Properly support 32-bit ntdll in 32-bit WoW64 processes

goldshtn / LiveStacks

Collect, aggregate, and display live stack traces for ETW events, including CPU sampling, of native and .NET processes.

MIT License

52 stars 4 forks source link

Properly support 32-bit ntdll in 32-bit WoW64 processes #8

Open goldshtn opened 7 years ago

goldshtn commented 7 years ago

When targeting 32-bit processes on WoW64, the 64-bit ntdll is resolved but the 32-bit ntdll doesn't have symbols properly loaded, which causes its frames to not be resolved.