Evaluating symbols on unloaded modules?

How would I find out the “loaded” symbol (and source file/line) when I
get something like this in my stack:
f5a1e93c fffb6c20 ffffffff f5a1e970 f5bcf5ad
<unloaded_rsc4dsp.sys>+0x13dd

I’m not very good with symbol tricks with WinDbg, and I didn’t find
anything helpful in the online help.

Thanks in advance!</unloaded_rsc4dsp.sys>

You could open up Rsc4Dsp.sys using the “open crash/memory dump” option in another debugger session, and use the usual symbol resolution commands from there.

? S


From: Taed Wynnell
Sent: Monday, January 26, 2009 16:46
To: Kernel Debugging Interest List
Subject: [windbg] Evaluating symbols on unloaded modules?

How would I find out the “loaded” symbol (and source file/line) when I get something like this in my stack:
f5a1e93c fffb6c20 ffffffff f5a1e970 f5bcf5ad <unloaded_rsc4dsp.sys>+0x13dd

I’m not very good with symbol tricks with WinDbg, and I didn’t find anything helpful in the online help.

Thanks in advance!


You are currently subscribed to windbg as: unknown lmsubst tag argument: ‘’
To unsubscribe send a blank email to xxxxx@lists.osr.com</unloaded_rsc4dsp.sys>

.reload /unl Rsc4Dsp.SYS

Good luck,

Ilya Faenson
Rockville, MD USA


From: Taed Wynnell
Sent: Monday, January 26, 2009 16:46
To: Kernel Debugging Interest List
Subject: [windbg] Evaluating symbols on unloaded modules?

How would I find out the “loaded” symbol (and source file/line) when I get
something like this in my stack:
f5a1e93c fffb6c20 ffffffff f5a1e970 f5bcf5ad
<unloaded_rsc4dsp.sys>+0x13dd

I’m not very good with symbol tricks with WinDbg, and I didn’t find anything
helpful in the online help.

Thanks in advance!</unloaded_rsc4dsp.sys>

Thanks! That worked.

wrote in message news:xxxxx@windbg…
> reload /unl Rsc4Dsp.SYS
>
> Good luck,
>
> Ilya Faenson
> Rockville, MD USA
>
> ________________________________
> From: Taed Wynnell
> Sent: Monday, January 26, 2009 16:46
> To: Kernel Debugging Interest List
> Subject: [windbg] Evaluating symbols on unloaded modules?
>
>
> How would I find out the “loaded” symbol (and source file/line) when I get
> something like this in my stack:
> f5a1e93c fffb6c20 ffffffff f5a1e970 f5bcf5ad
> <unloaded_rsc4dsp.sys>+0x13dd
>
> I’m not very good with symbol tricks with WinDbg, and I didn’t find
anything
> helpful in the online help.
>
> Thanks in advance!
>
></unloaded_rsc4dsp.sys>