-
-
[求助]VM+WinXP的WinDBG内核调试,提示symbol错误
-
2011-3-21 22:09
5524
-
[求助]VM+WinXP的WinDBG内核调试,提示symbol错误
请各位帮忙!
Host=Guess=Winxp。用户模式调试时,一切如常,能联网,证明symbol path没问题。
同样的环境,在connect时提示好几个module无法load,但还是有内核调试符出现。以下是输入命令后,windbg的错误提示:
0: kd> !process 0 0
**** NT ACTIVE PROCESS DUMP ****
*********************************************************************** Your debugger is not using the correct symbols ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_LIST_ENTRY ***
*** ***
*************************************************************************
为什么同样的symbol path,同样symbol用户模式如常却内核模式异常??会不会host os跟guess os是winxp的不同版本导致symbol不同?请高手教路!!!
[培训]《安卓高级研修班(网课)》月薪三万计划,掌握调试、分析还原ollvm、vmp的方法,定制art虚拟机自动化脱壳的方法