测试代码:
#include<stdio.h>
int main(int argc,char* argv[])
{
printf("Test Windbg");
return 0;
}
按照一个入门教程,说main函数的地址如下:
0001:00000000 _main 00401000 f WindbgTest.obj
说明main函数地址在00401000,
然后用bp 00401000 就可以在main函数处设置断点了。
我按书上说的操作,根本就设置不了,直接报错:
0:000> bp 00401000
0:000> g
Unable to insert breakpoint 0 at 00000000`00401000, Win32 error 0n299
"仅完成部分的 ReadProcessMemory 或 WriteProcessMemory 请求。"
The breakpoint was set with BP. If you want breakpoints
to track module load/unload state you must use BU.
bp0 at 00000000`00401000 failed
WaitForEvent failed
ntdll!LdrInitShimEngineDynamic+0x331:
00007ffb`b1d532e9 eb00 jmp ntdll!LdrInitShimEngineDynamic+0x333 (00007ffb`b1d532eb)