windbg学习—-.ecxr

 

 

.ecxr 命令定位当前异常的上下文信息，并显示指定记录中的重要寄存器

 0:000> .ecxr

eax=10000000 ebx=7ffd9000 ecx=77386500 edx=00260174 esi=00000000 edi=00000000
eip=0040101d esp=0012ff48 ebp=0012ff88 iopl=0         nv up ei pl zr na pe nc
cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000             efl=00010246
*** WARNING: Unable to verify checksum for test.exe
*** ERROR: Module load completed but symbols could not be loaded for test.exe
test+0x101d:
0040101d c7050000000064000000 mov dword ptr ds:[0],64h ds:0023:00000000=????????