64位的dump里如何寻找第一个到第四个参数?

这篇文章讲解的三种方法非常详细, 还可以跟随着作者的代码一起试验. 推荐.

Challenges of Debugging Optimized x64 Code

http://blogs.msdn.com/b/ntdebugging/archive/2009/01/09/challenges-of-debugging-optimized-x64-code.aspx

 

另外两篇文章也值得一看.

Introduction to x64 debugging, part 1

http://www.nynaeve.net/?p=8

Introduction to x64 debugging, part 2

http://www.nynaeve.net/?p=10