The !peb extension displays a formatted view of the information in the process environment block (PEB). The PEB contains information such as Process Name, Module List, Environment Variables, Command Line, and many more process level things.

!peb

Welcome to the Inside Show, the show that takes you inside Windows.In each ~5min episode, we review a Windows Feature, Windows Internal, Exception Code, Bugcheck Code or Debugger Command. For longer (15-30min) deeper dives into various topics, check out Defrag Tools. Email questions, comments and requests to InsideShow@microsoft.com -- Episode List -- Windows Feature Device ManagerEvent ViewerSystem Power Report (Coming soon)Task ManagerWindows-X Menu Windows Internal Bugcheck Secondary Dump DataBugcheck Active Dump Type (Coming soon)Crash Control Settings (Coming soon)Crash On Control Scroll (Lock) (Coming soon)Crash On Custom Keys (Coming soon)Crash On Long Power Button (Coming soon)Crash On NMI (Coming soon) Exception Code HRESULT Error CodesAccess Violation C0000005Access Violation C0000005 - Read or WriteAccess Violation C0000005 - ExecuteCLR Exception E0434352Stowed Exception C000027BPoint-of-Failure Exception C000027CFast Fail Exception C0000409 Bugcheck Code Bugcheck 0x9F DRIVER_POWER_STATE_FAILUREBugcheck 0xD1 DRIVER_IRQL_NOT_LESS_OR_EQUALBugcheck 0xE2 MANUALLY_INITIATED_CRASHBugcheck 0x1C8 MANUALLY_INITIATED_LONG_BUTTON_HOLD Debugging Windows SDKWinDbg Default Workspace User Mode .cxr (Context Record).ecxr (Exception Context Record).exr (Exception Record).lastevent (Last Event)!peb (Process Environment Block)!teb (Thread Environment Block) Kernel Mode .trap (Trap Frame)

Share !peb

Sign up to save your podcasts

!peb

!peb