I have a minidump accident. At the time of the crash, there is some strange code that should never run successfully. Sort of:
call AnObject::AFunction test byte ptr [eax],cl
AnObject :: AFunction is a member function that returns a bool. Thus, the result should be stored in eax as 0 or 1. At this point, it makes no sense to play eax.
I parsed the corresponding binary code and indeed, in this function the code is different:
call AnObject::AFunction test al, al
Why is the minidump parsing code really different from the actual parsing binary code?
source share