dea debug打得断点第一次可以进入,第二次不能进入

小白刚刚试用版idea,但是在debug的时候,断点只有第一次能够进入,第二次去不能进入,以为是idea的bug,翻阅啦好多的博客,和论坛,发现没有人解决这个问题,其实是debug的设置问题。只要改一下设置,断点就可以,再次进入啦。分享一下,希望遇到相同问题的不要纠结。





原文地址:http://bbs.youkuaiyun.com/topics/392003661

.text:0000000140070C34 .text:0000000140070C34 ; __int64 __usercall KiDispatchException@<rax>(PEXCEPTION_RECORD ExceptionRecord@<rcx>, char) .text:0000000140070C34 KiDispatchException proc near ; CODE XREF: KiInitializeUserApc+342↓p .text:0000000140070C34 ; KiRaiseException+1A8↓p .text:0000000140070C34 ; KiExceptionDispatch+BD↓p .text:0000000140070C34 ; KiFastFailDispatch+DF↓p .text:0000000140070C34 ; KiParkUmsThread+3D6↓p .text:0000000140070C34 ; PspInitializeThunkContext+14926F↓p .text:0000000140070C34 ; KiSwapToUmsThread+420↓p .text:0000000140070C34 ; DATA XREF: .rdata:00000001402ACCA4↓o .text:0000000140070C34 ; .pdata:000000014037BF38↓o .text:0000000140070C34 ; sub_1407AAAC8+44D1↓o .text:0000000140070C34 ; RtlpFunctionAddressTableEntry+23↓o .text:0000000140070C34 .text:0000000140070C34 BugCheckParameter4= qword ptr -1B0h .text:0000000140070C34 var_1A8= qword ptr -1A8h .text:0000000140070C34 var_1A0= dword ptr -1A0h .text:0000000140070C34 var_198= qword ptr -198h .text:0000000140070C34 var_190= dword ptr -190h .text:0000000140070C34 var_188= qword ptr -188h .text:0000000140070C34 var_180= dword ptr -180h .text:0000000140070C34 var_17C= dword ptr -17Ch .text:0000000140070C34 var_178= dword ptr -178h .text:0000000140070C34 var_170= qword ptr -170h .text:0000000140070C34 var_168= qword ptr -168h .text:0000000140070C34 var_160= qword ptr -160h .text:0000000140070C34 var_158= qword ptr -158h .text:0000000140070C34 var_150= qword ptr -150h .text:0000000140070C34 var_148= qword ptr -148h .text:0000000140070C34 var_140= qword ptr -140h .text:0000000140070C34 var_138= qword ptr -138h .text:0000000140070C34 var_130= qword ptr -130h .text:0000000140070C34 var_128= qword ptr -128h .text:0000000140070C34 var_120= qword ptr -120h .text:0000000140070C34 var_118= qword ptr -118h .text:0000000140070C34 var_110= qword ptr -110h .text:0000000140070C34 var_108= qword ptr -108h .text:0000000140070C34 var_100= qword ptr -100h .text:0000000140070C34 var_F0= dword ptr -0F0h .text:0000000140070C34 var_E0= qword ptr -0E0h .text:0000000140070C34 var_D8= dword ptr -0D8h .text:0000000140070C34 var_D0= byte ptr -0D0h .text:0000000140070C34 var_58= byte ptr -58h .text:0000000140070C34 var_50= xmmword ptr -50h .text:0000000140070C34 var_40= qword ptr -40h .text:0000000140070C34 var_38= qword ptr -38h .text:0000000140070C34 arg_20= byte ptr 30h .text:0000000140070C34 .text:0000000140070C34 ; FUNCTION CHUNK AT .text:000000014015BC0C SIZE 000000C3 BYTES .text:0000000140070C34 ; FUNCTION CHUNK AT .text:000000014018730E SIZE 00000120 BYTES .text:0000000140070C34 .text:0000000140070C34 ; __unwind { // __GSHandlerCheck_SEH .text:0000000140070C34 40 55 push rbp .text:0000000140070C36 53 push rbx .text:0000000140070C37 56 push rsi .text:0000000140070C38 41 54 push r12 .text:0000000140070C3A 41 55 push r13 .text:0000000140070C3C 41 56 push r14 .text:0000000140070C3E 41 57 push r15 .text:0000000140070C40 48 81 EC A0 01 00 00 sub rsp, 1A0h .text:0000000140070C47 48 8D 6C 24 30 lea rbp, [rsp+30h] .text:0000000140070C4C 48 8B 05 45 44 2A 00 mov rax, cs:__security_cookie .text:0000000140070C53 48 33 C5 xor rax, rbp .text:0000000140070C56 48 89 85 68 01 00 00 mov [rbp+1A0h+var_38], rax .text:0000000140070C5D 45 8A F9 mov r15b, r9b .text:0000000140070C60 49 8B F0 mov rsi, r8 .text:0000000140070C63 4C 8B E2 mov r12, rdx .text:0000000140070C66 48 8B D9 mov rbx, rcx .text:0000000140070C69 48 89 4D 30 mov [rbp+1A0h+var_170], rcx .text:0000000140070C6D 48 89 95 80 00 00 00 mov [rbp+1A0h+var_120], rdx .text:0000000140070C74 4C 89 45 58 mov [rbp+1A0h+var_148], r8 .text:0000000140070C78 