make dir c:\MySymbols
Alt+1 in WInDBG and execute
.sympath cache*c:\MySymbols;srv*https://msdl.microsoft.com/download/symbols .reload
after that
!clrstack
if appears error message, do
.cordll -ve -u -l
If you see message ERROR: Unable to load DLL mscordacwks, take mscordacwks from original system and copy it into \mscorwks.dll\53A121FA5ae000\mscordacwks.dll
and repeat
.cordll -ve -u -l !clrstack -p
It returns function calls with arguments. To dump the object's value use !do with HEX address, e.g.
!do 0x09fd0618
Enjoy!
No comments:
Post a Comment