Exetools  

Go Back   Exetools > General > General Discussion

Notices

 
 
Thread Tools Display Modes
Prev Previous Post   Next Post Next
  #1  
Old 12-01-2009, 10:57
WhoCares's Avatar
WhoCares WhoCares is offline
who cares
 
Join Date: Jan 2002
Location: Here
Posts: 468
Rept. Given: 11
Rept. Rcvd 32 Times in 25 Posts
Thanks Given: 69
Thanks Rcvd at 247 Times in 94 Posts
WhoCares Reputation: 32
[Solved]IDA 5.2 can't recognize XP SP3 symbols

I'm using IDA v5.2. It can identify XP SP0 symbols but can't identify XP SP3 symbols. Don't know why.

I downloaded "WindowsXP-KB936929-SP3-x86-symbols-full-ENU.exe" and extracted "ntdll.pdb" to system32 directory(sure current OS is XP SP3), then loaded ntdll.dll and ntdll.pdb with IDA. It could't identify "sub_7C93B077" as "LdrpInitialize" though it said "total 1016 symbols loaded" in the log window.

But the same procedure works for XP SP0 ntdll.dll/ntdll.pdb.

BTW:
IDA v5.4 can use windbg engine now:
_http://www.hex-rays.com/idapro/debugger/windbg_tut.pdf


Edit:
Finally I found the answer: just create an empty directory "symsrv.yes" in IDA directory, it will load SP3 pdb symbols.
_http://hi.baidu.com/0xfei/blog/item/9c74aad9f710f4ef39012fa4.html
Attached Images
File Type: png 20091201105505143.png (125.7 KB, 10 views)
__________________
AKA Solomon/blowfish.
Reply With Quote
 


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
IDA can't automatically recognize try/finally structures by Borland compilers WhoCares General Discussion 2 10-09-2004 20:52
Can someone recognize this code??? yaa General Discussion 6 10-06-2003 04:37


All times are GMT +8. The time now is 00:12.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )