missing ntdll.dll symbols

Hello,
i’m not able to receive ntdll.dll symbols for Win7 x86 OS (7600.16539.x86fre.win7_gdr.100226-1909), is there a way how to solve this? Microsoft claims their symbol server should contain OS symbols (including hot fixes, Service Packs and Security Rollup Packages).
Thanks!

SYMSRV:? http://msdl.microsoft.com/download/symbols/ntdll.dll/4BA9B21E13c000/ntdll.dll not found

6: kd> lmvm ntdll
start??? end??? module name
76eb0000 76fec000?? ntdll??? (no symbols)???
??? Loaded symbol image file: ntdll.dll
??? Image path: C:\Windows\SYSTEM32\ntdll.dll
??? Image name: ntdll.dll
??? Timestamp:??? Wed Mar 24 07:33:02 2010 (4BA9B21E)
??? CheckSum:??? 0014700F
??? ImageSize:??? 0013C000
??? Translations:??? 0000.04b0 0000.04e4 0409.04b0 0409.04e4

notice that the debugger in your case is looking for ntdll itself, not its symbols.

Try loading the ntdll.dll from your test machine into kernel debugger as if it were a dump, and see what happens. Likely, it will pull the symbols from the symbols server. Then, point the debugger an the .pdb file you pulled.
“John Smith” wrote in message news:xxxxx@windbg…
Hello,
i’m not able to receive ntdll.dll symbols for Win7 x86 OS (7600.16539.x86fre.win7_gdr.100226-1909), is there a way how to solve this? Microsoft claims their symbol server should contain OS symbols (including hot fixes, Service Packs and Security Rollup Packages).
Thanks!

SYMSRV: http://msdl.microsoft.com/download/symbols/ntdll.dll/4BA9B21E13c000/ntdll.dll not found

6: kd> lmvm ntdll
start end module name
76eb0000 76fec000 ntdll (no symbols)
Loaded symbol image file: ntdll.dll
Image path: C:\Windows\SYSTEM32\ntdll.dll
Image name: ntdll.dll
Timestamp: Wed Mar 24 07:33:02 2010 (4BA9B21E)
CheckSum: 0014700F
ImageSize: 0013C000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

The binaries are (supposed to) be on the symbol server in addition to the pdbs, so that dump file debugging works.

  • S

From: xxxxx@lists.osr.com [mailto:xxxxx@lists.osr.com] On Behalf Of Sergei Vorobiev
Sent: Friday, July 02, 2010 4:51 PM
To: Kernel Debugging Interest List
Subject: Re:[windbg] missing ntdll.dll symbols

notice that the debugger in your case is looking for ntdll itself, not its symbols.

Try loading the ntdll.dll from your test machine into kernel debugger as if it were a dump, and see what happens. Likely, it will pull the symbols from the symbols server. Then, point the debugger an the .pdb file you pulled.
“John Smith” > wrote in message news:xxxxx@windbg…
Hello,
i’m not able to receive ntdll.dll symbols for Win7 x86 OS (7600.16539.x86fre.win7_gdr.100226-1909), is there a way how to solve this? Microsoft claims their symbol server should contain OS symbols (including hot fixes, Service Packs and Security Rollup Packages).
Thanks!

SYMSRV: http://msdl.microsoft.com/download/symbols/ntdll.dll/4BA9B21E13c000/ntdll.dll not found

6: kd> lmvm ntdll
start end module name
76eb0000 76fec000 ntdll (no symbols)
Loaded symbol image file: ntdll.dll
Image path: C:\Windows\SYSTEM32\ntdll.dll
Image name: ntdll.dll
Timestamp: Wed Mar 24 07:33:02 2010 (4BA9B21E)
CheckSum: 0014700F
ImageSize: 0013C000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4


WINDBG is sponsored by OSR

For our schedule of WDF, WDM, debugging and other seminars visit:
http://www.osr.com/seminars

To unsubscribe, visit the List Server section of OSR Online at http://www.osronline.com/page.cfm?name=ListServer