[已解决]关于WinDbg的符号文件出错-软件逆向-看雪-安全社区|安全招聘|kanxue.com

[已解决]关于WinDbg的符号文件出错

发表于: 2020-2-26 13:17 4613

[已解决]关于WinDbg的符号文件出错

ffggddss

2020-2-26 13:17

4613

win7 安装的windbgx64 虚拟机 xp

符号表设置SRV*D:\SymbolCache*e5fK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3#2K6k6r3I4Q4x3X3g2E0K9h3y4J5L8%4y4G2k6Y4c8Q4x3X3g2U0L8$3#2Q4x3V1k6V1L8%4N6F1L8r3!0S2k6q4)9J5c8Y4y4&6L8h3u0G2L8s2x3`.

已经翻墙了

.reload /f 全部下载了符号表

但现在还是符号表错误 .reload /f 了很多次..

已解决: 貌似微软符号库已经不支持xp sp2了装了个xp sp3,下了个sp3的离线符号表,设置符号目录解决.

SRV*D:\SymbolCache*9aaK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3#2K6k6r3I4Q4x3X3g2E0K9h3y4J5L8%4y4G2k6Y4c8Q4x3X3g2U0L8$3#2Q4x3V1k6V1L8%4N6F1L8r3!0S2k6q4)9J5c8Y4y4&6L8h3u0G2L8s2y4Q4x3@1u0p5i4K6y4m8i4K6g2o6f1%4W2E0j5X3!0D9b7$3q4U0K9r3g2Q4y4f1y4V1L8r3I4Q4x3@1u0p5i4K6y4m8i4K6g2o6f1%4W2E0j5X3!0D9b7$3q4U0K9r3g2Q4y4f1y4S2j5$3#2Q4x3@1u0p5i4K6y4m8i4K6g2o6f1%4W2E0j5X3!0D9b7$3q4U0K9r3g2Q4y4f1y4S2P5q4)9K6b7V1c8Q4x3@1q4Q4y4f1y4e0P5h3#2T1L8$3I4o6j5h3y4Z5k6g2)9#2b7$3y4F1N6W2)9K6b7V1c8Q4x3@1q4Q4y4f1y4e0P5h3#2T1L8$3I4o6j5h3y4Z5k6g2)9#2b7$3y4G2L8g2)9K6b7V1c8Q4x3@1q4Q4y4f1y4e0P5h3#2T1L8$3I4o6j5h3y4Z5k6g2)9#2b7$3y4H3L8q4)9K6b7V1c8Q4x3@1q4Q4y4f1y4e0P5h3#2T1L8$3I4o6j5h3y4Z5k6g2)9#2b7$3c8A6j5#2)9K6b7V1c8Q4x3@1q4Q4y4f1y4e0P5h3#2T1L8$3I4o6j5h3y4Z5k6g2)9#2b7$3c8J5N6W2)9K6b7V1c8Q4x3@1q4Q4y4f1y4e0P5h3#2T1L8$3I4o6j5h3y4Z5k6g2)9#2b7$3g2^5k6g2)9K6b7V1c8Q4x3@1q4Q4y4f1y4e0P5h3#2T1L8$3I4o6j5h3y4Z5k6g2)9#2b7$3W2W2j5#2)9K6b7V1c8Q4x3@1q4Q4y4f1y4e0P5h3#2T1L8$3I4o6j5h3y4Z5k6g2)9#2b7$3W2E0k6g2)9K6b7V1c8Q4x3@1q4Q4y4f1y4e0P5h3#2T1L8$3I4o6j5h3y4Z5k6g2)9#2b7$3!0U0P5q4)9K6b7V1c8Q4x3@1q4Q4y4f1y4e0P5h3#2T1L8$3I4o6j5h3y4Z5k6g2)9#2b7%4y4U0M7W2)9K6b7V1c8Q4x3@1q4Q4y4f1y4e0P5h3#2T1L8$3I4o6j5h3y4Z5k6g2)9#2b7%4y4&6M7#2)9K6b7V1c8Q4x3@1q4Q4y4f1y4e0P5h3#2T1L8$3I4o6j5h3y4Z5k6g2)9#2b7%4c8H3L8q4)9K6b7V1c8Q4x3@1q4Q4y4f1y4e0P5h3#2T1L8$3I4o6j5h3y4Z5k6g2)9#2b7%4c8K6M7q4)9K6b7V1c8Q4x3@1q4Q4y4f1y4e0P5h3#2T1L8$3I4o6j5h3y4Z5k6g2)9#2b7%4N6H3j5H3`.`.

kd> !process 0 0

**** NT ACTIVE PROCESS DUMP ****

*************************************************************************

*** ***

*** Either you specified an unqualified symbol, or your debugger ***

*** doesn't have full symbol information. Unqualified symbol ***

*** resolution is turned off by default. Please either specify a ***

*** fully qualified symbol module!symbolname, or enable resolution ***

*** of unqualified symbols by typing ".symopt- 100". Note that ***

*** enabling unqualified symbol resolution with network symbol ***

*** server shares in the symbol path may cause the debugger to ***

*** appear to hang for long periods of time when an incorrect ***

*** symbol name is typed or the network symbol server is down. ***

*** ***

*** For some commands to work properly, your symbol path ***

*** must point to .pdb files that have full type information. ***

*** ***

*** Certain .pdb files (such as the public OS symbols) do not ***

*** contain the required information. Contact the group that ***

*** provided you with these symbols if you need this command to ***

*** work. ***

*** ***

*** Type referenced: nt!_LIST_ENTRY ***

*** ***

*************************************************************************

Unable to read _LIST_ENTRY @ 8055a258

[培训]科锐逆向工程师培训第53期2025年7月8日开班！

最后于 2020-2-26 22:46 被ffggddss编辑，原因：

收藏・0

免费・0

支持