Nothing Is Secret

用Windbg替代VSJitDebugger

习惯了Windbg，准备用Windbg替代Vistual Studio的VSJitDebugger.exe来做Postmortem Debugger。但尝试了下面两种办法都没有成功：

  1. 1, Windbg –I （设Windbg为默认的debugger应对Unhandled User Mode Exceptions）
  2. 2, 直接改注册表:[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AeDebug]

直到在http://msdn.microsoft.com/en-us/library/ff542967.aspx里才看到，64位系统里对64位和32位程序有不同的设置：

1, A failing 64-bit application will be debugged according to the settings stored in the \\HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AeDebug key.

2, A failing 32-bit application will be debugged according to the settings stored in the \\HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\AeDebug key. However, if the Debugger value in this key specifies an application in the %windir%\system32 directory, Windows will look in %windir%\syswow64 instead.

  • 将两处的AeDebug都设成Windbg后，分别对64位和32程序进行测试，Windbg被加载并成功attach到问题进程上。

    • D:\Documents> type AeDebug-Windbg.reg

    Windows Registry Editor Version 5.00

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AeDebug]
    "UserDebuggerHotKey"=dword:00000000
    "Debugger"="\"C:\\Program Files\\Debugging Tools for Windows (x64)\\windbg.exe\" -p %ld -e %ld -g"
    "Auto"="1"

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AeDebug\AutoExclusionList]
    "DWM.exe"=dword:00000001


    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\AeDebug]
    "UserDebuggerHotKey"=dword:00000000
    "Debugger"="\"C:\\Program Files\\Debugging Tools for Windows (x64)\\windbg.exe\" -p %ld -e %ld -g"
    "Auto"="1"

    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\AeDebug\AutoExclusionList]
    "DWM.exe"=dword:00000001

    23,250 条评论

    37. Хороший разбор SEO-услуг от ITB Company. Автор подробно останавливается на важности технической оптимизации, пользовательского опыта и локального SEO для Екатеринбурга. Отдельно понравился блок про контент-стратегию — почему полезные статьи работают лучше простого перечисления ключей. Вот ссылка: https://sah-zx.ru/stati/kak-seo-prodvizhenie-s-itb-company-pomogaet-biznesu-ekaterinburga-rasti/

    43. This is really interesting, You are an excessively professional blogger. I’ve joined your feed and stay up for seeking more of your fantastic post. Additionally, I’ve shared your web site in my social networks
      Timothy Malmros Genach

    发表回复

    您的邮箱地址不会被公开。 必填项已用 * 标注