最近在分析一个dump的时候,遇到了%1 不是有效的 Win32 应用程序。
这个错误,输出如下:
************* Path validation summary **************
Response Time (ms) Location
Deferred SRV*C:\mysymbols*http://msdl.microsoft.com/download/symbols
Symbol search path is: SRV*C:\mysymbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Version 7601 (Service Pack 1) MP (6 procs) Free x64
Product: WinNt, suite: SingleUserTS
Debug session time: Thu Sep 15 16:02:31.000 2022 (UTC + 8:00)
System Uptime: 1 days 0:19:51.848
Process Uptime: 0 days 0:09:11.000
................................................................
................................................................
..................................................
For analysis of this file, run !analyze -v
*** WARNING: Unable to verify checksum for PresentationFramework.ni.dll
PresentationFramework_ni+0x34b32f:
55ceb32f 8b0d2c139a55 mov ecx,dword ptr [PresentationFramework_ni+0x132c (559a132c)] ds:002b:559a132c=0017a108
0:000:x86> .load C:\Windows\Microsoft.NET\Framework\v4.0.30319\sos.dll
The call to LoadLibrary(C:\Windows\Microsoft.NET\Framework\v4.0.30319\sos.dll) failed, Win32 error 0n193
"%1 不是有效的 Win32 应用程序。"
Please check your debugger configuration and/or network access.
这个错误往往是因为在运行 windbg preview
的时候采用的是 Autodetect
模式,大多数情况下都没有问题,但也不是绝对,如果遇到了,可以强行改成 x86
模式即可,截图如下:
打开后,重新执行 .load 加载,搞定。。。截图如下: