windows开机自启随机崩溃如何排查
作者:互联网
线上一进程开机有概率死掉
1.windows开启coredump,注册表
1 Windows Registry Editor Version 5.00 2 3 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps] 4 "DumpFolder"=hex(2):43,00,3a,00,5c,00,64,00,75,00,6d,00,70,00,00,00 5 "DumpCount"=dword:00000014 6 "DumpType"=dword:00000002 7 "CustomDumpFlags"=dword:00000121
2.在c:\dump收集dump,windbg打开dump
3.由于没有pdb调试符号,直接ida pro打开可执行程序,通过偏移xx+0x81a2找到对应的函数,打开源码分析对应函数,发现问题是关键区销毁错误问题
4.结束
标签:00,dump,windows,Windows,自启,开机,dword 来源: https://www.cnblogs.com/maojun1998/p/16597672.html