Can't use symbol server for notepad.pdb - no header information available RRS feed

  • General discussion

  • I'm going through some examples from inside windows debugging 3rd edition. During a live debug I get the following out when trying to load symbols for notepad:

    lkd> .reload /f notepad.exe

    "notepad.exe" was not found in the image list.
    Debugger will attempt to load "notepad.exe" at given base 00000000`00000000.

    Please provide the full image name, including the extension (i.e. kernel32.dll)
    for more reliable results.Base address and size overrides can be given as
    .reload <image.ext>=<base>,<size>.
    DBGENG:  notepad.exe - Partial symbol image load missing image info
    DBGHELP: No header for notepad.exe.  Searching for dbg file
    DBGHELP: .\notepad.dbg - file not found
    DBGHELP: .\exe\notepad.dbg - path not found
    DBGHELP: .\symbols\exe\notepad.dbg - path not found
    DBGHELP: notepad.exe missing debug info.  Searching for pdb anyway
    DBGHELP: Can't use symbol server for notepad.pdb - no header information available
    DBGHELP: notepad.pdb - file not found
    DBGHELP: notepad - no symbols loaded
    Unable to add module at 00000000`00000000

    I have tried to rebuild my symbol cache .reload /f  and I notice the notepad.pdb are not being downloaded.

    I a novice therefore any help is welcomed.


    Friday, June 21, 2013 8:00 PM

All replies

  • AFAIK most the applications that ship with Windows don't have symbols in the symbol server.  What are you trying to do that make you think you need the symbols?

    Don Burn Windows Filesystem and Driver Consulting Website: Blog:

    Friday, June 21, 2013 8:06 PM
  • I trying to look at the function that are called. Below is a symchk that allowed me to finally download the symbols. I concerned by this line:

    DBGHELP: No header for C:\Windows\System32\notepad.exe.  Searching for image on disk

    what does this mean?

    Setting environment for using Microsoft Visual Studio 2010 x86 tools.

    16:02:56.63 cd "\Program Files (x86)\Debugging Tools for Windows (x86)"

    16:03:10.40 symchk.exe /v /if C:\Windows\System32\notepad.exe /s SRV*c:\symbol*http://msdl.micro
    [SYMCHK] Searching for symbols to C:\Windows\System32\notepad.exe in path SRV*c:\symbol*http://m
    DBGHELP: Symbol Search Path: SRV*c:\symbol*
    [SYMCHK] Using search path "SRV*c:\symbol*"
    DBGHELP: No header for C:\Windows\System32\notepad.exe.  Searching for image on disk
    DBGHELP: C:\Windows\System32\notepad.exe - OK
    SYMSRV:  notepad.pdb from 42984 bytes - copied
    DBGHELP: notepad - public symbols
    [SYMCHK] MODULE64 Info ----------------------
    [SYMCHK] Struct size: 1680 bytes
    [SYMCHK] Base: 0x01000000
    [SYMCHK] Image size: 196608 bytes
    [SYMCHK] Date: 0x4a5bc60f
    [SYMCHK] Checksum: 0x00039741
    [SYMCHK] NumSyms: 0
    [SYMCHK] SymType: SymPDB
    [SYMCHK] ModName: notepad
    [SYMCHK] ImageName: C:\Windows\System32\notepad.exe
    [SYMCHK] LoadedImage: C:\Windows\System32\notepad.exe
    [SYMCHK] PDB: "c:\symbol\notepad.pdb\E325F5195AE94FAEB58D25C9DF8C0CFD2\notepad.pdb"
    [SYMCHK] CV DWORD: 0x53445352
    [SYMCHK] CV Data:  notepad.pdb
    [SYMCHK] PDB Sig:  0
    [SYMCHK] PDB7 Sig: {E325F519-5AE9-4FAE-B58D-25C9DF8C0CFD}
    [SYMCHK] Age: 2
    [SYMCHK] PDB Matched:  TRUE
    [SYMCHK] DBG Matched:  TRUE
    [SYMCHK] Line nubmers: FALSE
    [SYMCHK] Global syms:  FALSE
    [SYMCHK] Type Info:    FALSE
    [SYMCHK] ------------------------------------
    SymbolCheckVersion  0x00000002
    Result              0x00030001
    DbgTimeDateStamp    0x4a5bc60f
    DbgSizeOfImage      0x00030000
    DbgChecksum         0x00039741
    PdbFilename         c:\symbol\notepad.pdb\E325F5195AE94FAEB58D25C9DF8C0CFD2\notepad.pdb
    PdbSignature        {E325F519-5AE9-4FAE-B58D-25C9DF8C0CFD}
    PdbDbiAge           0x00000002
    [SYMCHK] [ 0x00000000 - 0x00030001 ] Checked "C:\Windows\System32\notepad.exe"

    SYMCHK: FAILED files = 0
    SYMCHK: PASSED + IGNORED files = 1


    Friday, June 21, 2013 8:18 PM
  • are you sure you are debugging the process that is executing notepad.exe? the symchk message indicates the answer is no. what does lm say? !lmi?

    d -- This posting is provided "AS IS" with no warranties, and confers no rights.

    Friday, June 21, 2013 8:47 PM
  • at the point of that message I was not in the context of the notepad process.

    Do you think that is my issue?


    Friday, June 21, 2013 9:04 PM