none
如何通过windbg中解析的蓝屏文件中函数地址偏移量找到对应函数?How to find the corresponding function through the function address offset in the blue screen file parsed in windbg? RRS feed

  • 问题

  • STACK_TEXT: 
    ffff9781`7e0a5708 fffff801`750cfcf3 : 00000000`000000c2 00000000`00000007 00000000`00000000 00000000`00000000 : nt!KeBugCheckEx
    ffff9781`7e0a5710 fffff802`63bf12ac : ffffd003`51face68 ffffd003`52442080 ffff9781`7e0a5828 ffffd003`00000000 : nt!ExFreePoolWithTag+0x1cf3
    ffff9781`7e0a57f0 fffff802`63bf1bb8 : ffffd003`51faf060 00000000`00000000 ffffd003`51fae060 00000000`00000012 : Leo2PanelMouseFilter+0x12ac
    ffff9781`7e0a5820 fffff801`7529a980 : ffffd005`034bd670 ffffd003`51faf060 00000000`00000000 ffff9781`00000000 : Leo2PanelMouseFilter+0x1bb8
    ffff9781`7e0a5850 fffff801`752a9ae5 : ffffd005`034bd640 00000000`00000000 ffffd005`034bd640 ffffd005`034bd650 : nt!IopCloseFile+0x150
    ffff9781`7e0a58e0 fffff801`752f49eb : 000000af`1e1f8618 000000af`00000018 00000000`00000005 00007ff7`00000080 : nt!ObCloseHandleTableEntry+0x245
    ffff9781`7e0a5a20 fffff801`74fe1593 : ffffd003`53397080 00000000`00000000 00000000`00000000 00000000`00000000 : nt!NtClose+0xcb
    ffff9781`7e0a5a80 00007ffc`f1cf6284 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
    000000af`1e1ff298 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffc`f1cf6284

    如何根据加粗部分的偏移量找到代码中对应位置?(加载pdb文件后解析不出来)

    How do I find the corresponding position in the code based on the offset of the bold part? (PDB file cannot be resolved after loading)

    2018年12月25日 8:43