Skip to content

windbg ¤

Compatibility functionality for Windbg users.

Functions:

  • enhex –
  • db –

    Starting at the specified address, dump N bytes

  • dw –

    Starting at the specified address, dump N words

  • dd –

    Starting at the specified address, dump N dwords

  • dq –

    Starting at the specified address, dump N qwords

  • dc –
  • dX –

    Traditionally, windbg will display 16 bytes of data per line.

  • eb –

    Write hex bytes at the specified address.

  • ew –

    Write hex words at the specified address.

  • ed –

    Write hex dwords at the specified address.

  • eq –

    Write hex qwords at the specified address.

  • ez –

    Write a character at the specified address.

  • eza –

    Write a string at the specified address.

  • eX –

    This relies on windbg's default hex encoding being enforced

  • dds –

    Dump pointers and symbols at the specified address.

  • da –
  • ds –
  • bl –

    List breakpoints

  • bd –

    Disable the breakpoint with the specified index.

  • be –

    Enable the breakpoint with the specified index.

  • bc –

    Clear the breakpoint with the specified index.

  • bp –
  • k –

    Print a backtrace (alias 'bt')

  • go –

    Windbg compatibility alias for 'continue' command.

  • ln –

    List the symbols nearest to the provided value.

  • peb –
  • pc –

    Windbg compatibility alias for 'nextcall' command.

Attributes:

da_parser module-attribute ¤

da_parser = ArgumentParser(
    description="Dump a string at the specified address."
)

ds_parser module-attribute ¤

ds_parser = ArgumentParser(
    description="Dump a string at the specified address."
)

parser module-attribute ¤

parser = ArgumentParser(
    description="List the symbols nearest to the provided value."
)

enhex ¤

enhex(size, value)

db ¤

db(address, count=64)

Starting at the specified address, dump N bytes (default 64).

dw ¤

dw(address, count=32)

Starting at the specified address, dump N words (default 32).

dd ¤

dd(address, count=16)

Starting at the specified address, dump N dwords (default 16).

dq ¤

dq(address, count=8)

Starting at the specified address, dump N qwords (default 8).

dc ¤

dc(address, count=8)

dX ¤

dX(size, address, count, to_string=False, repeat=False)

Traditionally, windbg will display 16 bytes of data per line.

eb ¤

eb(address, data)

Write hex bytes at the specified address.

ew ¤

ew(address, data)

Write hex words at the specified address.

ed ¤

ed(address, data)

Write hex dwords at the specified address.

eq ¤

eq(address, data)

Write hex qwords at the specified address.

ez ¤

ez(address, data)

Write a character at the specified address.

eza ¤

eza(address, data)

Write a string at the specified address.

eX ¤

eX(size, address, data, hex=True) -> None

This relies on windbg's default hex encoding being enforced

dds ¤

dds(addr)

Dump pointers and symbols at the specified address.

da ¤

da(address, max) -> None

ds ¤

ds(address, max) -> None

bl ¤

bl() -> None

List breakpoints

bd ¤

bd(which='*') -> None

Disable the breakpoint with the specified index.

be ¤

be(which='*') -> None

Enable the breakpoint with the specified index.

bc ¤

bc(which='*') -> None

Clear the breakpoint with the specified index.

bp ¤

bp(where) -> None

k ¤

k() -> None

Print a backtrace (alias 'bt')

go ¤

go() -> None

Windbg compatibility alias for 'continue' command.

ln ¤

ln(value: int = None) -> None

List the symbols nearest to the provided value.

peb ¤

peb() -> None

pc ¤

pc()

Windbg compatibility alias for 'nextcall' command.