44 88 4D 00 mov byte ptr [rbp+1A0h+var_1A0], r9b .text:0000000140070C7C 65 48 8B 04 25 88 01 00 00 mov rax, gs:188h .text:0000000140070C85 48 8B 80 B8 00 00 00 mov rax, [rax+0B8h] .text:0000000140070C8C 48 89 45 08 mov [rbp+1A0h+var_198], rax .text:0000000140070C90 48 89 45 70 mov [rbp+1A0h+var_130], rax .text:0000000140070C94 65 FF 04 25 B4 5C 00 00 inc dword ptr gs:5CB4h .text:0000000140070C9C 41 BD 1F 00 10 00 mov r13d, 10001Fh .text:0000000140070CA2 44 89 6D 10 mov [rbp+1A0h+var_190], r13d .text:0000000140070CA6 45 84 C9 test r9b, r9b .text:0000000140070CA9 0F 85 CC 04 00 00 jnz loc_14007117B .text:0000000140070CA9 .text:0000000140070CAF .text:0000000140070CAF loc_140070CAF: ; CODE XREF: KiDispatchException+563↓j .text:0000000140070CAF 48 8D 55 24 lea rdx, [rbp+1A0h+var_17C] .text:0000000140070CB3 41 8B CD mov ecx, r13d .text:0000000140070CB6 E8 35 9A 03 00 call RtlGetExtendedContextLength .text:0000000140070CB6 .text:0000000140070CBB 8B 45 24 mov eax, [rbp+1A0h+var_17C] .text:0000000140070CBE 48 8D 48 0F lea rcx, [rax+0Fh] .text:0000000140070CC2 48 3B C8 cmp rcx, rax .text:0000000140070CC5 77 0A ja short loc_140070CD1 .text:0000000140070CC5 .text:0000000140070CC7 48 B9 F0 FF FF FF FF FF FF 0F mov rcx, 0FFFFFFFFFFFFFF0h .text:0000000140070CC7 .text:0000000140070CD1 .text:0000000140070CD1 loc_140070CD1: ; CODE XREF: KiDispatchException+91↑j .text:0000000140070CD1 48 83 E1 F0 and rcx, 0FFFFFFFFFFFFFFF0h .text:0000000140070CD5 48 8B C1 mov rax, rcx .text:0000000140070CD8 E8 23 1F 0E 00 call __chkstk .text:0000000140070CD8 .text:0000000140070CDD 48 2B E1 sub rsp, rcx .text:0000000140070CE0 4C 8D 74 24 30 lea r14, [rsp+1D0h+var_1A0] .text:0000000140070CE5 4C 89 75 68 mov [rbp+1A0h+var_138], r14 .text:0000000140070CE9 4C 8D 45 40 lea r8, [rbp+1A0h+var_160] .text:0000000140070CED 41 8B D5 mov edx, r13d .text:0000000140070CF0 49 8B CE mov rcx, r14 .text:0000000140070CF3 E8 AC 9A 03 00 call RtlInitializeExtendedContext .text:0000000140070CF3 .text:0000000140070CF8 89 45 20 mov [rbp+1A0h+var_180], eax .text:0000000140070CFB 4D 8B C6 mov r8, r14 .text:0000000140070CFE 49 8B D4 mov rdx, r12 .text:0000000140070D01 48 8B CE mov rcx, rsi .text:0000000140070D04 E8 DF 1B 00 00 call KeContextFromKframes .text:0000000140070D04 .text:0000000140070D09 81 3B 03 00 00 80 cmp dword ptr [rbx], 80000003h .text:0000000140070D0F 0F 84 9E 04 00 00 jz loc_1400711B3 .text:0000000140070D0F .text:0000000140070D15 .text:0000000140070D15 loc_140070D15: ; CODE XREF: KiDispatchException+586↓j .text:0000000140070D15 45 84 FF test r15b, r15b .text:0000000140070D18 0F 85 7E 04 00 00 jnz loc_14007119C .text:0000000140070D18 .text:0000000140070D1E .text:0000000140070D1E loc_140070D1E: ; CODE XREF: KiDispatchException+574↓j .text:0000000140070D1E 45 8A C7 mov r8b, r15b .text:0000000140070D21 49 8B D6 mov rdx, r14 ; int .text:0000000140070D24 48 8B CB mov rcx, rbx ; int .text:0000000140070D27 E8 FC 04 00 00 call KiPreprocessFault .text:0000000140070D27 .text:0000000140070D2C 84 C0 test al, al .text:0000000140070D2E 0F 85 8B 04 00 00 jnz loc_1400711BF .text:0000000140070D2E .text:0000000140070D34 .text:0000000140070D34 loc_140070D34: ; CODE XREF: KiDispatchException+1166FC↓j .text:0000000140070D34 45 84 FF test r15b, r15b .text:0000000140070D37 75 4C jnz short loc_140070D85 .text:0000000140070D37 .text:0000000140070D39 44 38 BD D0 01 00 00 cmp [rbp+1A0h+arg_20], r15b .text:0000000140070D40 0F 84 EF 65 11 00 jz loc_140187335 .text:0000000140070D40 .text:0000000140070D46 44 88 7C 24 28 mov byte ptr [rsp+1D0h+var_1A8], r15b .text:0000000140070D4B 44 88 7C 24 20 mov byte ptr [rsp+1D0h+BugCheckParameter4], r15b .text:0000000140070D50 4D 8B CE mov r9, r14 .text:0000000140070D53 4C 8B C3 mov r8, rbx .text:0000000140070D56 49 8B D4 mov rdx, r12 .text:0000000140070D59 48 8B CE