFile
OpenLogFile2
GetLogMask
SetLogMask
GetReturnOffset
Output
ControlledOutput
OutputVaList
ControlledOutputVaList
GetPageSize
IsPointer64Bit
GetActualProcessorType
GetEffectiveProcessorType
SetEffectiveProcessorType
GetExecutingProcessorType
GetNumberProcessors
GetPossibleExecutingProcessorTypes
GetNumberPossibleExecutingProcessorTypes
GetSupportedProcessorTypes
GetNumberSupportedProcessorTypes
GetProcessorTypeNames
OutputPrompt
OutputPromptVaList
GetPromptText
GetRadix
SetRadix
GetStackTrace
OutputStackTrace
GetContextStackTrace
OutputContextStackTrace
OutputCurrentState
GetExecutionStatus
SetExecutionStatus
GetSystemVersion
GetSystemVersionString
GetSystemVersionValues
GetTextMacro
SetTextMacro
GetTextReplacement
SetTextReplacement
OutputTextReplacements
RemoveTextReplacements
GetNumberTextReplacements
GetCurrentTimeDate
GetCurrentSystemUpTime
CoerceValue
CoerceValues
OutputVersionInformation
IDebugDataSpaces
ReadBusData
WriteBusData
ReadControl
WriteControl
ReadDebuggerData
ReadHandleData
ReadImageNtHeaders
ReadIo
WriteIo
CheckLowMemory
ReadMsr
WriteMsr
GetOffsetInformation
FillPhysical
ReadPhysical
ReadPhysical2
WritePhysical
WritePhysical2
ReadProcessorSystemData
ReadTagged
EndEnumTagged
StartEnumTagged
GetNextTagged
FillVirtual
QueryVirtual
ReadVirtual
SearchVirtual
SearchVirtual2
WriteVirtual
ReadVirtualUncached
WriteVirtualUncached
ReadPointersVirtual
WritePointersVirtual
ReadMultiByteStringVirtual
ReadMultiByteStringVirtualWide
ReadUnicodeStringVirtual
ReadUnicodeStringVirtualWide
VirtualToPhysical
GetVirtualTranslationPhysicalOffsets
GetNextDifferentlyValidOffsetVirtual
GetValidRegionVirtual
IDebugRegisters
GetDescription
GetIndexByName
GetFrameOffset
GetFrameOffset2
GetInstructionOffset
GetInstructionOffset2
GetStackOffset
GetStackOffset2
GetPseudoDescription
GetPseudoIndexByName
GetNumberPseudoRegisters
GetPseudoValues
SetPseudoValues
OutputRegisters
OutputRegisters2
GetNumberRegisters
GetValue
GetValues
GetValues2
SetValue
SetValues
SetValues2
IDebugSymbols
GetConstantName
ReadTypedDataPhysical
OutputTypedDataPhysical
WriteTypedDataPhysical
ReadTypedDataVirtual
OutputTypedDataVirtual
WriteTypedDataVirtual
GetFieldName
GetFieldOffset
GetFieldTypeAndOffset
GetFunctionEntryByOffset
AppendImagePath
GetImagePath
SetImagePath
GetLineByOffset
GetOffsetByLine
GetModuleByIndex
GetModuleByModuleName
GetModuleByModuleName2
GetModuleNames
GetModuleNameString
GetNumberModules
GetModuleByOffset
GetModuleByOffset2
GetModuleParameters
AddSyntheticModule
RemoveSyntheticModule
GetModuleVersionInformation
GetNameByOffset
GetNearNameByOffset
GetOffsetByName
Reload
GetScope
