WinDbg commonly used commands series ---! Dlls

!dlls

Brief introduction

! Dlls extended display table entries of all modules loaded modules or the specified thread or process is using.

Use the form

!dlls [Options][LoaderEntryAddress]

!dlls -h

parameter

  • Options specified level output.
    This parameter can be any combination of the following values:

    -f
    displays the file header.

    -s
    display section header.

    -a
    display module complete message. (This option is equivalent to -fs.)

    -C **** ModuleAddress
    display module contains ModuleAddress .

    -i
    initialization sorted in the order shown.

    -l
    sort the display by loading order. The default is the case.

    -m
    memory sorted in the order shown.

    -v
    display version information. This information will be part of the resources of each module.

    -h
    Show this extension of some help text debugger command window.

  • LoaderEntryAddress
    address specified loader module entry. If this parameter is included only debugger displays this specific module.

Support Environment

Windows 2000

Kdextx86.dll Ntsdexts.dll

Windows XP and later

Exts.dll

Remark

Module list including all entry points of each module. ! Dlls extensions only work (not crash dump analysis) in real-time debugging. In kernel mode, this display module extension of the current process context. You can not use the! Dlls and system idle process or processes together.

Guess you like

Origin www.cnblogs.com/yilang/p/11917743.html