Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
The u*
commands display an assembly translation of the specified program code in memory.
This command should not be confused with the ~u (Unfreeze Thread) command.
u[u|b] Range
u[u|b] Address
u[u|b]
Parameters
Range
Specifies the memory range that contains the instructions to disassemble. For more information about the syntax, see Address and Address Range Syntax. If you use the b flag, you must specify Range by using the "Address LLength" syntax, not the "Address1 Address2" syntax.
Address
Specifies the beginning of the memory range to disassemble. Eight instructions on an x86-based processor are unassembled. For more information about the syntax, see Address and Address Range Syntax.
b
Determines the memory range to disassemble by counting backward. If ub Address is used, the disassembled range will be the eight instructions preceding Address. If a range is specified using the syntax ub Address LLength, the disassembled range will be the range of the specified length ending at Address.
u
Specifies that the disassembly will continue even if there is a memory read error.
Environment
Item | Description |
---|---|
Modes | User mode, kernel mode |
Targets | Live, crash dump |
Platforms | All |
Additional Information
For more information about assembly debugging and related commands, see Debugging in Assembly Mode and Annotated x86 Disassembly.
Remarks
If you do not specify a parameter for the u command, the disassembly begins at the current address and extends eight instructions on an x86-based or x64-based processor. When you use ub
without a parameter, the disassembly includes the eight instructions before the current address. For more information on working with debugger commands, see Using Debugger Commands.
Do not confuse this command with the up (Unassemble from Physical Memory). The u command disassembles only virtual memory, while the up command disassembles only physical memory.