WinDbg 调用堆栈十六进制偏移量 [英] WinDbg callstack hexadecimal offset

问题描述

函数名后面的十六进制值(带+)代表什么?

what does the hexadecimal value (with the +) behind the function name stands for ?

00 012ff668 7795aa24 ntdll_778f0000!LdrInitShimEngineDynamic+0x726
01 012ff8a0 77956e84 ntdll_778f0000!WinSqmSetDWORD64+0x14e4
02 012ff8f4 77956cd0 ntdll_778f0000!LdrInitializeThunk+0x1c4
03 012ff8fc 00000000 ntdll_778f0000!LdrInitializeThunk+0x10

推荐答案

这些数字 指示距最近解析函数条目的偏移量.较高的数字 WinSqmSetDWORD64+0x14e4 表示您有符号加载问题，Windbg 使用了 导出表获取函数名，并根据从导出表中得到的函数名生成大偏移量.

These numbers indicate offset from the nearest resolved function entry. The higher number WinSqmSetDWORD64+0x14e4 indicates you have symbol loading issues and Windbg used the export table to get the function name and generated the large offset based on the function names it got from the export table.

这篇关于WinDbg 调用堆栈十六进制偏移量的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！