Displayed type (T)
The second (and third) letter of the d
command specifies the type of the value being displayed.
When this second letter is omitted, the most recent data type is assumed.
da , du | ASCII and Unicode data (Compare with ds and dS ) |
db | byte values and ASCII data |
dW , dc | Word and double word (=4 bytes) values, with corresponding ASCII data |
dw , dd , dq | Word (=2 bytes), double word and quad word (= 8 bytes) values, without ASCII |
dD , df | Double, single precision values |
dp | pointers (size is dependent on platform) |
ds , dS | display string structures, compare with da and du |
dyb | Binary values and byte values |
dyd | Binary values and double-word values |
dt
dt
displays a type, simple ones or complex ones (such as a struct
or a union
):
dt nt!_PEB
dt nt!_PEB -r @$peb
dt nt!_TEB
Compare the previous commands with the PEB and TEB extension:
!peb
!teb