C:\WinDDK\7600.16385.1\Debuggers\kd.exe
kd -help
kd version 6.12.0002.633
usage: kd [options]
Options:
-? displays command line help text
-a<DllName> adds a default extension DLL
-b break into kernel when connection is established
-bonc request break in after session started
-c "<command>" executes the given debugger command at the first debugger
prompt
-cf <file> specifies a script file to be processed at the first debugger
prompt
-cfr <file> specifies a script file to be processed at the beginning of a
session (including after .restart)
-clines <#> number of lines of output history retrieved by a remote client
-d breaks into kernel on first module load
-ee <name> set default expression evaluator
<name> can be MASM or C++
-failinc causes incomplete symbol and module loads to fail
-i <ImagePath> specifies the location of the executables that generated the
fault (see _NT_EXECUTABLE_IMAGE_PATH)
-iu install dbgeng URL protocols
-k <options> tells the debugger how to connect to the target
com:modem connects through a modem
com:port=id,baud=rate connects through a COM port
id: com port name, of the form com2 or \\.\com12
rate: valid baudrate value, such as 57600
1394:channel=chan connects over 1394
chan: 1394 channel number, must match channel used at boot
-kl tells the debugger to connect to the local machine
-kqm turns on kd quiet mode (equivalent to KDQUIET)
-kx <options> tells the debugger to connect to an eXDI driver
-lines requests that line number information be used if present
-loga <logfile> appends to a log file
-logau <logfile> appends to an Unicode log file
-logo <logfile> opens a new log file
-logou <logfile> opens a new Unicode log file
-m serial port is a modem, watch for carrier detect
-myob ignores version mismatches in DBGHELP.DLL
-n enables verbose output from symbol handler
-noio disables all I/O
-noshell disables the .shell (!!) command
-QR \\<machine> queries for remote servers
-r display registers
-remote <transport>:server=<name>,<params>
lets you connect to a debugger session started with -server
must be the first argument if present
transport: tcp | npipe | ssl | spipe | 1394 | com
name: machine name on which the debug server was created
params: parameters the debugger server was created with
for tcp use: port=<socket port #>
for npipe use: pipe=<name of pipe>
for 1394 use: channel=<channel #>
for com use: port=<COM port>,baud=<baud rate>,
channel=<channel #>
for ssl and spipe see the documentation
example: ... -remote npipe:server=yourmachine,pipe=foobar
-s disables lazy symbol loading
-sdce pops up dialogs for critical errors
-secure disallows operations dangerous for the host
-server <transport>:<params>
creates a debugger session other people can connect to
must be the first argument if present
transport: tcp | npipe | ssl | spipe | 1394 | com
params: connection parameterization
for tcp use: port=<socket port #>
for npipe use: pipe=<name of pipe>
for 1394 use: channel=<channel #>
for com use: port=<COM port>,baud=<baud rate>,
channel=<channel #>
for ssl and spipe see the documentation
example: ... -server npipe:pipe=foobar
-ses enables strict symbol loading
-sflags <flags> sets symbol flags from a numeric argument
-sicv ignores the CV record when symbol loading
-sins ignores the symbol path environment variables
-snc converts :: to __ in symbol names
-snul disables automatic symbol loading for unqualified names
-srcpath <SourcePath> specifies the source search path
-sup enables full public symbol searches
-t Enable KD transport related output (CTRL+D output) by default.
-v enables verbose output from debugger
-version shows the build version
-wake <pid> wakes up a sleeping debugger and exits
-x same as -b, except uses an initial command of eb NtGlobalFlag 9;g
-y <SymbolsPath> specifies the symbol search path (see _NT_SYMBOL_PATH)
-z <CrashDmpFile> specifies the name of a crash dump file to debug
-zp <CrashPageFile> specifies the name of a page.dmp file to use with a
crash dump
Environment Variables:
_NT_SYMBOL_PATH=[Drive:][Path]
Specify symbol image path.
_NT_ALT_SYMBOL_PATH=[Drive:][Path]
Specify an alternate symbol image path.
_NT_DEBUGGER_EXTENSION_PATH=[Drive:][Path]
Specify a path which should be searched first for extensions dlls
_NT_EXECUTABLE_IMAGE_PATH=[Drive:][Path]
Specify executable image path.
_NT_SOURCE_PATH=[Drive:][Path]
Specify source file path.
_NT_DEBUG_LOG_FILE_OPEN=filename
If specified, all output will be written to this file from offset 0.
_NT_DEBUG_LOG_FILE_APPEND=filename
If specified, all output will be APPENDed to this file.
_NT_DEBUG_HISTORY_SIZE=size
Specifies the size of a server's output history in kilobytes
_NT_DEBUG_BUS=1394
Specifies the type of BUS the kernel debugger will use to communicate with the target
_NT_DEBUG_1394_CHANNEL=number
Specifies the channel to be used over the 1394 bus
_NT_DEBUG_PORT=com[1|2|...]
Specify which com port to use. (Default = com1)
_NT_DEBUG_BAUD_RATE=baud rate
Specify the baud rate used by debugging serial port. (Default = 19200)
_NT_DEBUG_CACHE_SIZE=x
If specified, gives the number of bytes cached on debugger side
of kernel debugger serial connection (default is 102400).
KDQUIET=anything
If defined, disables obnoxious warning message displayed when user
presses Ctrl-C
Control Keys:
<Ctrl-A><Enter> Toggle BaudRate
<Ctrl-B><Enter> Quit debugger
<Ctrl-C> Break into Target
<Ctrl-D><Enter> Display debugger debugging information
<Ctrl-F><Enter> Force a break into the kernel (same as Ctrl-C)
<Ctrl-K><Enter> Toggle Initial Breakpoint
<Ctrl-\><Enter> Debug Current debugger
<Ctrl-R><Enter> Resynchronize target and host
<Ctrl-V><Enter> Toggle Verbose mode
<Ctrl-W><Enter> Print version information