windbg调xp的calc(手工虚拟地址到物理地址转换练习)

原文地址：http://blog.csdn.net/hjl243632044/article/details/7664645

上篇记录的够详细了，本篇只记数据。 

 计算器中放入123456。

 符号文件路径填入这个;C:\symbols\dsds.pdb;srv*c:\symbols*http://msdl.microsoft.com/download/symbols;C:\symbols

用户模式数据：

WARNING: Non-directory path:'C:\symbols\dsds.pdb'

WARNING: Whitespace at end of path element

0:002> .reload

Reloading current modules

.........................

0:002> xcalc!g*

01014f08 calc!ghwndTimeOutDlg = <no typeinformation>

01014d9c calc!g_fHighContrast = <no typeinformation>

0100514d calc!GetKeyColor = <no typeinformation>

01014ef8 calc!gfExiting = <no typeinformation>

0100518d calc!GetHelpID = <no typeinformation>

01014c70 calc!ghnoPrecNum = <no typeinformation>

01014c08 calc!ghnoParNum = <no typeinformation>

01014038 calc!gszSep = <no typeinformation>

01014eec calc!ghcurOld = <no typeinformation>

01014d38 calc!g_ahnoChopNumbers = <notype information>

01014f00 calc!ghCalcDone = <no typeinformation>

01014db0 calc!gpszNum = <no type information>

01014f0c calc!gnPendingError = <no typeinformation>

01014000 calc!gnDecGrouping = <no typeinformation>

01014dc0 calc!gcio = <no typeinformation>

01014d98 calc!ghnoLastNum = <no typeinformation>

01014f04 calc!ghDogThrea