none
Symfix doesn't output anything RRS feed

  • Question

  • I'm trying to download kernel symbols, i tried doing it through Windows Debugging Tools but it says Windows Installer isn't properly installed or something like that, so I command ".symfix" in the windbg command line, and it simply doesn't output anything. It doesn't say *BUSY* so I think it's not doing anything

    Any ideas?

    thanks

    Friday, March 22, 2019 2:00 AM

All replies

  • .symfix does not download symbols, just sets the symbol-path.
    0:000> .symfix
    0:000> .sympath
    Symbol search path is: srv*
    Expanded Symbol search path is: cache*;SRV*https://msdl.microsoft.com/download/symbols

    To access Microsoft Symbol Server, from where you get the symbols matching your kernel, good practice is to set environment variable

     _NT_SYMBOL_PATH

    https://docs.microsoft.com/en-us/windows/desktop/dxtecharts/debugging-with-symbols

    or use (valid for present debugging session)
    .sympath
    e.g.:

    0:000> .sympath srv*c:\MSSymbols*https://msdl.microsoft.com/download/symbols

    (Here, directory c:\MSSymbols has to exist.)

    For default symbol loading behavior is (time saving) 'deferred',
    https://docs.microsoft.com/en-us/windows-hardware/drivers/debugger/deferred-symbol-loading
    you can force loading of symbols for modules of special interest with
    ld
    https://docs.microsoft.com/en-us/windows-hardware/drivers/debugger/ld--load-symbols-
    !sym noisy
    will give verbose/diagnostic output:
    0:000> !sym noisy
    noisy mode - symbol prompts on
    0:000> ld kernel32
    SYMSRV:  BYINDEX: 0x6
             c:\mssymbols*https://msdl.microsoft.com/download/symbols
             kernel32.pdb
             0C5D9C23B42DDEB933FF48C9A62BEA0D1
    SYMSRV:  PATH: c:\mssymbols\kernel32.pdb\0C5D9C23B42DDEB933FF48C9A62BEA0D1\kernel32.pdb
    SYMSRV:  RESULT: 0x00000000
    DBGHELP: KERNEL32 - public symbols  
            c:\mssymbols\kernel32.pdb\0C5D9C23B42DDEB933FF48C9A62BEA0D1\kernel32.pdb
    Symbols loaded for KERNEL32
    If you want to download symbols without a debugging session, you may need to refer to
    SymChk
    https://docs.microsoft.com/en-us/windows-hardware/drivers/debugger/symchk
    because download of 'Windows Symbol Packages' is - for good reason - deprecated
    https://docs.microsoft.com/en-us/windows-hardware/drivers/debugger/debugger-download-symbols

    With kind regards

    Friday, March 22, 2019 8:10 AM