O'Reilly logo

Windows Debugging Notebook: Essential User Space WinDbg Commands by Dmitry Vostokov, Roberto Alexis Farah

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

x*

The x* command has powerful capabilities. It's very flexible, too. We can use different parameter combinations; though, we recommend looking at and checking WinDbg documentation to explore other variations.

Notice that some parameters may not display information if we use public symbols and others work with public and private symbols.

Some useful options:

/t
Shows the data type of every symbol (if known).
/v
Shows the symbol type like global, parameter or function and its size.
/s size
Shows only symbols that have a nonzero size, in bytes.
/a /n /z
Sorts the output by addresses, name or size.

Example of displaying all symbols for the specified module:

0:002> x mtgdi!* 0041f580 mtgdi!ATL::CVarTypeInfo<unsigned __int64>::pmField = 0x00000008 004225f4 ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required