Command for viewing the disassembly code of a function in windbg

Command

============

U.

U $ IP

The above two commands have the same effect. They are used to disassemble the eight commands on the current $ IP address.

Uf.

UF $ IP

The effects of the above two commands are the same. The whole function on the current $ IP address is decompiled.

UB.

UB $ IP

Disassemble the eight commands before $ IP.

UB $ IP l2a

Disassemble 42 commands before $ IP address.

U $ IP +

Command between the disassembly address $ IP and the address $ IP + 10. Note that $ IP is included, not $ IP + 10.

Example: