Windbg tips: list all the symbols in a module (DLL/EXE)

If you want to break a breakpoint under a function, but cannot remember the specific name of the function, you can use the X command to list all the symbols.

 

Command Format:

X[Option]Module name!Symbol matching expression

 

 

The symbol matching expression here is similar to the DOS file name matching expression. You can use the * and? . For example, to list all the symbols starting with getjavaswt in user32.dll, run the following command:

 

0: 016>X USER32! Getjavaswt *
75f50f7b USER32! Getwindowtexta (struct hwnd _ *, char *, INT)
75f4adc5 USER32! Getwindowtextlengthw (struct hwnd __*)
75f4acc3 USER32! Getwindowtextw (struct hwnd _ *, unsigned short *, INT)
75f625b5 USER32! Getwindowtextlengtha (struct hwnd __*)
75f60898 USER32! Getwindowthreadprocessid (struct hwnd _ *, unsigned long *)

 

 

 

The specific options will not be explained much. If you are interested, please refer to the windbg help file. What public functions and variables are available in notepad? Use windbg to open notepad and try the X command :)

 

0: 001>X/T/V notepad! *