Pseudo Registers
Posted hjbf
tags:
篇首语:本文由小常识网(cha138.com)小编为大家整理,主要介绍了Pseudo Registers相关的知识,希望对你有一定的参考价值。
Pseudoregister |
Description |
@ERR |
Last error value; the same value returned by the |
@TIB |
Thread information block for the current thread; necessary because the debugger doesn‘t handle the "FS:0" format |
@CLK |
Undocumented clock register; usable only in the Watch window |
@EAX, @EBX, @ECX, @EDX, @ESI, @EDI, @EIP, @ESP, @EBP, @EFL |
Intel CPU registers |
@CS, @DS, @ES, @SS, @FS, @GS |
Intel CPU segment registers |
@ST0, @ST1, @ST2, @ST3, @ST4, @ST5, @ST6, @ST7 |
Intel CPU floating-point registers |
@ERR
最后错误值; 和GetLastError() API 函数一致
@TIB
当前线程信息; 在调试器无法处理”FS:0”格式的时候是必要的
@CLK
未列入文档的时钟寄存器; 只是在Watch窗口适用
@EAX, @EBX, @ECX, @EDX, @ESI, @EDI, @EIP, @ESP, @EBP, @EFL
Intel CPU 寄存器
@CS, @DS, @ES, @SS, @FS, @GS
Intel CPU 段寄存器
@ST0, @ST1, @ST2, @ST3, @ST4, @ST5, @ST6, @ST7
Intel CPU 浮点寄存器
其中@TIB很有用,可以用在多线程调试的时候作为断点的条件变量.这样就可以只观察一个线程的执行情况.
另一个常用的@err,hr
(X64 Debugging With Pseudo Variables And Format Specifiers)
Pseudo Variable Description
$handles Number of handles to kernel objects
$vframe Current stack frame address
$TID Current thread identifier
$registername Contents of specified register
$clk Time in clock cycles
$user Process and thread token information
Specifier Description
D Decimal
U Unsigned decimal
O Octal
X Hexadecimal
F Floating point
E Scientific notation
C Character
S Character string
Su Unicode string
s8 UTF-8 string
Hr HRESULT or Win32 error code
wc Windows class
wm Windows message
! Raw format
以上是关于Pseudo Registers的主要内容,如果未能解决你的问题,请参考以下文章
Pymodbus TCP `read_holding_registers` 返回陈旧/旧数据
《Learning Spatio-Temporal Representation with Pseudo-3D Residual Networks》算法详解
angr 03_angr_symbolic_registers 寄存器符号化