Skip to content

windbg ¤

Compatibility functionality for Windbg users.

Functions:

  • enhex
  • db

    Starting at the specified address, dump N bytes

  • dw

    Starting at the specified address, dump N words

  • dd

    Starting at the specified address, dump N dwords

  • dq

    Starting at the specified address, dump N qwords

  • dc
  • dX

    Traditionally, windbg will display 16 bytes of data per line.

  • eb

    Write hex bytes at the specified address.

  • ew

    Write hex words at the specified address.

  • ed

    Write hex dwords at the specified address.

  • eq

    Write hex qwords at the specified address.

  • ez

    Write a character at the specified address.

  • eza

    Write a string at the specified address.

  • eX

    This relies on windbg's default hex encoding being enforced

  • dds

    Dump pointers and symbols at the specified address.

  • da
  • ds
  • bl

    List breakpoints

  • bd

    Disable the breakpoint with the specified index.

  • be

    Enable the breakpoint with the specified index.

  • bc

    Clear the breakpoint with the specified index.

  • bp
  • k

    Print a backtrace (alias 'bt')

  • go

    Windbg compatibility alias for 'continue' command.

  • ln

    List the symbols nearest to the provided value.

  • peb
  • pc

    Windbg compatibility alias for 'nextcall' command.

Attributes:

da_parser module-attribute ¤

da_parser = ArgumentParser(
    description="Dump a string at the specified address."
)

ds_parser module-attribute ¤

ds_parser = ArgumentParser(
    description="Dump a string at the specified address."
)

parser module-attribute ¤

parser = ArgumentParser(
    description="List the symbols nearest to the provided value."
)

enhex ¤

enhex(size, value)

db ¤

db(address, count=64)

Starting at the specified address, dump N bytes (default 64).

dw ¤

dw(address, count=32)

Starting at the specified address, dump N words (default 32).

dd ¤

dd(address, count=16)

Starting at the specified address, dump N dwords (default 16).

dq ¤

dq(address, count=8)

Starting at the specified address, dump N qwords (default 8).

dc ¤

dc(address, count=8)

dX ¤

dX(size, address, count, to_string=False, repeat=False)

Traditionally, windbg will display 16 bytes of data per line.

eb ¤

eb(address, data)

Write hex bytes at the specified address.

ew ¤

ew(address, data)

Write hex words at the specified address.

ed ¤

ed(address, data)

Write hex dwords at the specified address.

eq ¤

eq(address, data)

Write hex qwords at the specified address.

ez ¤

ez(address, data)

Write a character at the specified address.

eza ¤

eza(address, data)

Write a string at the specified address.

eX ¤

eX(size, address, data, hex=True) -> None

This relies on windbg's default hex encoding being enforced

dds ¤

dds(addr)

Dump pointers and symbols at the specified address.

da ¤

da(address, max) -> None

ds ¤

ds(address, max) -> None

bl ¤

bl() -> None

List breakpoints

bd ¤

bd(which='*') -> None

Disable the breakpoint with the specified index.

be ¤

be(which='*') -> None

Enable the breakpoint with the specified index.

bc ¤

bc(which='*') -> None

Clear the breakpoint with the specified index.

bp ¤

bp(where) -> None

k ¤

k() -> None

Print a backtrace (alias 'bt')

go ¤

go() -> None

Windbg compatibility alias for 'continue' command.

ln ¤

ln(value: int = None) -> None

List the symbols nearest to the provided value.

peb ¤

peb() -> None

pc ¤

pc()

Windbg compatibility alias for 'nextcall' command.