This is a draft cheat sheet. It is a work in progress and is not finished yet.
Help Commands
? |
Help on Debugee commands |
.help |
Help on Debugger commands |
.hh command |
Open WinDbg’s help for this command |
Execution Control
restart |
Stop and restart execution |
t (F11) |
Step into (trace) |
pa address |
Run to addres |
pt |
Execute until a return instruction is reached |
ph [count] |
Execute until a branching instruction is reached. count = # of branches reached until it stops |
g (F5) |
Continue (go) |
gu (Shift-F11) |
Execute until the current function is complete |
(Ctrl-Break) |
Break |
|
|
Display Memory
d{type} [/c#] addr [L#] Display the contents of memory. Types:
b = Bytes + ASCII characters
w = WORD (2 bytes)
W = WORD + ASCII characters
d = DWORD (4 bytes)
c = DWORD + ASCII characters
q = QWORD (8 bytes)
a = ASCII string up until first null byte
u = Unicode string up until first null byte
f = Single-precision float numbers (4 bytes)
D = Double-precision float numbers (8 bytes)
|
|