ResetScope
SetScope
SetScopeFrameByIndex
GetCurrentScopeFrameIndex
SetScopeFromStoredEvent
GetScopeSymbolGroup
FindSourceFile
GetSourceFileLineOffsets
AppendSourcePath
GetSourcePath
SetSourcePath
GetSourcePathElement
GetSourceEntriesByLine
GetSymbolEntryInformation
GetSymbolEntriesByName
GetSymbolEntriesByOffset
GetSymbolEntryString
CreateSymbolGroup
EndSymbolMatch
GetNextSymbolMatch
StartSymbolMatch
GetSymbolModule
OutputSymbolByOffset
AddSymbolOptions
GetSymbolOptions
RemoveSymbolOptions
SetSymbolOptions
AppendSymbolPath
GetSymbolPath
SetSymbolPath
AddSyntheticSymbol
RemoveSyntheticSymbol
GetTypeId
GetOffsetTypeId
GetSymbolTypeId
GetTypeName
GetTypeSize
AddTypeOptions
GetTypeOptions
RemoveTypeOptions
SetTypeOptions
IDebugSystemObjects
GetEventThread
GetEventProcess
GetNumberProcesses
GetProcessIdByDataOffset
GetCurrentProcessDataOffset
GetCurrentProcessExecutableName
GetProcessIdByHandle
GetCurrentProcessHandle
GetCurrentProcessId
SetCurrentProcessId
GetProcessIdsByIndex
GetProcessIdByPeb
GetCurrentProcessPeb
GetProcessIdBySystemId
GetCurrentProcessSystemId
GetNumberThreads
GetTotalNumberThreads
GetThreadIdByDataOffset
GetCurrentThreadDataOffset
GetThreadIdByHandle
GetCurrentThreadHandle
GetCurrentThreadId
SetCurrentThreadId
GetThreadIdsByIndex
GetThreadIdByProcessor
GetThreadIdBySystemId
GetCurrentThreadSystemId
GetThreadIdByTeb
GetCurrentThreadTeb
GetCurrentProcessUpTime
GetImplicitProcessDataOffset
SetImplicitProcessDataOffset
GetImplicitThreadDataOffset
SetImplicitThreadDataOffset
GetNumberSystems
GetEventSystem
GetSystemIdsByIndex
GetCurrentSystemId
SetCurrentSystemId
GetTotalNumberThreadsAndProcesses
Callback COM Interfaces
IDebugEventCallbacks
IDebugEventCallbacks::Breakpoint
IDebugEventCallbacks::ChangeDebuggeeState
IDebugEventCallbacks::ChangeEngineState
IDebugEventCallbacks::Exception
IDebugEventCallbacks::GetInterestMask
IDebugEventCallbacks::LoadModule
IDebugEventCallbacks::UnloadModule
IDebugEventCallbacks::CreateProcess
IDebugEventCallbacks::ExitProcess
IDebugEventCallbacks::SessionStatus
IDebugEventCallbacks::ChangeSymbolState
IDebugEventCallbacks::SystemError
IDebugEventCallbacks::CreateThread
IDebugEventCallbacks::ExitThread
IDebugInputCallbacks
IDebugInputCallbacks::EndInput
IDebugInputCallbacks::StartInput
IDebugOutputCallbacks
IDebugOutputCallbacks::Output
Other COM Interfaces
IDebugBreakpoint
GetAdder
GetCommand
SetCommand
AddFlags
GetFlags
RemoveFlags
SetFlags
GetId
GetOffset
SetOffset
GetOffsetExpression
SetOffsetExpression
GetParameters
GetDataParameters
SetDataParameters
GetPassCount
SetPassCount
GetCurrentPassCount
GetMatchThreadId
SetMatchThreadId
