Quantcast
Channel: 看雪安全论坛
Viewing all articles
Browse latest Browse all 9556

调试逆向 【求助】AeDebug抓dump的问题

$
0
0
我设置了ntsd作为AeDebug自动dump

命令行如下:
ntsd.exe -p %ld -e %ld -g -noio -c ".dump /ma /u c:\dump\crash.dmp;q"

但是抓到的dump文件,全都是断点,而不是程序异常,而且只有1个线程的信息

EXCEPTION_RECORD: ffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 00000000
ExceptionCode: 80000003 (Break instruction exception)
ExceptionFlags: 00000000
NumberParameters: 0

016aff64 7c8024c1 00000064 00000000 016affb8 ntdll!KiFastSystemCallRet
016aff74 013681c8 00000064 00000000 00000000 kernel32!Sleep+0xf

这是为什么?

Viewing all articles
Browse latest Browse all 9556

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>