windbg - 在 WinDBG 中只重新加载一个符号
问题描述
我在 WinDBG 中使用以下命令重新加载所有符号
!sym noisy
.sympath srv*https://msdl.microsoft.com/download/symbols
.reload /f
!sym quiet
如何重新加载只有一个 DLL 的符号?例如ntdll
解决方案
正如我评论的那样,使用模块名称以及 base 和 size 可选地见下文
默认情况下,在系统断点处启动时仅加载 ntdll
0:000> lm
start end module name
00007ff6`ae300000 00007ff6`ae32e000 cdb (deferred)
00007fff`142f0000 00007fff`14a22000 dbgeng (deferred)
00007fff`210c0000 00007fff`212b3000 dbghelp (deferred)
00007fff`36050000 00007fff`360f9000 dbgmodel (deferred)
00007fff`45040000 00007fff`45075000 XmlLite (deferred)
00007fff`533d0000 00007fff`5346e000 msvcp_win (deferred)
00007fff`53470000 00007fff`53496000 bcrypt (deferred)
00007fff`53600000 00007fff`536fa000 ucrtbase (deferred)
00007fff`53700000 00007fff`539a5000 KERNELBASE (deferred)
00007fff`54360000 00007fff`543e1000 bcryptPrimitives (deferred)
00007fff`54450000 00007fff`544ee000 msvcrt (deferred)
00007fff`54570000 00007fff`548a6000 combase (deferred)
00007fff`54d80000 00007fff`54e9f000 RPCRT4 (deferred)
00007fff`55e70000 00007fff`55f22000 KERNEL32 (deferred)
00007fff`56170000 00007fff`56235000 OLEAUT32 (deferred)
00007fff`56340000 00007fff`56530000 ntdll (pdb symbols) f:\symbols\ntdll.pdb\27341C1B9147DD100EC194BFDD47B97A1\ntdll.pdb
单个模块的加载符号,即 dbgmodel.dll
0:000> .reload /f dbgmodel.dll
0:000> lm
start end module name
00007ff6`ae300000 00007ff6`ae32e000 cdb (deferred)
00007fff`142f0000 00007fff`14a22000 dbgeng (deferred)
00007fff`210c0000 00007fff`212b3000 dbghelp (deferred)
00007fff`36050000 00007fff`360f9000 dbgmodel (pdb symbols) f:\symbols\dbgmodel.pdb\9A0AE73EBC9949A30EF879B505AF2C761\dbgmodel.pdb
00007fff`45040000 00007fff`45075000 XmlLite (deferred)
00007fff`533d0000 00007fff`5346e000 msvcp_win (deferred)
00007fff`53470000 00007fff`53496000 bcrypt (deferred)
00007fff`53600000 00007fff`536fa000 ucrtbase (deferred)
00007fff`53700000 00007fff`539a5000 KERNELBASE (deferred)
00007fff`54360000 00007fff`543e1000 bcryptPrimitives (deferred)
00007fff`54450000 00007fff`544ee000 msvcrt (deferred)
00007fff`54570000 00007fff`548a6000 combase (deferred)
00007fff`54d80000 00007fff`54e9f000 RPCRT4 (deferred)
00007fff`55e70000 00007fff`55f22000 KERNEL32 (deferred)
00007fff`56170000 00007fff`56235000 OLEAUT32 (deferred)
00007fff`56340000 00007fff`56530000 ntdll (pdb symbols) f:\symbols\ntdll.pdb\27341C1B9147DD100EC194BFDD47B97A1\ntdll.pdb
0:000>
推荐阅读
- javascript - 触摸限制时翻转图像(比例(-1,1))不起作用?
- google-bigquery - BigQuery - 在分区求和函数中添加条件
- python - 使用正则表达式替换python中的部分字符串
- java - 如何使用 Selenium WebDriver 关闭弹出窗口
- javascript - ASP.net Razor 应用程序:使用 Bootstrap、CSS 或 JS,是否有一种简单的方法可以左右移动整个表格列?即时重新排序列
- realsense - Intel realsense T265的板载slam算法可以在不同模式下运行吗?
- wordpress - 在搜索中重写自定义帖子类型 URL
- haskell - Pacman 更新后损坏的 XMonad(依赖项)(如何使用 Stack 编译它?)
- node.js - SessionID 在每个发布请求上生成一个唯一值
- php - Laravel Passport - oauth/token 给客户端身份验证失败