如何调试非法指令异常？

Question

当我试图在ASDumpAnalyzer.exe: 0xC000001D:非法指令中使用mdbglib：First-chance exception at 0x037ba4f4 (dbgeng.dll)时，我得到了这个异常。我想知道如何进行调试？

它抛出了汇编指令vmcpuid。当我跳过这条指令时，代码会按预期工作。

堆栈跟踪：

dbgeng.dll!X86IsVirtualMachine()  + 0x44 bytes
dbgeng.dll!LiveUserDebugServices::GetTargetInfo()  + 0x95 bytes
dbgeng.dll!LiveUserTargetInfo::InitFromServices()  + 0x95 bytes
dbgeng.dll!LiveUserTargetInfo::WaitForEvent()  + 0x4f bytes
dbgeng.dll!WaitForAnyTarget()  + 0x5f bytes
dbgeng.dll!RawWaitForEvent()  + 0x2ae bytes
dbgeng.dll!DebugClient::WaitForEvent()  + 0xb0 bytes
[Managed to Native Transition]
mdbglib.dll!MS::Debuggers::DbgEng::DebugControl::WaitForEvent(unsigned int timeout = 0) Line 107 + 0x38 bytes   C++
mdbglib.dll!MS::Debuggers::DbgEng::Debuggee::WaitForEvent(unsigned int timeout = 0) Line 365    C++
ASDumpAnalyzer.exe!ASDumpAnalyzer.Program.WriteMemoryDump() Line 51 + 0xd bytes C#
ASDumpAnalyzer.exe!ASDumpAnalyzer.Program.Main() Line 21 + 0x5 bytes    C#
mscoree.dll!__CorExeMain@0()  + 0x34 bytes
kernel32.dll!_BaseProcessStart@4()  + 0x23 bytes

Answer 1

你有没有试过不打破第一次机会的例外情况？我打赌X86IsVirtualMachine在VMCPUID周围有一个__try/__finally块...因为它不是有效的指令，所以您可能没有在VM下运行。