windbg - sos의 name2ee 명령어 실행 시 "Failed to request module list." 오류
예를 들어, clr.dll의 로딩 시점에 맞춰 bp를 설정하고,
0:000> sxe ld:clr
로드가 된 시점에,
0:000> g
ModLoad: 00007ff8`6e3e0000 00007ff8`6e48a000 C:\Windows\System32\ADVAPI32.dll
ModLoad: 00007ff8`6da10000 00007ff8`6daae000 C:\Windows\System32\msvcrt.dll
ModLoad: 00007ff8`6dab0000 00007ff8`6db4b000 C:\Windows\System32\sechost.dll
ModLoad: 00007ff8`6db50000 00007ff8`6dc74000 C:\Windows\System32\RPCRT4.dll
ModLoad: 00007ff8`58a70000 00007ff8`58b1a000 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscoreei.dll
ModLoad: 00007ff8`6e370000 00007ff8`6e3c5000 C:\Windows\System32\SHLWAPI.dll
ModLoad: 00007ff8`6abf0000 00007ff8`6ac02000 C:\Windows\SYSTEM32\kernel.appcore.dll
ModLoad: 00007ff8`63b90000 00007ff8`63b9a000 C:\Windows\SYSTEM32\VERSION.dll
ModLoad: 00007ff8`57240000 00007ff8`57d02000 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
ntdll!NtMapViewOfSection+0x14:
00007ff8`6f6ac294 c3 ret
sos 확장을 올린 후,
0:000> .loadby sos clr
!
name2ee 명령어를 실행했을 때 오류가 발생하게 됩니다.
0:000> !name2ee *!Any
Failed to request module list.
왜냐하면, clr.dll이 뜨는 시점에는 그 어떤 모듈도 닷넷의 형식이라고 인식되기 전이므로 실제로 목록이 없기 때문입니다. 따라서, 약간 늦춰 clrjit.dll 로딩 시점으로 bp를 잡아준다면,
0:000> sxe ld:clrjit
0:000> g
ModLoad: 00007ff8`6eb10000 00007ff8`6ecb0000 C:\Windows\System32\USER32.dll
ModLoad: 00007ff8`6d140000 00007ff8`6d162000 C:\Windows\System32\win32u.dll
ModLoad: 00007ff8`57060000 00007ff8`5711d000 C:\Windows\SYSTEM32\ucrtbase_clr0400.dll
ModLoad: 00007ff8`57040000 00007ff8`57056000 C:\Windows\SYSTEM32\VCRUNTIME140_CLR0400.dll
ModLoad: 00007ff8`6d680000 00007ff8`6d6aa000 C:\Windows\System32\GDI32.dll
ModLoad: 00007ff8`6cfe0000 00007ff8`6d0e9000 C:\Windows\System32\gdi32full.dll
ModLoad: 00007ff8`6ce40000 00007ff8`6cedd000 C:\Windows\System32\msvcp_win.dll
ModLoad: 00007ff8`6cee0000 00007ff8`6cfe0000 C:\Windows\System32\ucrtbase.dll
ModLoad: 00007ff8`6e770000 00007ff8`6e7a0000 C:\Windows\System32\IMM32.DLL
ModLoad: 00007ff8`6d6b0000 00007ff8`6da05000 C:\Windows\System32\combase.dll
(2ef8.d40): Unknown exception - code 04242420 (first chance)
ModLoad: 00007ff8`6e3d0000 00007ff8`6e3d8000 C:\Windows\System32\psapi.dll
ModLoad: 00007ff8`54ad0000 00007ff8`560d0000 C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\52ce2de93895cec3507794c893974551\mscorlib.ni.dll
ModLoad: 00007ff8`6e8c0000 00007ff8`6e9ea000 C:\Windows\System32\ole32.dll
ModLoad: 00007ff8`6d6b0000 00007ff8`6da05000 C:\Windows\System32\combase.dll
ModLoad: 00007ff8`6d5a0000 00007ff8`6d61f000 C:\Windows\System32\bcryptPrimitives.dll
ModLoad: 00007ff8`54840000 00007ff8`5498f000 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clrjit.dll
ntdll!NtMapViewOfSection+0x14:
00007ff8`6f6ac294 c3 ret
적어도 이 단계에서는 메인 어셈블리의 모듈과 함께 mscorlib.dll 정도는 열거할 수 있습니다.
0:000> !name2ee *!Any
Module: 00007ff854ad1000
Assembly: mscorlib.dll
--------------------------------------
Module: 00007ff7f7c14148
Assembly: ConsoleApp1.exe
[이 글에 대해서 여러분들과 의견을 공유하고 싶습니다. 틀리거나 미흡한 부분 또는 의문 사항이 있으시면 언제든 댓글 남겨주십시오.]