Re: ntldt_dbg use...

.kdfiles is a bit temperamental. A couple of things:

  1. The paths much match exactly. That is \Windows\System32\ntoskrnl.exe and c:\windows\system32\ntosnkrnl.exe are not the same thing.

  2. Try setting the _NT_KD_FILES environment variable.

  3. Check out “Mapping Driver Files” in the WinDbg documentation. It is in the index, unlike .kdfiles

  4. It has been a long time since I have tried this, but as I recall, the order of lines in the map file mattered sometimes as well. I’m not sure about this, but that is what I recall.

Good luck,

mm