mov rcx, rsi .text:0000000140070D5C 48 8B 05 2D 34 35 00 mov rax, cs:KiDebugRoutine .text:0000000140070D63 FF D0 call rax ; KdpStub .text:0000000140070D63 .text:0000000140070D65 84 C0 test al, al .text:0000000140070D67 0F 85 52 04 00 00 jnz loc_1400711BF .text:0000000140070D67 .text:0000000140070D6D 49 8B D6 mov rdx, r14 ; Context .text:0000000140070D70 48 8B CB mov rcx, rbx ; ExceptionRecord .text:0000000140070D73 E8 F0 2E 00 00 call RtlDispatchException .text:0000000140070D73 .text:0000000140070D78 84 C0 test al, al .text:0000000140070D7A 0F 84 B5 65 11 00 jz loc_140187335 .text:0000000140070D7A .text:0000000140070D80 E9 3A 04 00 00 jmp loc_1400711BF .text:0000000140070D80 .text:0000000140070D85 ; --------------------------------------------------------------------------- .text:0000000140070D85 .text:0000000140070D85 loc_140070D85: ; CODE XREF: KiDispatchException+103↑j .text:0000000140070D85 49 8B 96 98 00 00 00 mov rdx, [r14+98h] .text:0000000140070D8C 48 89 55 18 mov [rbp+1A0h+var_188], rdx .text:0000000140070D90 48 89 55 38 mov [rbp+1A0h+var_168], rdx .text:0000000140070D94 48 8B 45 08 mov rax, [rbp+1A0h+var_198] .text:0000000140070D98 8B 80 AC 06 00 00 mov eax, [rax+6ACh] .text:0000000140070D9E A8 01 test al, 1 .text:0000000140070DA0 75 3D jnz short loc_140070DDF .text:0000000140070DA0 .text:0000000140070DA2 65 48 8B 04 25 88 01 00 00 mov rax, gs:188h .text:0000000140070DAB 48 8B 88 B8 00 00 00 mov rcx, [rax+0B8h] .text:0000000140070DB2 48 83 B9 28 04 00 00 00 cmp qword ptr [rcx+428h], 0 .text:0000000140070DBA 74 0C jz short loc_140070DC8 .text:0000000140070DBA .text:0000000140070DBC 81 3B 02 00 00 80 cmp dword ptr [rbx], 80000002h .text:0000000140070DC2 0F 84 B3 65 11 00 jz loc_14018737B .text:0000000140070DC2 .text:0000000140070DC8 .text:0000000140070DC8 loc_140070DC8: ; CODE XREF: KiDispatchException+186↑j .text:0000000140070DC8 ; KiDispatchException+116751↓j .text:0000000140070DC8 41 0F B7 46 38 movzx eax, word ptr [r14+38h] .text:0000000140070DCD B9 F8 FF 00 00 mov ecx, 0FFF8h .text:0000000140070DD2 66 23 C1 and ax, cx .text:0000000140070DD5 66 83 F8 20 cmp ax, 20h ; ' ' .text:0000000140070DD9 0F 84 BB 65 11 00 jz loc_14018739A .text:0000000140070DD9 .text:0000000140070DDF .text:0000000140070DDF loc_140070DDF: ; CODE XREF: KiDispatchException+16C↑j .text:0000000140070DDF ; KiDispatchException+116794↓j .text:0000000140070DDF 8B 4B 18 mov ecx, [rbx+18h] .text:0000000140070DE2 48 83 C1 04 add rcx, 4 .text:0000000140070DE6 48 8D 0C CB lea rcx, [rbx+rcx*8] ; void * .text:0000000140070DEA 4C 8B C3 mov r8, rbx .text:0000000140070DED 4C 2B C1 sub r8, rcx .text:0000000140070DF0 49 81 C0 98 00 00 00 add r8, 98h ; Size .text:0000000140070DF7 33 D2 xor edx, edx ; Val .text:0000000140070DF9 E8 82 77 0E 00 call memset .text:0000000140070DF9 .text:0000000140070DFE 80 BD D0 01 00 00 00 cmp [rbp+1A0h+arg_20], 0 .text:0000000140070E05 0F 84 CD 03 00 00 jz loc_1400711D8 .text:0000000140070E05 .text:0000000140070E0B 48 8B CB mov rcx, rbx .text:0000000140070E0E E8 ED 21 6B 00 call KdIsThisAKdTrap .text:0000000140070E0E .text:0000000140070E13 65 48 8B 0C 25 88 01 00 00 mov rcx, gs:188h .text:0000000140070E1C 48 8B 91 B8 00 00 00 mov rdx, [rcx+0B8h] .text:0000000140070E23 48 83 BA 20 04 00 00 00 cmp qword ptr [rdx+420h], 0 .text:0000000140070E2B 0F 85 9C 65 11 00 jnz loc_1401873CD .text:0000000140070E2B .text:0000000140070E31 8A 0D BC 9A 2C 00 mov cl, cs:KdIgnoreUmExceptions .text:0000000140070E37 84 C9 test cl, cl .text:0000000140070E39 0F 85 8E 65 11 00 jnz loc_1401873CD .text:0000000140070E39 .text:0000000140070E3F .text:0000000140070E3F loc_140070E3F: ; CODE XREF: KiDispatchException+1167A1↓j .text:0000000140070E3F C6 44 24 28 00 mov byte ptr [rsp+1D0h+var_1A8], 0 .text:0000000140070E44 44 88 7C 24 20 mov byte ptr [rsp+1D0h+BugCheckParameter4], r15b .text:0000000140070E49 4D 8B CE mov r9, r14 .text:0000000140070E4C 4C 8B C3 mov r8, rbx .text:0000000140070E4F 49 8B D4 mov rdx, r12 .text:0000000140070E52 48 8B CE mov rcx, rsi .text:0000000140070E55 48 8B 05 34 33 35 00 mov rax, cs:KiDebugRoutine .text:0000000140070E5C FF D0 call rax ; KdpStub .text:0000000140070E5C .text:0000000140070E5E 84 C0 test al, al .text:0000000140070E60 0F 85 59 03 00 00 jnz loc_1400711BF .text:0000000140070E60 .text:0000000140070E66 .text:0000000140070E66 loc_140070E66: ; CODE XREF: KiDispatchException+11679B↓j .text:0000000140070E66 45 33 C0 xor r8d, r8d .text:0000000140070E69 B2 01 mov dl, 1 .text:0000000140070E6B 48 8B CB mov rcx, rbx .text:0000000140070E6E E8 61 5B 4B 00 call DbgkForwardException .text:0000000140070E6E .text:0000000140070E73 84 C0 test al, al .text:0000000140070E75 0F 85 DE 02 00 00 jnz loc_140071159 .text:0000000140070E75 .text:0000000140070E7B 48 8B 45 08 mov rax, [rbp+1A0h+var_198] .text:0000000140070E7F 48 83 B8 F0 06 00 00 00 cmp qword ptr [rax+6F0h], 0 .text:0000000140070E87 0F 85 4D 65 11 00 jnz loc_1401873DA .text:0000000140070E87 .text:0000000140070E8D .text:0000000140070E8D loc_140070E8D: ; CODE XREF: KiDispatchException+1167CB↓j .text:0000000140070E8D FA cli .text:0000000140070E8E 0F BA B6 78 01 00 00 08 btr dword ptr [rsi+178h], 8 .text:0000000140070E96 FB sti .text:0000000140070E97 C7 85 B0 00 00 00 05 00 00 C0 mov [rbp+1A0h+var_F0], 0C0000005h .text:0000000140070EA1 4C 8B 65 18 mov r12, [rbp+1A0h+var_188] .text:0000000140070EA1 .text:0000000140070EA5 .text:0000000140070EA5 loc_140070EA5: ; CODE XREF: KiDispatchException+50C↓j .text:0000000140070EA5 90 nop .text:0000000140070EA5 .text:0000000140070EA6 .text:0000000140070EA6 loc_140070EA6: ; DATA XREF: .rdata:00000001402ACC8C↓o .text:0000000140070EA6 ; __try { // __except at loc_1400710B4 .text:0000000140070EA6 49 8B D4 mov rdx, r12 .text:0000000140070EA9 48 89 55 48 mov [rbp+1A0h+var_158], rdx .text:0000000140070EAD 41 8B C5 mov eax, r13d .text:0000000140070EB0 B9 40 00 10 00 mov ecx, 100040h .text:0000000140070EB5 23 C1 and eax, ecx .text:0000000140070EB7 3B C1 cmp eax, ecx .text:0000000140070EB9 75 16 jnz short loc_140070ED1 .text:0000000140070EB9 .text:0000000140070EBB 48 8B 45 40 mov rax, [rbp+1A0h+var_160] .text:0000000140070EBF 8B 48 14 mov ecx, [rax+14h] .text:0000000140070EC2 48 2B D1 sub rdx, rcx .text:0000000140070EC5 48 89 55 48 mov [rbp+1A0h+var_158], rdx .text:0000000140070EC9 48 83 E2 C0 and rdx, 0FFFFFFFFFFFFFFC0h .text:0000000140070ECD 48 89 55 48 mov [rbp+1A0h+var_158], rdx .text:0000000140070ECD .text:0000000140070ED1 .text:0000000140070ED1 loc_140070ED1: ; CODE XREF: KiDispatchException+285↑j .text:0000000140070ED1 48 8D 42 D8 lea rax, [rdx-28h] .text:0000000140070ED5 48 83 E0 F0 and rax, 0FFFFFFFFFFFFFFF0h .text:0000000140070ED9 48 89 45 18 mov [rbp+1A0h+var_188], rax .text:0000000140070EDD 48 89 45 78 mov [rbp+1A0h+var_128], rax .text:0000000140070EE1 4C 8D 80 60 FF FF FF lea r8, [rax-0A0h] .text:0000000140070EE8 4C 89 45 08 mov [rbp+1A0h+var_198], r8 .text:0000000140070EEC 4C 89 85 98 00 00 00 mov [rbp+1A0h+var_108], r8 .text:0000000140070EF3 49 83 C0 E0 add r8, 0FFFFFFFFFFFFFFE0h .text:0000000140070EF7 4C 89 85 90 00 00 00 mov [rbp+1A0h+var_110], r8 .text:0000000140070EFE 4D 8D B8 30 FB FF FF lea r15, [r8-4D0h] .text:0000000140070F05 4C 89 7D 60 mov [rbp+1A0h+var_140], r15 .text:0000000140070F09 49 8B C7 mov rax, r15 .text:0000000140070F0C 49 2B C0 sub rax, r8 .text:0000000140070F0F 89 85 50 01 00 00 mov dword ptr [rbp+1A0h+var_50], eax .text:0000000140070F15 49 8B CC mov rcx, r12 .text:0000000140070F18 49 2B CF sub rcx, r15 .text:0000000140070F1B 89 8D 54 01 00 00 mov dword ptr [rbp+1A0h+var_50+4], ecx .text:0000000140070F21 89 85 58 01 00 00 mov dword ptr [rbp+1A0h+var_50+8], eax .text:0000000140070F27 