-
-
[求助]Memory access error in 'u 地址'
-
发表于: 2015-5-8 17:41 2481
-
kd> !process 0 0 win32.exe
PROCESS 873f2710 SessionId: 1 Cid: 0cf4 Peb: 7ffd4000 ParentCid: 0cb8
DirBase: 3f2eb4c0 ObjectTable: 95bf2a50 HandleCount: 25.
Image: win32.exe
kd> ba e1 /p 873f2710 40146d
kd> .process /i 873f2710
You need to continue execution (press 'g' <enter>) for the context
to be switched. When the debugger breaks in again, you will be in
the new process context.
kd> g
Break instruction exception - code 80000003 (first chance)
*******************************************************************************
* *
* You are seeing this message because you pressed either *
* CTRL+C (if you run kd.exe) or, *
* CTRL+BREAK (if you run WinDBG), *
* on your debugger machine's keyboard. *
* *
* THIS IS NOT A BUG OR A SYSTEM CRASH *
* *
* If you did not intend to break into the debugger, press the "g" key, then *
* press the "Enter" key now. This message might immediately reappear. If it *
* does, press "g" and "Enter" again. *
* *
*******************************************************************************
nt!RtlpBreakWithStatusInstruction:
84085110 cc int 3
kd> g
Break instruction exception - code 80000003 (first chance)
nt!RtlpBreakWithStatusInstruction:
84085110 cc int 3
kd> u 40146d
0040146d ?? ???
^ Memory access error in 'u 40146d'
硬件断点设置成功了,也进入了进程win32.exe,怎么不能显示地址的内容啊?
PROCESS 873f2710 SessionId: 1 Cid: 0cf4 Peb: 7ffd4000 ParentCid: 0cb8
DirBase: 3f2eb4c0 ObjectTable: 95bf2a50 HandleCount: 25.
Image: win32.exe
kd> ba e1 /p 873f2710 40146d
kd> .process /i 873f2710
You need to continue execution (press 'g' <enter>) for the context
to be switched. When the debugger breaks in again, you will be in
the new process context.
kd> g
Break instruction exception - code 80000003 (first chance)
*******************************************************************************
* *
* You are seeing this message because you pressed either *
* CTRL+C (if you run kd.exe) or, *
* CTRL+BREAK (if you run WinDBG), *
* on your debugger machine's keyboard. *
* *
* THIS IS NOT A BUG OR A SYSTEM CRASH *
* *
* If you did not intend to break into the debugger, press the "g" key, then *
* press the "Enter" key now. This message might immediately reappear. If it *
* does, press "g" and "Enter" again. *
* *
*******************************************************************************
nt!RtlpBreakWithStatusInstruction:
84085110 cc int 3
kd> g
Break instruction exception - code 80000003 (first chance)
nt!RtlpBreakWithStatusInstruction:
84085110 cc int 3
kd> u 40146d
0040146d ?? ???
^ Memory access error in 'u 40146d'
硬件断点设置成功了,也进入了进程win32.exe,怎么不能显示地址的内容啊?
[培训]内核驱动高级班,冲击BAT一流互联网大厂工作,每周日13:00-18:00直播授课
赞赏
他的文章
- [求助]写一个能控制explore.exe的程序 3192
- [求助]如何判断函数到底是哪个进程执行的 2706
- [求助]Memory access error in 'u 地址' 2482
- [求助]CVE-2014-4113下断点 3175
- [求助]怎么绕过UAC 3451
看原图
赞赏
雪币:
留言: