Microsoft (R) Windows Debugger Version 6.12.0002.633 X86
Copyright (c) Microsoft Corporation. All rights reserved.
Opened \\.\pipe\com_1
Waiting to reconnect...
Connected to Windows Server 2003 3800 x86 compatible target at (Sat Aug 25 07:18:28.375 2018 (UTC + 8:00)), ptr64 FALSE
Kernel Debugger connection established. (Initial Breakpoint requested)
WARNING: Inaccessible path: 'c:\symbols\windowswrk'
Symbol search path is: srv*;c:\symbols\windowswrk;srv*c:\symbols\windowswrk*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\labs\jit
*** ERROR: Symbol file could not be found. Defaulted to export symbols for wrkx86.exe -
Windows Server 2003 Kernel Version 3800 (Service Pack 1) MP (1 procs) Free x86 compatible
Built by: 3800.WRKP1.2(daveprobert)
Machine Name:
Kernel base = 0x80800000 PsLoadedModuleList = 0x808a03b8
System Uptime: not available
WARNING: Inaccessible path: 'C:\symbols\windowswrk'
WARNING: Inaccessible path: 'c:\symbols\windowswrk'
上面是windbg输出内容,显示符号文件不能找到?我把编译生成的wrkx86.pdb文件放在设置好的符号路径下,这是什么原因?lm命令后显示
start end module name
80800000 80a42000 nt (export symbols) wrkx86.exe
80a42000 80a6e000 hal (deferred)
f720e000 f722d000 Mup (deferred)
f722d000 f7263000 NDIS (deferred)
f7263000 f72f8000 Ntfs (deferred)
f72f8000 f731f000 KSecDD (deferred)
f731f000 f7344000 fltMgr (deferred)
f7344000 f7357000 CLASSPNP (deferred)
f7357000 f7376000 SCSIPORT (deferred)
f7376000 f7387000 symmpi (deferred)
f7387000 f73a3000 atapi (deferred)
f73a3000 f73cc000 volsnap (deferred)
f73cc000 f73f7000 dmio (deferred)
f73f7000 f741d000 ftdisk (deferred)
f741d000 f7432000 pci (deferred)
f7432000 f7466000 ACPI (deferred)
f7487000 f7490000 WMILIB (deferred)
f7497000 f74a6000 isapnp (deferred)
f74a7000 f74b4000 PCIIDEX (deferred)
f74b7000 f74c7000 MountMgr (deferred)
f74c7000 f74d2000 PartMgr (deferred)
f74d7000 f74e7000 disk (deferred)
f74e7000 f74f3000 Dfs (deferred)
f74f7000 f7507000 agp440 (deferred)
f7507000 f7511000 crcdisk (deferred)
f7707000 f770f000 kdcom (deferred)
f770f000 f7717000 BOOTVID (deferred)
f7717000 f771b080 BATTC (deferred)
f771f000 f7726000 intelide (deferred)
f7727000 f772e000 dmload (deferred)
f7897000 f7899800 compbatt (deferred)
内核模块的符号wrkx86.pdb没有正确加载,一直找不到哪里出错了。
[招生]科锐逆向工程师培训(2024年11月15日实地,远程教学同时开班, 第51期)