![]() |
|
#1
|
||||
|
||||
|
[Solved]IDA 5.2 can't recognize XP SP3 symbols
I'm using IDA v5.2. It can identify XP SP0 symbols but can't identify XP SP3 symbols. Don't know why.
I downloaded "WindowsXP-KB936929-SP3-x86-symbols-full-ENU.exe" and extracted "ntdll.pdb" to system32 directory(sure current OS is XP SP3), then loaded ntdll.dll and ntdll.pdb with IDA. It could't identify "sub_7C93B077" as "LdrpInitialize" though it said "total 1016 symbols loaded" in the log window. But the same procedure works for XP SP0 ntdll.dll/ntdll.pdb. BTW: IDA v5.4 can use windbg engine now: _http://www.hex-rays.com/idapro/debugger/windbg_tut.pdf Edit: Finally I found the answer: just create an empty directory "symsrv.yes" in IDA directory, it will load SP3 pdb symbols. _http://hi.baidu.com/0xfei/blog/item/9c74aad9f710f4ef39012fa4.html
__________________
AKA Solomon/blowfish. |
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| IDA can't automatically recognize try/finally structures by Borland compilers | WhoCares | General Discussion | 2 | 10-09-2004 20:52 |
| Can someone recognize this code??? | yaa | General Discussion | 6 | 10-06-2003 04:37 |