换台电脑，在不好的网络环境下，启动调试时下载符号是异常痛苦的，VS/windbg经常会装死给你看。
某个版本notepad.exe的符号下载路径如下，这个Url用迅雷下载很快。
http://msdl.microsoft.com/download/symbols/notepad.pdb/57060987A4344E1A9B9B77F57D14388A2/notepad.pdb
问题是如何得到 57060987A4344E1A9B9B77F57D14388A2，注意最后一个字符是pdb的age，相关API为dbghelp!RetrievePdbInfo.
IDA/windbg symchk.exe/dbghelp.dll/symsrv.dll：
第一次断：
wininet!InternetConnectW
某次调试的栈：
RetAddr : Args to Child : Call Site
00000000`5c9c7a3c : 00000000`00e79090 00000000`00e79950 00000000`00e79928 00000000`00000002 : symsrv!SymbolServerGetIndexStringW
00000000`5cecffd8 : 00000000`00e79090 00000000`00e79950 00000000`00e79928 00000000`00000002 : symsrv!SymbolServerW+0x9c
00000000`5ceb591a : 00000000`01210080 00000000`00e7a1c0 00000000`00e79f90 00000000`00e79950 : dbghelp!symsrvGetFile+0x1f8
00000000`5ceb6d75 : 00000000`013862d0 00000000`01386b78 00000000`01386b68 00000000`00000000 : dbghelp!diaLocatePdb+0x4da
00000000`5cee5234 : 00000000`013862d0 0000000a`197e0235 0000b778`00000004 00000000`0000ad78 : dbghelp!diaGetPdb+0x285
00000000`5cee2ee6 : 00000000`013862d0 00000000`00000020 00000000`01380860 00000000`00e7ae50 : dbghelp!GetDebugData+0x3b4
00000000`5cee3692 : ffffffff`ffffffff 00000000`01380860 00000000`00000000 00000000`00e7b0f0 : dbghelp!modload+0x3a6
00000000`5cedadc5 : ffffffff`ffffffff 00000000`0122adf0 00000000`00000000 00000000`00000000 : dbghelp!LoadModule+0x542
00000000`5cedaef4 : ffffffff`ffffffff 00000000`00000000 00000000`00e7b950 00000000`00000000 : dbghelp!SymLoadModuleEx+0x85
00007ffb`3d4729ae : ffffffff`ffffffff 00000000`00000000 00000000`00e7b950 00000000`00000000 : dbghelp!SymLoadModule64+0x54
00007ff7`8c6e85b2 : 00000000`00e7dff0 00000000`00bb7c30 00000000`00000045 00000000`00000002 : SymbolCheck!SymbolCheckByFilenameExA+0x68e
00007ff7`8c6e5d6f : 00000000`00bb7280 00000000`00e7f8c0 2b87a538`80000000 00007ffb`4930e91a : SymChk!SymChkCheckFiles+0x292
00007ff7`8c6f136a : 00000000`00000002 00000000`00bb7220 00000000`00000000 000008c7`009fc00d : SymChk!main+0x1df
00007ffb`4c923034 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : SymChk!GetFileIndex+0x23a
00007ffb`4ce81461 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : KERNEL32!BaseThreadInitThunk+0x14
00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ntdll!RtlUserThreadStart+0x21
明码在github：
https://github.com/DeDf/DownloadPDB
[培训]《安卓高级研修班(网课)》月薪三万计划，掌握调试、分析还原ollvm、vmp的方法，定制art虚拟机自动化脱壳的方法
最后于 2019-3-12 16:31
被囧囧编辑
，原因：
