--- WinDbg series of commands and data memory corresponding to the symbol display d * s (dds, dps, dqs)

Command DDS , DPSDQS displayed to the memory contents within a given range. The memory is assumed that the range of addresses in the symbol table. Corresponding symbol will be displayed.

dds [Options] [Range] 
dqs [Options] [Range] 
dps [Options] [Range] 

parameter:

  • Options
    to specify one or more display options. Any of the following options may include, but is not indicative of a plurality of / p * Options:
    / C the Width
    specify the number to be used in the display column. If omitted, the default number of columns depends on the display type. Since these commands display symbol is generally best to use only one default data value column.

    / p
    physical memory addresses (kernel mode only) use of the display. Range specified range from the physical memory instead of virtual memory.

    / P [C]
    (Kernel mode only) and the same / P , the read only memory cache. Square brackets c must be included.

    / P [UC]
    (Kernel mode only) and the same / P , the read only memory uncached. Square brackets uc must contain.

    / P [WC]
    (Kernel mode only) and the same / P , but a combination of read-write memory. It is enclosed in square brackets wc must contain.

  • Range
    Specifies the memory area to be displayed. If the range is omitted, the memory start command will display the location of a display command from the last end. If the range is omitted and does not use the previous display command, the display starts from the current instruction pointer. Given a simple address, the default range of the length is 128 bytes.

dds second character case sensitive. All third character of these commands are case-sensitive. dds command and a double word (4 byte) value, such as dd command. dqs command displays quadword (8-byte) value and the dq command. S dp command display size of a pointer value (4 or 8 bytes, depending on the architecture of the target computer), the command as dp. Each of these words are considered address in the symbol table. It will display the corresponding symbol information for each word. If the line number information is enabled, the display will be available in the source file name and line number.

 

 

 

 

 

 

 

Guess you like

Origin www.cnblogs.com/yilang/p/11453905.html