WinDbg + SOS.dll 初始设置

安装好 WinDbg 以后，在系统环境中设置符号和扩展搜索路径。

_NT_DEBUGGER_EXTENSION_PATH=C:/WINDOWS/Microsoft.NET/Framework/v2.0.50727
_NT_SYMBOL_PATH=SRV*D:/Program/Symbols*http://msdl.microsoft.com/download/symbols

"D:/Program/Symbols" 是符号文件的本地缓存路径，可根据自己的设置替换。

启动 WinDbg 开始调试。

1. 快捷键 "Ctrl + E" 打开一个托管程序。

Microsoft (R) Windows Debugger Version 6.9.0003.113 X86
Copyright (c) Microsoft Corporation. All rights reserved.

CommandLine: "D:/Temp/Learn.CUI.exe"
Symbol search path is: srv*D:/Program/Symbols* http://msdl.microsoft.com/download/symbols
Executable search path is: 
ModLoad: 00400000 00408000 Learn.CUI.exe
ModLoad: 7c920000 7c9b3000 ntdll.dll
ModLoad: 79000000 79046000 C:/WINDOWS/system32/mscoree.dll
ModLoad: 7c800000 7c91e000 C:/WINDOWS/system32/KERNEL32.dll
(b8.220): Break instruction exception - code 80000003 (first chance)
eax=00251eb4 ebx=7ffdf000 ecx=00000001 edx=00000002 esi=00251f48 edi=00251eb4
eip=7c92120e esp=0012fb20 ebp=0012fc94 iopl=0 nv up ei pl nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000202
ntdll!DbgBreakPoint:
7c92120e cc int 3

2. 可以用相关指令查看我们设置的路径。

0:000>  .sympath
Symbol search path is: srv*D:/Program/Symbols* http://msdl.microsoft.com/download/symbols
0:000>  .extpath
Extension search path is: C:/WINDOWS/Microsoft.NET/Framework/v2.0.50727;C:/Program Files/Debugging Tools for Windows (x86)/WINXP;C:/Program Files/Debugging Tools for Windows (x86)/winext;C:/Program Files/Debugging Tools for Windows (x86)/winext/arcade;C:/Program Files/Debugging Tools for Windows (x86)/pri;C:/Program Files/Debugging Tools for Windows (x86);C:/Program Files/Debugging Tools for Windows (x86)/winext/arcade;C:/WINDOWS/system32;C:/WINDOWS;C:/WINDOWS/System32/Wbem;C:/Program Files/ThinkPad/ConnectUtilities;c:/Program Files/Microsoft SQL Server/90/Tools/binn/

3. 载入 SOS.dll，开始一个调试过程。

0:000>  sxe ld:mscorjit
0:000>  g
ModLoad: 79060000 790bb000 c:/WINDOWS/Microsoft.NET/Framework/v2.0.50727/mscorjit.dll
eax=00000000 ebx=00000000 ecx=00d20000 edx=7c92e4f4 esi=00000000 edi=00000000
eip=7c92e4f4 esp=0012e56c ebp=0012e660 iopl=0 nv up ei ng nz ac pe nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000296
ntdll!KiFastSystemCallRet:
7c92e4f4 c3 ret
0:000>  .load sos
0:000>  !clrstack -a
OS Thread Id: 0x220 (0)
ESP EIP 
0012f478 7c92e4f4 [PrestubMethodFrame: 0012f478] Learn.CUI.Program.Main(System.String[])
0012f69c 7c92e4f4 [GCFrame: 0012f69c]

--------------

附: 上述方法似乎会影响 Visual Studio，导致调试启动缓慢。

改用如下方法:

(1) 在 Windbg "File -> Symbol Search Path" 窗口中输入Symbol 搜索路径，然后单击 "File -> Save Workspace" 保存设置。

(2) 将 "C:/WINDOWS/Microsoft.NET/Framework/v2.0.50727" 添加到系统路径末尾。

Path = %SystemRoot%/system32;%SystemRoot%;%SystemRoot%/System32/Wbem;c:/Program Files/Microsoft SQL Server/90/Tools/binn/;C:/WINDOWS/Microsoft.NET/Framework/v2.0.50727