!for_each_module

The !for_each_module extension executes a debugger command one time for each loaded module.

!for_each_module ["CommandString"]
!for_each_module -?

<Parameters

CommandString
Specifies the debugger commands to execute one time for each module in the debugger's module list. If CommandString includes multiple commands, you must separate them with semicolons and enclose CommandString in quotation marks. If you include multiple commands, the individual commands within CommandString cannot contain quotation marks.

You can use the following aliases in CommandString or in any script that the commands in CommandString executes.

Alias	Data type	Value
@#FileVersion	string	The file version of the module.
@#ProductVersion	string	The product version of the module.
@#ModuleIndex	ULONG	The module number. Modules are enumerated consecutively, starting with zero.
@#ModuleName	string	The module name. This name is typically the file name without the file name extension. In some situations, the module name differs significantly from the file name.
@#ImageName	string	The name of the executable file, including the file name extension. Typically, the full path is included in user mode but not in kernel mode.
@#LoadedImageName	string	Unless Microsoft CodeView symbols are present, this alias is the same as the image name.
@#MappedImageName	string	In most situations, this alias is NULL. If the debugger is mapping an image file (for example, during minidump debugging), this alias is the name of the mapped image.
@#SymbolFileName	string	The path and name of the symbol file. If you have not loaded any symbols, this alias is the name of the executable file instead.
@#ModuleNameSize	ULONG	The string length of the module name string, plus one.
@#ImageNameSize	ULONG	The string length of the image name string, plus one.
@#LoadedImageNameSize	ULONG	The string length of the loaded image name string, plus one.
@#MappedImageNameSize	ULONG	The string length of the mapped image name string, plus one.
@#SymbolFileNameSize	ULONG	The string length of the symbol file name string, plus one.
@#Base	ULONG64	The address of the start of the image.
@#Size	ULONG	The size of the image, in bytes.
@#End	ULONG64	The address of the end of the image.
@#TimeDateStamp	ULONG	The time and date stamp of the image. If you want to expand this time and date stamp into a readable date, use the .formats (Show Number Formats) command.
@#Checksum	ULONG	The checksum of the module.
@#Flags	ULONG	The module flags. For a list of the DEBUG_MODULE_Xxx values, see Dbgeng.h.
@#SymbolType	USHORT	The symbol type. For a list of the DEBUG_SYMTYPE_Xxx values, see Dbgeng.h.

These aliases are all replaced before CommandString is executed for each module and before any other parsing occurs. These aliases are case sensitive. You must add a space before the alias and a space after it, even if the alias is enclosed in parentheses. If you use C++ expression syntax, you must reference these aliases as @@( @#alias).

These aliases are available only during the lifetime of the call to !for_each_module. Do not confuse them with pseudo-registers, fixed-name aliases, or user-named aliases.

-?
Displays some Help text for this extension in the Debugger Command window.

DLL

Ext.dll

Additional Information

For more information about how to define and use aliases as shortcuts for entering character strings (including use of the ${ } token), see Using Aliases.

Remarks

If you do not specify any arguments, the !for_each_module extension displays general information about the loaded modules. This information is similar to the information that the following command shows.

!for_each_module .echo @#ModuleIndex : @#Base @#End @#ModuleName @#ImageName  @#LoadedImageName

For more information about loaded and unloaded modules, use the lm (List Loaded Modules) command.

If you enable verbose debugger output, the debugger displays the total number of loaded and unloaded modules when the extension is called, and the debugger displays detailed information about each module (including the values of each available alias) before CommandString is executed for that module.

The following examples show how to use the !for_each_module extension. The following commands display the global debug flags.

!for_each_module x ${@#ModuleName}!*Debug*Flag*
!for_each_module x ${@#ModuleName}!g*Debug*

The following command checks for binary corruption in every loaded module, by using the !chkimg extension:

!for_each_module !chkimg @#ModuleName

The following command searches for the pattern "MZ" in every loaded image.

!for_each_module s-a @#Base @#End "MZ"

The following example demonstrates the use of @#FileVersion and @#ProductVersion for each module name:

0:000> !for_each_module .echo @#ModuleName fver = @#FileVersion pver = @#ProductVersion 
USER32 fver = 6.0.6000.16438 (vista_gdr.070214-1610) pver = 6.0.6000.16438
kernel32 fver = 6.0.6000.16386 (vista_rtm.061101-2205) pver = 6.0.6000.16386
ntdll fver = 6.0.6000.16386 (vista_rtm.061101-2205) pver = 6.0.6000.16386
notepad fver = 6.0.6000.16386 (vista_rtm.061101-2205) pver = 6.0.6000.16386
WINSPOOL fver = 6.0.6000.16386 (vista_rtm.061101-2205) pver = 6.0.6000.16386
COMCTL32 fver = 6.10 (vista_rtm.061101-2205) pver = 6.0.6000.16386
SHLWAPI fver = 6.0.6000.16386 (vista_rtm.061101-2205) pver = 6.0.6000.16386
msvcrt fver = 7.0.6000.16386 (vista_rtm.061101-2205) pver = 7.0.6000.16386
GDI32 fver = 6.0.6000.16386 (vista_rtm.061101-2205) pver = 6.0.6000.16386
RPCRT4 fver = 6.0.6000.16525 (vista_gdr.070716-1600) pver = 6.0.6000.16525
SHELL32 fver = 6.0.6000.16513 (vista_gdr.070626-1505) pver = 6.0.6000.16513
ole32 fver = 6.0.6000.16386 (vista_rtm.061101-2205) pver = 6.0.6000.16386
ADVAPI32 fver = 6.0.6000.16386 (vista_rtm.061101-2205) pver = 6.0.6000.16386
COMDLG32 fver = 6.0.6000.16386 (vista_rtm.061101-2205) pver = 6.0.6000.16386