Microsoft DEBUG Symbols under Soft ICE

NTDEV
1

I am trying to use Windows 2000+SP4 Release symbols under Soft ICE without success.
When they are loaded under Soft ICE the NMS table is created (Numega Symbol Table) but the symbols do not match the code.
I am using NTOSKRNL table.

It is curious because other symbols tables (XP, and other W2000 versions) do match. The target machine is single CPU.

Anyone has found a similar problem using Soft ICE with Microsoft symbols ?

thanks.
Inaki.

2

Check if you have proper symbol + executable pair. Symbols for file named ntoskrln.exe may not be in the ntoskrnl.pdb file; usually it is ntkrnlmp.pdb file because original executable was renamed. You can examine ntoskrnl.exe Properties | Version and Original file name string. But if you tell symbol converter executable name instead of symbol name, it should find correct symbols itself. You can also use their Symbols Retriever utility.

If everything seems correct, try Compuware tech support. They usually respond within one day.

Best regards,

Michal Vodicka
UPEK, Inc.
[xxxxx@upek.com, http://www.upek.com]

From: xxxxx@lists.osr.com[SMTP:xxxxx@lists.osr.com] on behalf of I?aki Castillo[SMTP:xxxxx@pandasoftware.es]
Reply To: Windows System Software Devs Interest List
Sent: Wednesday, September 22, 2004 7:31 PM
To: Windows System Software Devs Interest List
Subject: [ntdev] Microsoft DEBUG Symbols under Soft ICE

I am trying to use Windows 2000+SP4 Release symbols under Soft ICE without success.
When they are loaded under Soft ICE the NMS table is created (Numega Symbol Table) but the symbols do not match the code.
I am using NTOSKRNL table.

It is curious because other symbols tables (XP, and other W2000 versions) do match. The target machine is single CPU.

Anyone has found a similar problem using Soft ICE with Microsoft symbols ?

thanks.
Inaki.

Questions? First check the Kernel Driver FAQ at http://www.osronline.com/article.cfm?id=256

You are currently subscribed to ntdev as: unknown lmsubst tag argument: ‘’
To unsubscribe send a blank email to xxxxx@lists.osr.com

3

Are you sure the single CPU does not have hyper-thread capabilities?

Check the “Original File Name” for ntoskrnl.exe in the “Version” tab for its
properties.

It will be ntkrnlmp.exe if you have hyper-threading enabled and ntoskrnl.exe
if it really is single CPU.

Shahar

From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of I?aki Castillo
Sent: Wednesday, September 22, 2004 7:32 PM
To: Windows System Software Devs Interest List
Subject: [ntdev] Microsoft DEBUG Symbols under Soft ICE

I am trying to use Windows 2000+SP4 Release symbols under Soft ICE without
success.

When they are loaded under Soft ICE the NMS table is created (Numega Symbol
Table) but the symbols do not match the code.

I am using NTOSKRNL table.

It is curious because other symbols tables (XP, and other W2000 versions) do
match. The target machine is single CPU.

Anyone has found a similar problem using Soft ICE with Microsoft symbols ?

thanks.

Inaki.

Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256

You are currently subscribed to ntdev as: unknown lmsubst tag argument: ‘’
To unsubscribe send a blank email to xxxxx@lists.osr.com