BSOD Commands - WinDbg

Commands and Extensions for WinDbg

!analyze

Performs analysis of the dump file, and displays information about the current exception or bugcheck.

Parameters for !analyse extension:

-v Displays verbose output of the analysis.

!analyze -v

-f Performs a fast and very brief analysis of the dump file.

!analyze -f

-show [bugcheckcode] Displays information about the specified bug check code.

!analyze -show

!cpuid

Displays information about the processors within the system.

Parameters for !cpuid extension:

[Processor] Specifies the processor whose information will be displayed; will give information specific to that processor.

!cpuid [Processor]

!sysinfo

Displays system information, such as the ACPI, CPU information and BIOS.

Parameters for !sysinfo:

cpuinfo Displays information about the processor.

cpuspeed Displays the maximum and current processor speeds.

machineid Displays information about the system, such as: SMBIOS, BIOS, firmware, system and baseboard.

smbios Displays the SMBIOS table, and provides information about the system (Memory, BIOS and CPU).

lm (Load Listed Modules)

Displays information about the listed modules.

Parameters for lm command:

e Lists modules which have symbol problems, and displays the 3rd party drivers.

n t Lists modules with a name and time; symbol information is not included.

lm n t [Module Name] The module name is usually the driver without the file extension.

f Lists the modules full image path.

i [Module Name] Gives detailed information about a specific module.

lmi [Module Name]

v Lists the modules verbose, and displays information which includes: symbol file name; image file name; checksum information; version information; date stamps; time stamps and information regarding if the module is managed code (CLR).

lmv [Module Name]

.hh

Displays help for WinDbg.

.time

Displays the time of dump generation.

More Commands and Extensions (WinDbg)

1) Open WinDbg program and go to Help and then Contents.

Capture.JPG

2) Expand Debugger Reference, and then expand the Debugger Commands.

Capture#2.JPG

3) Expand General Extension Commands and Kernel-Mode Extension Commands, and then click which command/extension you would like to view for detailed information about that extension/command.

capture#3.JPG

Hope this helps,

Harry



 
Last edited by a moderator:
Well done, Harry! :thumbsup: It will be helpful, for sure.
 

My Computer

Computer type
PC/Desktop
Computer Manufacturer/Model Number
Self Assembled
OS
Microsoft Windows 10 Pro Insider Preview 64-bit
CPU
Intel(R) Core(TM) i3-4130 CPU @ 3.40GHz
Motherboard
Gigabyte Technology Co., Ltd. B85M-D3H
Memory
Corsair Vengence 4GB x2 (8.00GB Dual-Channel DDR3 @ 798MHz)
Graphics Card(s)
2047MB GeForce GTS 450 (ZOTAC International)
Sound Card
Onboard (Realtek High Definition Audio)
Monitor(s) Displays
LG Flatron E2040T
Screen Resolution
1600x900
Hard Drives
Western Digital 1 TB
Seagate 500 GB
PSU
Corsair VS550
Case
Cooler Master K380
Cooling
Cooler Master Seidon 120V Plus
Keyboard
Logitech MK260r
Mouse
Logitech MK260r
Internet Speed
PMPL Broadband
Antivirus
Windows Defender + MBAM
Browser
Firefox
Other Info
Dell Studio 15" Laptop
Well done, Harry! :thumbsup: It will be helpful, for sure.

Thanks Arc, I just edited a few lines due to formatting mistakes and some spelling :o

Hope the tutorial helps people with some of the debugging commands (:
 

My Computer

Computer type
Laptop
Back
Top