C7 85 5C 01 00 00 D0 04 00 00 mov dword ptr [rbp+1A0h+var_50+0Ch], 4D0h .text:0000000140070F31 48 8B C2 mov rax, rdx .text:0000000140070F34 49 2B C0 sub rax, r8 .text:0000000140070F37 89 85 60 01 00 00 mov dword ptr [rbp+1A0h+var_40], eax .text:0000000140070F3D 49 8B C4 mov rax, r12 .text:0000000140070F40 48 2B C2 sub rax, rdx .text:0000000140070F43 89 85 64 01 00 00 mov dword ptr [rbp+1A0h+var_40+4], eax .text:0000000140070F49 48 8D 41 FF lea rax, [rcx-1] .text:0000000140070F4D 48 3D FE 0F 00 00 cmp rax, 0FFEh .text:0000000140070F53 0F 87 25 01 00 00 ja loc_14007107E .text:0000000140070F53 .text:0000000140070F59 41 F6 C7 0F test r15b, 0Fh .text:0000000140070F5D 0F 85 16 01 00 00 jnz loc_140071079 .text:0000000140070F5D .text:0000000140070F63 4C 3B 3D 56 42 35 00 cmp r15, cs:MmUserProbeAddress .text:0000000140070F6A 4C 0F 43 3D 4E 42 35 00 cmovnb r15, cs:MmUserProbeAddress .text:0000000140070F72 41 8A 07 mov al, [r15] .text:0000000140070F75 41 88 07 mov [r15], al .text:0000000140070F78 41 8A 44 0F FF mov al, [r15+rcx-1] .text:0000000140070F7D 41 88 44 0F FF mov [r15+rcx-1], al .text:0000000140070F82 48 8B 4D 78 mov rcx, [rbp+1A0h+var_128] .text:0000000140070F86 48 8B 95 98 00 00 00 mov rdx, [rbp+1A0h+var_108] .text:0000000140070F8D 4C 8B 7D 60 mov r15, [rbp+1A0h+var_140] .text:0000000140070F8D .text:0000000140070F91 .text:0000000140070F91 loc_140070F91: ; CODE XREF: KiDispatchException+463↓j .text:0000000140070F91 4C 89 61 18 mov [rcx+18h], r12 .text:0000000140070F95 49 8B 86 F8 00 00 00 mov rax, [r14+0F8h] .text:0000000140070F9C 48 89 01 mov [rcx], rax .text:0000000140070F9F 0F 10 03 movups xmm0, xmmword ptr [rbx] .text:0000000140070FA2 0F 11 02 movups xmmword ptr [rdx], xmm0 .text:0000000140070FA5 0F 10 4B 10 movups xmm1, xmmword ptr [rbx+10h] .text:0000000140070FA9 0F 11 4A 10 movups xmmword ptr [rdx+10h], xmm1 .text:0000000140070FAD 0F 10 43 20 movups xmm0, xmmword ptr [rbx+20h] .text:0000000140070FB1 0F 11 42 20 movups xmmword ptr [rdx+20h], xmm0 .text:0000000140070FB5 0F 10 4B 30 movups xmm1, xmmword ptr [rbx+30h] .text:0000000140070FB9 0F 11 4A 30 movups xmmword ptr [rdx+30h], xmm1 .text:0000000140070FBD 0F 10 43 40 movups xmm0, xmmword ptr [rbx+40h] .text:0000000140070FC1 0F 11 42 40 movups xmmword ptr [rdx+40h], xmm0 .text:0000000140070FC5 0F 10 4B 50 movups xmm1, xmmword ptr [rbx+50h] .text:0000000140070FC9 0F 11 4A 50 movups xmmword ptr [rdx+50h], xmm1 .text:0000000140070FCD 0F 10 43 60 movups xmm0, xmmword ptr [rbx+60h] .text:0000000140070FD1 0F 11 42 60 movups xmmword ptr [rdx+60h], xmm0 .text:0000000140070FD5 B8 80 00 00 00 mov eax, 80h .text:0000000140070FDA 48 03 D0 add rdx, rax .text:0000000140070FDD 0F 10 43 70 movups xmm0, xmmword ptr [rbx+70h] .text:0000000140070FE1 0F 11 42 F0 movups xmmword ptr [rdx-10h], xmm0 .text:0000000140070FE5 0F 10 0C 03 movups xmm1, xmmword ptr [rbx+rax] .text:0000000140070FE9 0F 11 0A movups xmmword ptr [rdx], xmm1 .text:0000000140070FEC 48 8B 44 03 10 mov rax, [rbx+rax+10h] .text:0000000140070FF1 48 89 42 10 mov [rdx+10h], rax .text:0000000140070FF5 48 83 64 24 28 00 and [rsp+1D0h+var_1A8], 0 .text:0000000140070FFB 48 8B 45 40 mov rax, [rbp+1A0h+var_160] .text:0000000140070FFF 48 89 44 24 20 mov [rsp+1D0h+BugCheckParameter4], rax .text:0000000140071004 45 8B CD mov r9d, r13d .text:0000000140071007 4C 8D 85 50 01 00 00 lea r8, [rbp+1A0h+var_50] .text:000000014007100E 48 8B 9D 90 00 00 00 mov rbx, [rbp+1A0h+var_110] .text:0000000140071015 48 8B D3 mov rdx, rbx .text:0000000140071018 B1 01 mov cl, 1 .text:000000014007101A E8 E9 95 03 00 call RtlpCopyExtendedContext .text:000000014007101A .text:000000014007101F 89 45 20 mov [rbp+1A0h+var_180], eax .text:0000000140071022 0F 10 85 50 01 00 00 movups xmm0, [rbp+1A0h+var_50] .text:0000000140071029 0F 11 03 movups xmmword ptr [rbx], xmm0 .text:000000014007102C F2 0F 10 8D 60 01 00 00 movsd xmm1, [rbp+1A0h+var_40] .text:0000000140071034 F2 0F 11 4B 10 movsd qword ptr [rbx+10h], xmm1 .text:0000000140071039 FA cli .text:000000014007103A 4C 89 BE 80 01 00 00 mov [rsi+180h], r15 .text:0000000140071041 B8 33 00 00 00 mov eax, 33h ; '3' .text:0000000140071046 66 89 86 70 01 00 00 mov [rsi+170h], ax .text:000000014007104D 48 8B 05 1C 46 35 00 mov rax, cs:KeUserExceptionDispatcher .text:0000000140071054 48 89 86 68 01 00 00 mov [rsi+168h], rax .text:000000014007105B 65 48 8B 04 25 88 01 00 00 mov rax, gs:188h .text:0000000140071064 48 8B 88 B8 00 00 00 mov rcx, [rax+0B8h] .text:000000014007106B 48 8B 91 C8 02 00 00 mov rdx, [rcx+2C8h] .text:0000000140071072 48 85 D2 test rdx, rdx .text:0000000140071075 75 25 jnz short loc_14007109C .text:0000000140071075 .text:0000000140071077 EB 35 jmp short loc_1400710AE .text:0000000140071077 .text:0000000140071079 ; --------------------------------------------------------------------------- .text:0000000140071079 .text:0000000140071079 loc_140071079: ; CODE XREF: KiDispatchException+329↑j .text:0000000140071079 E8 AE F3 67 00 call ExRaiseDatatypeMisalignment .text:0000000140071079 .text:000000014007107E ; --------------------------------------------------------------------------- .text:000000014007107E .text:000000014007107E loc_14007107E: ; CODE XREF: KiDispatchException+31F↑j .text:000000014007107E 41 B8 10 00 00 00 mov r8d, 10h ; Alignment .text:0000000140071084 48 8B D1 mov rdx, rcx ; Length .text:0000000140071087 49 8B CF mov rcx, r15 ; Address .text:000000014007108A E8 41 FB 3A 00 call ProbeForWrite .text:000000014007108A .text:000000014007108F 48 8B 4D 18 mov rcx, [rbp+1A0h+var_188] .text:0000000140071093 48 8B 55 08 mov rdx, [rbp+1A0h+var_198] .text:0000000140071097 E9 F5 FE FF FF jmp loc_140070F91 .text:0000000140071097 .text:000000014007109C ; --------------------------------------------------------------------------- .text:000000014007109C .text:000000014007109C loc_14007109C: ; CODE XREF: KiDispatchException+441↑j .text:000000014007109C 48 8B 86 68 01 00 00 mov rax, [rsi+168h] .text:00000001400710A3 48 89 46 58 mov [rsi+58h], rax .text:00000001400710A7 48 89 96 68 01 00 00 mov [rsi+168h], rdx .text:00000001400710A7 .text:00000001400710AE .text:00000001400710AE loc_1400710AE: ; CODE XREF: KiDispatchException+443↑j .text:00000001400710AE FB sti .text:00000001400710AF E9 A5 00 00 00 jmp loc_140071159 .text:00000001400710AF ; } // starts at 140070EA6 .text:00000001400710AF .text:00000001400710B4 ; --------------------------------------------------------------------------- .text:00000001400710B4 .text:00000001400710B4 loc_1400710B4: ; DATA XREF: .rdata:00000001402ACC8C↓o .text:00000001400710B4 ; __except(loc_14015BC0C) // owned by 140070EA6 .text:00000001400710B4 48 8B 5D 30 mov rbx, [rbp+1A0h+var_170] .text:00000001400710B8 48 8B 75 58 mov rsi, [rbp+1A0h+var_148] .text:00000001400710BC 81 BD B0 00 00 00 FD 00 00 C0 cmp [rbp+1A0h+var_F0], 0C00000FDh .text:00000001400710C6 75 7D jnz short loc_140071145 .text:00000001400710C6 .text:00000001400710C8 48 8B 43 10 mov rax, [rbx+10h] .text:00000001400710CC 48 89 85 C0 00 00 00 mov [rbp+1A0h+var_E0], rax .text:00000001400710D3 48 8D 85 B0 00 00 00 lea rax, [rbp+1A0h+var_F0] .text:00000001400710DA 0F 10 00 movups xmm0, xmmword ptr [rax] .text:00000001400710DD 0F 11 03 movups xmmword ptr [rbx], xmm0 .text:00000001400710E0 0F 10 48 10 movups xmm1, xmmword ptr [rax+10h] .text:00000001400710E4 0F 11 4B 10 movups xmmword ptr [rbx+10h], xmm1 .text:00000001400710E8 0F 10 40 20 movups xmm0, xmmword ptr [rax+20h] .text:00000001400710EC 0F 11 43 20 movups xmmword ptr [rbx+20h], xmm0 .text:00000001400710F0 0F 10 48 30 movups xmm1, xmmword ptr [rax+30h] .text:00000001400710F4 0F 11 4B 30 movups xmmword ptr [rbx+30h], xmm1 .text:00000001400710F8 0F 10 40 40 movups xmm0, xmmword ptr [rax+40h] .text:00000001400710FC 0F 11 43 40 movups xmmword ptr [rbx+40h], xmm0 .text:0000000140071100 0F 10 48 50 movups xmm1, xmmword ptr [rax+50h] .text:0000000140071104 0F 11 4B 50 movups xmmword ptr [rbx+50h], xmm1 .text:0000000140071108 0F 10 40 60 movups xmm0, xmmword ptr [rax+60h] .text:000000014007110C 0F 11 43 60 movups xmmword ptr [rbx+60h], xmm0 .text:0000000140071110 0F 10 48 70 movups xmm1, xmmword ptr [rax+70h] .text:0000000140071114 0F 11 4B 70 movups xmmword ptr [rbx+70h], xmm1 .text:0000000140071118 0F 10 80 80 00 00 00 movups xmm0, xmmword ptr [rax+80h] .text:000000014007111F 0F 11 83 80 00 00 00 movups xmmword ptr [rbx+80h], xmm0 .text:0000000140071126 48 8B 80 90 00 00 00 mov rax, [rax+90h] .text:000000014007112D 48 89 83 90 00 00 00 mov [rbx+90h], rax .text:0000000140071134 44 8B 6D 10 mov r13d, [rbp+1A0h+var_190] .text:0000000140071138 4C 8B 75 68 mov r14, [rbp+1A0h+var_138] .text:000000014007113C 4C 8B 65 38 mov r12, [rbp+1A0h+var_168] .text:0000000140071140 E9 60 FD FF FF jmp loc_140070EA5 .text:0000000140071140 .text:0000000140071145 ; --------------------------------------------------------------------------- .text:0000000140071145 .text:0000000140071145 loc_140071145: ; CODE XREF: KiDispatchException+492↑j .text:0000000140071145 4C 8B 75 70 mov r14, [rbp+1A0h+var_130] .text:0000000140071149 4C 8B A5 80 00 00 00 mov r12, [rbp+1A0h+var_120] .text:0000000140071150 44 8A 7D 00 mov r15b, byte ptr [rbp+1A0h+var_1A0] .text:0000000140071154 E9 83 00 00 00 jmp loc_1400711DC .text:0000000140071154 .text:0000000140071159 ; --------------------------------------------------------------------------- .text:0000000140071159 .text:0000000140071159 loc_140071159: ; CODE XREF: KiDispatchException+241↑j .text:0000000140071159 ; KiDispatchException+47B↑j .text:0000000140071159 ; KiDispatchException+5A2↓j .text:0000000140071159 ; KiDispatchException+5B8↓j .text:0000000140071159 ; KiDispatchException+5DB↓j .text:0000000140071159 ; KiDispatchException+5EC↓j .text:0000000140071159 ; KiDispatchException+1166F6↓j .text:0000000140071159 ; KiDispatchException+116761↓j .text:0000000140071159 ; KiDispatchException+1167C5↓j .text:0000000140071159 ; KiDispatchException+1167EF↓j .text:0000000140071159 48 8B 8D 68 01 00 00 mov rcx, [rbp+1A0h+var_38] .text:0000000140071160 48 33 CD xor rcx, rbp ; StackCookie .text:0000000140071163 E8 48 AD 0C 00 call __security_check_cookie .text:0000000140071163 .text:0000000140071168 48 8D A5 70 01 00 00 lea rsp, [rbp+170h] .text:000000014007116F 41 5F pop r15 .text:0000000140071171 41 5E pop r14 .text:0000000140071173 41 5D pop r13 .text:0000000140071175 41 5C pop r12 .text:0000000140071177 5E pop rsi .text:0000000140071178 5B pop rbx .text:0000000140071179 5D pop rbp .text:000000014007117A C3 retn .text:000000014007117A .text:000000014007117B ; --------------------------------------------------------------------------- .text:000000014007117B .text:000000014007117B loc_14007117B: ; CODE XREF: KiDispatchException+75↑j .text:000000014007117B 48 8B 05 A6 40 35 00 mov rax, cs:KeFeatureBits .text:0000000140071182 25 00 00 80 00 and eax, 800000h .text:0000000140071187 B9 5F 00 10 00 mov ecx, 10005Fh .text:000000014007118C 48 85 C0 test rax, rax .text:000000014007118F 44 0F 45 E9 cmovnz r13d, ecx .text:0000000140071193 44 89 6D 10 mov [rbp+1A0h+var_190], r13d .text:0000000140071197 E9 13 FB FF FF jmp loc_140070CAF .text:0000000140071197 .text:000000014007119C ; --------------------------------------------------------------------------- .text:000000014007119C .text:000000014007119C loc_14007119C: ; CODE XREF: KiDispatchException+E4↑j .text:000000014007119C 48 8B 45 08 mov rax, [rbp+1A0h+var_198] .text:00000001400711A0 48 83 B8 F0 06 00 00 00 cmp