从挂钩的exe文件获取详细的故障转储 [英] Getting detailed crash dumps from a hooked exe

问题描述

我正在尝试查找与游戏相关的程序问题。这是
vc ++。基本上，我启动该程序，然后使用SDL将其连接。当我从VS2010运行代码时，一切正常。但是，当我尝试从命令提示符运行时，我的程序可以启动游戏，但是之后游戏立即崩溃。

I am trying find a problem with my program that is hooking into a game. This is vc++. Basically I launch the program and then hook into it using SDL. When I run the code from VS2010, all works fine. But when I try to run from command prompt, my program can launch the game, but after that the game crashes immediately.

我正在查看Windows事件日志，似乎存在访问冲突。 0xc000005

I was viewing windows event logs, and it appears that there is an access violation. 0xc000005

如何记录有关崩溃程序的更多详细信息？我尝试了 procdump，但这没什么用，因为我无法从控制台间接地将已钩住的游戏作为目标。相反，它只能针对我所钩的应用程序。

How can I log any further details about the program that crashes? I tried "procdump" but that is not useful as I cannot INDIRECTLY target the hooked game from console. Rather it can only target my application that hooks.

在这种情况下，无论如何获取详细的转储都是值得赞赏的。
谢谢！

Anyway of getting detailed dumps is highly appreciated in this case. Thanks!

推荐答案

可以结合使用 WER注册表项/值以捕获任何转储被生产。我使用这种方法来防止WER系统收集转储文件（.dmp）。我还在另一个类似帖子。为此，您需要在$ p

You can perform postmortem debugging by using a combination of the WER registry keys/values to trap any dump that is produced. I’ve used this method to prevent the WER system from collecting the dump file (.dmp). I’ve also written about this in another similar post. To accomplish this, you will need to create a registry key under

软件\Microsoft\Windows\Windows错误报告

Software\Microsoft\Windows\Windows Error Reporting

如果尚不存在。密钥应该是

if one does not already exist. The key should be

LocalDumps\ 您的应用程序 .exe

完成后，修改以下键/值以满足您的需求：

Once that’s done, modify these keys/values to meet your needs:

DumpCount ，DumpFolder，DumpType

DumpCount, DumpFolder, DumpType

您将需要管理员权限才能创建和修改密钥，并且应该重置所有已修改的内容完成调试后。

You’ll need Administrator rights to create and modify the keys, and, you should reset everything you’ve modified when you’re done debugging.

这篇关于从挂钩的exe文件获取详细的故障转储的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！