WinDBG tip: List all symbols (symbol) in the module (dll/exe)

You can use the X command to enumerate all the symbols when you want to make a breakpoint on a function but don't remember the exact name of the function.

The command format is:

x [ option ] module name ! symbol-Matching expressions

The symbol match expression is similar to a DOS-like file name matching expression, and you can use the * and? numbers to make wildcard characters. For example, I want to list all the symbols in user32.dll that begin with getwindowt, using commands

0:016> x user32! getwindowt*
75f50f7b user32! Getwindowtexta (struct hwnd__ *, char *, int)
75F4ADC5 user32! GETWINDOWTEXTLENGTHW (struct hwnd__ *)
75F4ACC3 user32! GETWINDOWTEXTW (struct hwnd__ *, unsigned short *, int)
75f625b5 user32! Getwindowtextlengtha (struct hwnd__ *)
75f60898 user32! GetWindowThreadProcessId (struct hwnd__ *, unsigned long *)

The specific options are not much explained, and are interested to see WinDbg's help file. Want to see what public functions and variables are in Notepad? Open Notepad with WinDbg, try the x command:)

0:001> x/t/V notepad!*

JPG change rar

WinDBG tip: List all symbols (symbol) in the module (dll/exe)