Switch kernel mode debug to user mode debug
来源:互联网 发布:艾司唑仑片淘宝有卖的 编辑:程序博客网 时间:2024/06/06 07:39
1) Process context - You're not necessarily in the correct process context when you break in with the debugger, so you need to force the correct process context somehow
2) The user mode module list and symbols aren't loaded by default, but you can load them with .reload /user
You're better off using .process /i if your target is XP and later, that will actually force a switch into the target process context (you hit Go in the debugger and then the target breaks in when that process context gets swapped in). If I need to set a breakpoint in a user mode process I usually:
.process /i <process address>
g
* Debuggee runs, breaks in sometime later *
.reload /user
ba e1 foo!bar
And you should be set.
Martin gave you a link to an alternate option, where you actually run a user mode debugger on the target machine and control it via the kernel connection. Very nifty as it gives you access to the user mode debugger commands as opposed to the kernel mode debugger commands, though it requires action on the target.
Try using command: ".process" and ".thread". For example:
1. for find process: !process 0 0 my_tool.exe
2. for switch context: .process /r/p <_EPROCESS_ADDR>
- Switch kernel mode debug to user mode debug
- NSLog DEBUG MODE OR RELEASE MODE?
- How to run JBoss (5.1) under debug mode
- CPU Switches from Kernel mode to User Mode on X86 : When and How?
- C#中报错 To debug this module, change its project build configuration to Debug mode.
- Open debug mode for Tomcat and use Eclipse to remote debug the application
- Avoid hardcoding the debug mode; leaving it out allows debug and release builds to automatically a
- Avoid hardcoding the debug mode; leaving it out allows debug and release builds to automatically a
- What is the difference between user mode and kernel mode, and real mode and protected mode?
- 操作系统中Kernel Mode和User Mode的区别
- Linux Kernel Mode与User Mode的实质
- Linux Kernel Mode与User Mode的实质
- 内核态(Kernel Mode)与用户态(User Mode)
- 内核态(Kernel Mode)与用户态(User Mode)
- 内核态(Kernel Mode)与用户态(User Mode)
- 内核态(Kernel Mode)与用户态(User Mode)
- 内核态(Kernel Mode)与用户态(User Mode)
- 内核态(Kernel Mode)与用户态(User Mode)
- script on ios
- 最详细的U-BOOT源码分析及移植
- 推荐:Evernote 保存网页应用等
- 回顾大学--大一JAVA实验--实验六 数组
- 如何学好C++语言
- Switch kernel mode debug to user mode debug
- C++/cli中 using与import 的用法
- memmove、memcpy和memccpy简介
- GCC使用手册及常用命令行
- 转 - OpenStack架构预览
- 两种SVN开发模式
- 好吧,我笑了
- linux shell 流程控制(条件if,循环【for,while】,选择【case】语句实例
- 推荐:SmartPen