首页
社区
课程
招聘
[原创]Automating Kernel dumps collection through code
发表于: 2012-10-8 15:22 4310

[原创]Automating Kernel dumps collection through code

2012-10-8 15:22
4310

1.        Download and install debuging tools for Windows in the folder c:\debuggers from a50K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3#2K6k6r3I4Q4x3X3g2E0K9h3y4J5L8%4y4G2k6Y4c8Q4x3X3g2U0L8$3#2Q4x3V1k6V1L8%4N6F1L8r3!0S2k6q4)9J5c8Y4y4&6L8h3u0G2L8s2y4Q4x3V1k6V1k6h3u0#2k6$3N6W2M7Y4y4Q4x3V1k6V1j5X3N6Q4y4h3k6^5z5o6k6Q4y4h3j5$3i4K6u0W2x3e0q4Q4x3X3f1I4i4K6u0W2y4o6l9@1i4K6u0W2L8i4y4A6
2.        Dowload and install LiveKD into the folder c:\debuggers from
ae1K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4c8W2j5$3S2F1k6i4c8Q4x3X3g2E0K9h3y4J5L8%4y4G2k6Y4c8Q4x3X3g2U0L8$3#2Q4x3V1k6W2L8W2)9J5k6s2g2K6i4K6u0r3M7%4W2K6K9h3&6@1k6i4u0F1j5h3I4K6i4K6u0r3j5X3t1^5z5e0M7@1x3e0f1`.
3.        Setup environment variable _NT_SYMBOL_PATH = srv*c\localsymbols*
4.        Insert the following line of code at the appropriate location :

// The following code is to silently accept the EULA. This needs to be done only ONE time on the machine.
system("c:\\debuggers\\LiveKD.exe /accepteula");

// The following code is to collect the kernel dumps
system("c:\\debuggers\\LiveKD.exe -o c:\\kerneldump.dmp");

5.        The dump c:\kerneldump.dmp will be collected but the system will not restart.


[培训]内核驱动高级班,冲击BAT一流互联网大厂工作,每周日13:00-18:00直播授课

收藏
免费 6
支持
分享
最新回复 (0)
游客
登录 | 注册 方可回帖
返回