Address and Address Range Syntax search memory when using windbg to do debug

1

http://msdn.microsoft.com/en-us/library/ff558855(v=vs.85).aspx from here I know the 's ' command to search in memory, here Address and Address Range Syntax at the buttom of the article says: "For example, 80000000 L20 specifies the range from 0x80000000 through 0x8000001F"

Could anyone help me to know why the end address is 1F? Does L20 means 20 objects?

another example: s -d 0012ff40 L20 'VUTS', here L20 means 20 count objects? what is the object size? size is determined by -d?

debugging
search
memory
windbg
asked on Stack Overflow Jun 27, 2013 by gfan • edited Jun 27, 2013 by Daniel Goldberg

1 Answer

1

The L refers to the length of the range to search so using 0012ff40 as starting range, plus 32 bytes would give end address of 0012ff5f (remember it includes the starting address).

To answer your second part the -d flag tells WinDbg the type of the object, in this case DWORD which will be 32-bit unsigned integer

answered on Stack Overflow Jun 27, 2013 by EdChum • edited Jun 27, 2013 by EdChum

User contributions licensed under CC BY-SA 3.0