'What do the columns represent for the following Windbg command uf nt!KiSwapContext
What do the first three columns stand for after entering the following command
uf nt!KiSwapContext ?
Here is the result displayed in the Windbg command prompt:
lkd> uf nt!KiSwapContext
nt!KiSwapContext:
fffff803`5c143fa0 4881ec38010000 sub rsp,138h
fffff803`5c143fa7 488d842400010000 lea rax,[rsp+100h]
fffff803`5c143faf 0f29742430 movaps xmmword ptr [rsp+30h],xmm6
fffff803`5c143fb4 0f297c2440 movaps xmmword ptr [rsp+40h],xmm7
fffff803`5c143fb9 440f29442450 movaps xmmword ptr [rsp+50h],xmm8
fffff803`5c143fbf 440f294c2460 movaps xmmword ptr [rsp+60h],xmm9
fffff803`5c143fc5 440f29542470 movaps xmmword ptr [rsp+70h],xmm10
.....
Taking for example the following line as shown above what does the first three column addresses stand for ? Could someone also recommend a good place to start learning about the output rendered by Windbg if I wanted to try other Windbg commands ?
fffff803`5c143fa0 4881ec38010000 sub rsp,138h
Sources
This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.
Source: Stack Overflow
| Solution | Source |
|---|