qword ptr [rax+6F0h], 0 .text:00000001400711A8 0F 84 70 FB FF FF jz loc_140070D1E .text:00000001400711A8 .text:00000001400711AE E9 5B 61 11 00 jmp loc_14018730E .text:00000001400711AE .text:00000001400711B3 ; --------------------------------------------------------------------------- .text:00000001400711B3 .text:00000001400711B3 loc_1400711B3: ; CODE XREF: KiDispatchException+DB↑j .text:00000001400711B3 49 FF 8E F8 00 00 00 dec qword ptr [r14+0F8h] .text:00000001400711BA E9 56 FB FF FF jmp loc_140070D15 .text:00000001400711BA .text:00000001400711BF ; --------------------------------------------------------------------------- .text:00000001400711BF .text:00000001400711BF loc_1400711BF: ; CODE XREF: KiDispatchException+FA↑j .text:00000001400711BF ; KiDispatchException+133↑j .text:00000001400711BF ; KiDispatchException+14C↑j .text:00000001400711BF ; KiDispatchException+22C↑j .text:00000001400711BF ; KiDispatchException+116722↓j .text:00000001400711BF 44 88 7C 24 20 mov byte ptr [rsp+1D0h+BugCheckParameter4], r15b .text:00000001400711C4 45 8B 4E 30 mov r9d, [r14+30h] .text:00000001400711C8 4D 8B C6 mov r8, r14 .text:00000001400711CB 49 8B D4 mov rdx, r12 .text:00000001400711CE 48 8B CE mov rcx, rsi .text:00000001400711D1 E8 7A BB 0D 00 call KeContextToKframes .text:00000001400711D1 .text:00000001400711D6 EB 81 jmp short loc_140071159 .text:00000001400711D6 .text:00000001400711D8 ; --------------------------------------------------------------------------- .text:00000001400711D8 .text:00000001400711D8 loc_1400711D8: ; CODE XREF: KiDispatchException+1D1↑j .text:00000001400711D8 4C 8B 75 08 mov r14, [rbp+1A0h+var_198] .text:00000001400711D8 .text:00000001400711DC .text:00000001400711DC loc_1400711DC: ; CODE XREF: KiDispatchException+520↑j .text:00000001400711DC 41 B0 01 mov r8b, 1 .text:00000001400711DF 41 8A D0 mov dl, r8b .text:00000001400711E2 48 8B CB mov rcx, rbx .text:00000001400711E5 E8 EA 57 4B 00 call DbgkForwardException .text:00000001400711E5 .text:00000001400711EA 84 C0 test al, al .text:00000001400711EC 0F 85 67 FF FF FF jnz loc_140071159 .text:00000001400711EC .text:00000001400711F2 49 83 BE F0 06 00 00 00 cmp qword ptr [r14+6F0h], 0 .text:00000001400711FA 0F 85 04 62 11 00 jnz loc_140187404 .text:00000001400711FA .text:0000000140071200 .text:0000000140071200 loc_140071200: ; CODE XREF: KiDispatchException+1167F5↓j .text:0000000140071200 41 B0 01 mov r8b, 1 .text:0000000140071203 33 D2 xor edx, edx .text:0000000140071205 48 8B CB mov rcx, rbx .text:0000000140071208 E8 C7 57 4B 00 call DbgkForwardException .text:0000000140071208 .text:000000014007120D 84 C0 test al, al .text:000000014007120F 0F 85 44 FF FF FF jnz loc_140071159 .text:000000014007120F .text:0000000140071215 8B 13 mov edx, [rbx] ; ExitStatus .text:0000000140071217 48 83 C9 FF or rcx, 0FFFFFFFFFFFFFFFFh ; ProcessHandle .text:000000014007121B E8 40 88 0D 00 call ZwTerminateProcess .text:000000014007121B .text:0000000140071220 E9 34 FF FF FF jmp loc_140071159 .text:0000000140071220 ; } // starts at 140070C34 .text:0000000140071220 .text:0000000140071220 KiDispatchException endp .text:0000000140071220 .text:0000000140071220 ; --------------------------------------------------------------------------- .text:0000000140071225 algn_140071225: ; DATA XREF: .rdata:00000001402ACCA4↓o .text:0000000140071225 ; .pdata:000000014037BF38↓o .text:0000000140071225 CC CC CC align 8 .text:0000000140071228 .text:0000000140071228 ; =============== S U B R O U T I N E ======================================= .text:0000000140071228 .text:0000000140071228 .text:0000000140071228 ; __int64 __fastcall KiPreprocessFault(int, int) .text:0000000140071228 KiPreprocessFault proc near ; CODE XREF: KiDispatchException+F3↑p分析每段函数和这个函数的执行流程和作用
最新发布
07-04
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值