Windows System Software -- Consulting, Training, Development -- Unique Expertise, Guaranteed Results

Before Posting...
Please check out the Community Guidelines in the Announcements and Administration Category.

More Info on Driver Writing and Debugging


The free OSR Learning Library has more than 50 articles on a wide variety of topics about writing and debugging device drivers and Minifilters. From introductory level to advanced. All the articles have been recently reviewed and updated, and are written using the clear and definitive style you've come to expect from OSR over the years.


Check out The OSR Learning Library at: https://www.osr.com/osr-learning-library/


Server 2019 symbols problem

EugeneEugene Member Posts: 120

Hi!
There are problems with symbols. :/
I used en_windows_server_2019_x64_dvd_4cb967d8.iso to install the server for the testing purpose. And I can not analyze dumps.


0: kd> vertarget
Windows 10 Kernel Version 17763 MP (2 procs) Free x64
Product: Server, suite: TerminalServer SingleUserTS
Built by: 17763.1.amd64fre.rs5_release.180914-1434
Machine Name:
Kernel base = 0xfffff80026a0f000 PsLoadedModuleList = 0xfffff80026e29a50
Debug session time: Wed Dec 12 19:03:54.034 2018 (UTC + 3:00)
System Uptime: 0 days 0:05:34.564

0: kd> !sym noisy
Unable to get program counter
noisy mode - symbol prompts on

0: kd> .reload -f nt
SYMSRV: BYINDEX: 0x39
d:\src\sym
ntkrnlmp.pdb
2CE52275FB3E960168AAEF4FC5C91BE11
SYMSRV: UNC: d:\src\sym\ntkrnlmp.pdb\2CE52275FB3E960168AAEF4FC5C91BE11\ntkrnlmp.pdb - path not found
SYMSRV: UNC: d:\src\sym\ntkrnlmp.pdb\2CE52275FB3E960168AAEF4FC5C91BE11\ntkrnlmp.pd_ - path not found
SYMSRV: UNC: d:\src\sym\ntkrnlmp.pdb\2CE52275FB3E960168AAEF4FC5C91BE11\file.ptr - path not found
SYMSRV: RESULT: 0x80070003
SYMSRV: BYINDEX: 0x3A
d:\src\sym*https://msdl.microsoft.com/download/symbols
ntkrnlmp.pdb
2CE52275FB3E960168AAEF4FC5C91BE11
SYMSRV: UNC: d:\src\sym\ntkrnlmp.pdb\2CE52275FB3E960168AAEF4FC5C91BE11\ntkrnlmp.pdb - path not found
SYMSRV: UNC: d:\src\sym\ntkrnlmp.pdb\2CE52275FB3E960168AAEF4FC5C91BE11\ntkrnlmp.pd_ - path not found
SYMSRV: UNC: d:\src\sym\ntkrnlmp.pdb\2CE52275FB3E960168AAEF4FC5C91BE11\file.ptr - path not found
SYMSRV: HTTPGET: /download/symbols/ntkrnlmp.pdb/2CE52275FB3E960168AAEF4FC5C91BE11/ntkrnlmp.pdb
SYMSRV: HttpQueryInfo: 80190194 - HTTP_STATUS_NOT_FOUND
SYMSRV: HTTPGET: /download/symbols/ntkrnlmp.pdb/2CE52275FB3E960168AAEF4FC5C91BE11/ntkrnlmp.pd_
SYMSRV: HttpQueryInfo: 80190194 - HTTP_STATUS_NOT_FOUND
SYMSRV: HTTPGET: /download/symbols/ntkrnlmp.pdb/2CE52275FB3E960168AAEF4FC5C91BE11/file.ptr
SYMSRV: HttpQueryInfo: 80190194 - HTTP_STATUS_NOT_FOUND
SYMSRV: RESULT: 0x80190194
DBGHELP: ntkrnlmp.pdb - file not found
*** ERROR: Symbol file could not be found. Defaulted to export symbols for ntkrnlmp.exe -
DBGHELP: nt - export symbols

0: kd> lmvm nt
Browse full module list
start end module name
fffff80026a0f000 fffff8002747d000 nt (export symbols) ntkrnlmp.exe
Loaded symbol image file: ntkrnlmp.exe
Image path: ntkrnlmp.exe
Image name: ntkrnlmp.exe
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 1130B79A (This is a reproducible build file hash, not a timestamp)
CheckSum: 00944351
ImageSize: 00A6E000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:

0: kd> !lmi nt
Unable to get program counter
Loaded Module Info: [nt]
Module: ntkrnlmp
Base Address: fffff80026a0f000
Image Name: ntkrnlmp.exe
Machine Type: 34404 (X64)
Time Stamp: 1130b79a (This is a reproducible build file hash, not a true timestamp)
Size: a6e000
CheckSum: 944351
Characteristics: 22
Debug Data Dirs: Type Size VA Pointer
CODEVIEW 25, 380e60, 37d260 RSDS - GUID: {2CE52275-FB3E-9601-68AA-EF4FC5C91BE1}
Age: 1, Pdb: ntkrnlmp.pdb
POGO 1420, 380e88, 37d288 [Data not mapped]
REPRO 0, 0, 0 [Debug data not mapped]
Image Type: MEMORY - Image read successfully from loaded memory.
Symbol Type: EXPORT - PDB not found
Load Report: export symbols


MS please publish symbols of updated modules.

Sign In or Register to comment.

Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!

Upcoming OSR Seminars
OSR has suspended in-person seminars due to the Covid-19 outbreak. But, don't miss your training! Attend via the internet instead!
Kernel Debugging 30 Mar 2020 OSR Seminar Space
Developing Minifilters 15 Jun 2020 LIVE ONLINE
Writing WDF Drivers 22 June 2020 LIVE ONLINE
Internals & Software Drivers 28 Sept 2020 Dulles, VA