DebugExt Command Catalog

DebugExt (de.dll) Command Catalog

📌 Full Command Reference: Read the complete public document at guides/RE_Commands.md.

DebugExt (de.dll) brings x64dbg-style analysis, DML-colorized output, telescoping pointer analysis, and security auditing directly into WinDbg / CDB sessions.

---

Extension Commands (!de.*)

Command	Description
!de.disasm $ip L20	Disassemble with DML syntax colorization and symbol annotations.
!de.strref	Scan module code/data for ASCII and UTF-16 string references.
!de.xrefs <addr>	Locate code cross-references (CALL, JMP, RIP-relative) to target address.
!de.peb	Audit Process Environment Block, BeingDebugged, and NtGlobalFlag mitigations.
!de.memmap	Virtual memory protection map highlighting RWX regions.
!de.hooks	Audit inline detour hooks, IAT patches, dynamic code pages, and unmapped code.
!de.regs	Display colorized 64-bit register state grid.
!de.dxhelp	Display DebugExt built-in interactive help catalog.

---

Navigation & Stepping Shortcuts

Command	Description
si	Step Into instruction.
so	Step Over instruction.
su / ret	Step Out / Run until current function returns.
toaddr <address>	Run execution until target address is hit.