Search notes:

d*

The d* commands display the content of memory. Some sources claim that d stands for dump.
dT [Options] [Range] 

Displayed type (T)

The second (and third) letter of the d command specifies the type of the value being displayed.
When this second letter is omitted, the most recent data type is assumed.
da, du ASCII and Unicode data (Compare with ds and dS)
db byte values and ASCII data
dW, dc Word and double word (=4 bytes) values, with corresponding ASCII data
dw, dd, dq Word (=2 bytes), double word and quad word (= 8 bytes) values, without ASCII
dD, df Double, single precision values
dp pointers (size is dependent on platform)
ds, dS display string structures, compare with da and du
dyb Binary values and byte values
dyd Binary values and double-word values

dt

dt displays a type, simple ones or complex ones (such as a struct or a union):
dt nt!_PEB
dt nt!_PEB -r @$peb
dt nt!_TEB
Compare the previous commands with the PEB and TEB extension:
!peb
!teb

Options

/cWidth
/p Physical address (kernel mode only). /p[c]: read cached memory, /p[uc]: read uncached memory, /p[wc]: read write-combined memory. (Brackets are required)

See also

The r command displays or modifes register values.
The value of the last d* command is stored in the pseudo register $p
Memory related commands

Index