user.apps.windbg.windbg

register <user.registers>

Press @. Insert text at the current cursor position

open help

Insert text at the current cursor position

add microsoft symbols

Insert text at the current cursor position

force reload symbols

Insert text at the current cursor position

reload symbols

Insert text at the current cursor position

loaded modules

Insert text at the current cursor position

display pointers

Insert text at the current cursor position

dereference pointer

Insert `before + after`, leaving cursor between `before` and `after`. Not entirely reliable if `after` contains newlines.

show version

Press ctrl-alt-w.

view command

Press alt-1.

view watch

Press alt-2.

view locals

Press alt-3.

view registers

Press alt-4.

view memory

Press alt-5.

view call stack

Press alt-6.

view disassembly

Press alt-7.

view scratch pad

Press alt-8.

view (processes | threads)

Press alt-9.

dump function params

Insert “r @rcx,@rdx,@r8,@r9 \n”

(lib | library) <user.windows_dlls>

Insert “{ windows_dlls }”