View Single Post
  #1  
Old 12-01-2009, 10:57
WhoCares's Avatar
WhoCares WhoCares is offline
who cares
 
Join Date: Jan 2002
Location: Here
Posts: 468
Rept. Given: 11
Rept. Rcvd 32 Times in 25 Posts
Thanks Given: 69
Thanks Rcvd at 247 Times in 94 Posts
WhoCares Reputation: 32
[Solved]IDA 5.2 can't recognize XP SP3 symbols

I'm using IDA v5.2. It can identify XP SP0 symbols but can't identify XP SP3 symbols. Don't know why.

I downloaded "WindowsXP-KB936929-SP3-x86-symbols-full-ENU.exe" and extracted "ntdll.pdb" to system32 directory(sure current OS is XP SP3), then loaded ntdll.dll and ntdll.pdb with IDA. It could't identify "sub_7C93B077" as "LdrpInitialize" though it said "total 1016 symbols loaded" in the log window.

But the same procedure works for XP SP0 ntdll.dll/ntdll.pdb.

BTW:
IDA v5.4 can use windbg engine now:
_http://www.hex-rays.com/idapro/debugger/windbg_tut.pdf


Edit:
Finally I found the answer: just create an empty directory "symsrv.yes" in IDA directory, it will load SP3 pdb symbols.
_http://hi.baidu.com/0xfei/blog/item/9c74aad9f710f4ef39012fa4.html
Attached Images
File Type: png 20091201105505143.png (125.7 KB, 10 views)
__________________
AKA Solomon/blowfish.
Reply With Quote