0:014> .process Implicit process is now 7fe5f000 0:014> dt _PEB 7fe5f000 ntdll!_PEB +0x000 InheritedAddressSpace : 0 '' +0x001 ReadImageFileExecOptions : 0 '' +0x002 BeingDebugged : 0 '' +0x003 BitField : 0x4 '' +0…
0:014> .process Implicit process is now 7fe5f000 0:014> dt _PEB 7fe5f000 ntdll!_PEB +0x000 InheritedAddressSpace : 0 '' +0x001 ReadImageFileExecOptions : 0 '' +0x002 BeingDebugged : 0 '' +0x003 BitField : 0x4 '' +0…
依次输入: .sympath srv*C:\symbols*http://msdl.microsoft.com/download/symbols .reload /f ntdll.dll