GetType
IDebugSymbolGroup
OutputAsType
AddSymbol
GetSymbolEntryInformation
ExpandSymbol
GetSymbolName
GetNumberSymbols
GetSymbolOffset
OutputSymbols
GetSymbolParameters
GetSymbolRegister
RemoveSymbolByIndex
RemoveSymbolByName
GetSymbolSize
GetSymbolTypeName
GetSymbolValueText
WriteSymbol
Structures and Constants
DEBUG_ASMOPT_XXX
DEBUG_ATTACH_XXX
DEBUG_BREAKPOINT_PARAMETERS
DEBUG_CREATE_PROCESS_OPTIONS
DEBUG_DUMP_XXX
DEBUG_ENGOPT_XXX
DEBUG_EVENT_XXX
DEBUG_EXCEPTION_FILTER_PARAMETERS
DEBUG_FILTER_XXX
DEBUG_FIND_SOURCE_XXX
DEBUG_FORMAT_XXX
DEBUG_HANDLE_DATA_BASIC
DEBUG_MODULE_AND_ID
DEBUG_MODULE_PARAMETERS
DEBUG_OUTCTL_XXX
DEBUG_OUTPUT_XXX
DEBUG_PROCESS_XXX
DEBUG_REGISTER_DESCRIPTION
DEBUG_SPECIFIC_FILTER_PARAMETERS
DEBUG_STACK_FRAME
DEBUG_STATUS_XXX
DEBUG_SYMBOL_XXX
DEBUG_SYMBOL_ENTRY
DEBUG_SYMBOL_PARAMETERS
DEBUG_SYMBOL_SOURCE_ENTRY
DEBUG_THREAD_BASIC_INFORMATION
DEBUG_TYPED_DATA
DEBUG_TYPEOPTS_XXX
DEBUG_VALUE
EXT_TDOP
EXT_TYPED_DATA
HRESULT Values
Specific Exceptions
Writing DbgEng Extensions
DbgEng Extension Design Guide
Anatomy of a DbgEng Extension DLL
Using Clients and the Engine
Writing DbgEng Extension Code
Building DbgEng Extensions
DbgEng Extension Reference
Extension Callback Functions
DebugExtensionInitialize
DebugExtensionNotify
DebugExtensionProvideValue
DebugExtensionQueryValueNames
DebugExtensionUninitialize
KnownStructOutput
PDEBUG_EXTENSION_CALL
EngExtCpp Extensions
EngExtCpp Extension Design Guide
EngExtCpp Extension Libraries
Client Objects and the Engine
Writing EngExtCpp Extensions
Building ExtEngCpp Extensions
Parsing Extension Arguments
Typed Data
EngExtCpp Extension Reference
EXT_CLASS
EXT_COMMAND_METHOD
EXT_COMMAND
EXT_DECLARE_GLOBALS
ExtExtension
Initialize
Uninitialize
OnSessionActive
OnSessionInactive
OnSessionAccessible
OnSessionInaccessible
GetNumUnnamedArgs
GetUnnamedArgStr
GetUnnamedArgU64
HasUnnamedArg
GetArgStr
GetArgU64
HasArg
HasCharArg
SetUnnamedArg
SetUnnamedArgStr
SetUnnamedArgU64
SetArg
SetArgStr
SetArgU64
GetRawArgStr
ExtKnownStruct
ExtKnownStructMethod
ExtRemoteData
ExtRemoteData::ExtRemoteData
ExtRemoteData::Set
ExtRemoteData::Read
ExtRemoteData::Write
ExtRemoteData::GetData
ExtRemoteData::GetChar
ExtRemoteData::GetUchar
ExtRemoteData::GetBoolean
ExtRemoteData::GetStdBool
ExtRemoteData::GetW32Bool
ExtRemoteData::GetShort
ExtRemoteData::GetUshort
ExtRemoteData::GetLong
ExtRemoteData::GetUlong
ExtRemoteData::GetLong64
ExtRemoteData::GetUlong64
ExtRemoteData::GetFloat
ExtRemoteData::GetDouble
ExtRemoteData::GetLongPtr
ExtRemoteData::GetUlongPtr
ExtRemoteData::GetPtr
ExtRemoteData::ReadBuffer
ExtRemoteData::WriteBuffer
ExtRemoteData::GetString
ExtRemoteTyped
ExtRemoteTyped::ExtRemoteTyped
ExtRemoteTyped::operator=
ExtRemoteTyped::Copy
ExtRemoteTyped::Set
ExtRemoteTyped::SetPrint
ExtRemoteTyped::HasField
ExtRemoteTyped::GetTypeSize
ExtRemoteTyped::GetFieldOffset
ExtRemoteTyped::Field
ExtRemoteTyped::ArrayElement
ExtRemoteTyped::Dereference
ExtRemoteTyped::GetPointerTo
ExtRemoteTyped::Eval
ExtRemoteTyped::operator[]
ExtRemoteTyped::operator*
ExtRemoteTyped::GetTypeName
ExtRemoteTyped::OutTypeName
ExtRemoteTyped::OutSimpleValue
ExtRemoteTyped::OutFullValue
ExtRemoteTyped::OutTypeDefinition
ExtRemoteTyped::Release
ExtRemoteTyped::GetTypeFieldOffset
ExtRemoteList
ExtRemoteList::ExtRemoteList
ExtRemoteList::StartHead
ExtRemoteList::StartTail
ExtRemoteList::HasNode
ExtRemoteList::GetNodeOffset
ExtRemoteList::Next
ExtRemoteList::Prev
ExtRemoteTypedList
ExtRemoteTypedList::ExtRemoteTypedList
ExtRemoteTypedList::SetTypeAndLink
ExtRemoteTypedList::GetTypedNodePtr
ExtRemoteTypedList::GetTypedNode
Writing WdbgExts Extensions
WdbgExts Extension Design Guide
WdbgExts Extension API Overview
32-Bit Pointers and 64-Bit Pointers
Using WdbgExts Extension Callbacks
Using the DECLARE_API Macro
Writing WdbgExts Extension Code
WdbgExts Input and Output
WdbgExts Memory Access
WdbgExts Threads and Processes
WdbgExts Symbols
WdbgExts Target Information
Building WdbgExts Extensions
WdbgExts Extension Reference
WdbgExts Extension Callback Functions
WinDbgExtensionDllInit
ExtensionApiVersion
CheckVersion
WdbgExts Functions
GetContext
SetContext
CheckControlC
GetCurrentProcessAddr
GetCurrentProcessHandle
GetCurrentThreadAddr
GetDebuggerCacheSize
GetDebuggerData
Disasm
dprintf
GetExpression
GetExpressionEx
GetInputLine
Ioctl
IG_DUMP_SYMBOL_INFO
DBG_DUMP_XXX
FIELD_INFO
DBG_DUMP_FIELD_XXX
PSYM_DUMP_FIELD_CALLBACK
IG_GET_BUS_DATA
IG_GET_KERNEL_VERSION
IG_GET_THREAD_OS_INFO
IG_LOWMEM_CHECK
IG_POINTER_SEARCH_PHYSICAL
GetKdContext
ReadMemory
SearchMemory
WriteMemory
ReadMsr
WriteMsr
GetPebAddress
ReadPhysical
ReadPhysicalWithFlags
WritePhysical
WritePhysicalWithFlags
GetTebAddress
StackTrace
GetSymbol
ReloadSymbols
GetSetSympath
TranslateVirtualToPhysical
ReadControlSpace
ReadControlSpace64
ReadTypedControlSpace32
ReadTypedControlSpace64
WriteControlSpace
ReadIoSpace
ReadIoSpace64
ReadIoSpaceEx
ReadIoSpaceEx64
WriteIoSpace
WriteIoSpace64
WriteIoSpaceEx
WriteIoSpaceEx64
SetThreadForOperation
SetThreadForOperation64
GetFieldData
GetFieldOffset
GetFieldValue
GetShortField
ReadField
ReadListEntry
ReadPointer
WritePointer
IsPtr64
ReadPtr
GetTypeSize
InitTypeRead
InitTypeReadPhysical
ListType
Glossary
A
B
C
D
E
F
H
I
K
L
M
N
O
P
R
S
T
U
V
W