Skip to content

Instantly share code, notes, and snippets.

@metathinker
Last active August 25, 2016 16:18
Show Gist options
  • Save metathinker/e25222e9f21f58f8f20059f1ca1adb21 to your computer and use it in GitHub Desktop.
Save metathinker/e25222e9f21f58f8f20059f1ca1adb21 to your computer and use it in GitHub Desktop.
Missing symbols for ntdll.dll, x64 version 10.0.14393.82 (rs1_release.160805-1735)
[ntsd C:\Windows\System32\cmd.exe]
Microsoft (R) Windows Debugger Version 10.0.14321.1024 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
CommandLine: C:\Windows\System32\cmd.exe
Symbol search path is: srv*
Executable search path is:
ModLoad: 00007ff7`32640000 00007ff7`32699000 cmd.exe
ModLoad: 00007ffd`21900000 00007ffd`21ad1000 ntdll.dll
ModLoad: 00007ffd`1f320000 00007ffd`1f3cb000 C:\Windows\System32\KERNEL32.DLL
ModLoad: 00007ffd`1e5e0000 00007ffd`1e7fd000 C:\Windows\System32\KERNELBASE.dll
ModLoad: 00007ffd`1ee90000 00007ffd`1ef2e000 C:\Windows\System32\msvcrt.dll
(e4.1940): Break instruction exception - code 80000003 (first chance)
*** ERROR: Symbol file could not be found. Defaulted to export symbols for ntdll.dll -
ntdll!LdrInitShimEngineDynamic+0x360:
00007ffd`219d2650 cc int 3
0:000> lmvm ntdll
start end module name
00007ffd`21900000 00007ffd`21ad1000 ntdll (export symbols) C:\Windows\SYSTEM32\ntdll.dll
Loaded symbol image file: C:\Windows\SYSTEM32\ntdll.dll
Image path: ntdll.dll
Image name: ntdll.dll
Timestamp: Fri Aug 5 20:19:32 2016 (57A55744)
CheckSum: 001D4713
ImageSize: 001D1000
File version: 10.0.14393.82
Product version: 10.0.14393.82
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ntdll.dll
OriginalFilename: ntdll.dll
ProductVersion: 10.0.14393.82
FileVersion: 10.0.14393.82 (rs1_release.160805-1735)
FileDescription: NT Layer DLL
LegalCopyright: © Microsoft Corporation. All rights reserved.
0:000> .sympath
Symbol search path is: srv*
Expanded Symbol search path is: cache*;SRV*https://msdl.microsoft.com/download/symbols
************* Symbol Path validation summary **************
Response Time (ms) Location
Deferred srv*
0:000> !dbghelp.sym noisy
noisy mode - symbol prompts off
0:000> .reload /f ntdll.dll
SYMSRV: BYINDEX: 0x3
C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\sym
ntdll.pdb
771D1BD6E3A14886BFD2B35BD61961C31
SYMSRV: C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\sym\ntdll.pdb\771D1BD6E3A14886BFD2B35BD61961C31\ntdll.pdb - file not found
SYMSRV: C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\sym\ntdll.pdb\771D1BD6E3A14886BFD2B35BD61961C31\ntdll.pdb not found
SYMSRV: BYINDEX: 0x4
https://msdl.microsoft.com/download/symbols
ntdll.pdb
771D1BD6E3A14886BFD2B35BD61961C31
SYMSRV: HTTPGET: /download/symbols/ntdll.pdb/771D1BD6E3A14886BFD2B35BD61961C31/ntdll.pdb
SYMSRV: HttpQueryInfo: 404 - HTTP_STATUS_NOT_FOUND
SYMSRV: HTTPGET: /download/symbols/ntdll.pdb/771D1BD6E3A14886BFD2B35BD61961C31/ntdll.pd_
SYMSRV: HttpQueryInfo: 404 - HTTP_STATUS_NOT_FOUND
SYMSRV: HTTPGET: /download/symbols/ntdll.pdb/771D1BD6E3A14886BFD2B35BD61961C31/file.ptr
SYMSRV: HttpQueryInfo: 404 - HTTP_STATUS_NOT_FOUND
SYMSRV: C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\sym\ntdll.pdb\771D1BD6E3A14886BFD2B35BD61961C31\ntdll.pdb - file not found
SYMSRV: https://msdl.microsoft.com/download/symbols/ntdll.pdb/771D1BD6E3A14886BFD2B35BD61961C31/ntdll.pdb not found
SYMSRV: C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\sym\ntdll.pdb\771D1BD6E3A14886BFD2B35BD61961C31\ntdll.pdb not found
DBGHELP: C:\Windows\SYSTEM32\ntdll.pdb - file not found
DBGHELP: ntdll.pdb - file not found
*** ERROR: Symbol file could not be found. Defaulted to export symbols for ntdll.dll -
DBGHELP: ntdll - export symbols
************* Symbol Loading Error Summary **************
Module name Error
ntdll PDB not found : cache*
Unable to locate the .pdb file in this location
The system cannot find the file specified : SRV*https://msdl.microsoft.com/download/symbols
The SYMSRV client failed to find a file in the UNC store, or there
is an invalid UNC store (an invalid path or the pingme.txt file is
not present in the root directory), or the file is present in the
symbol server exclusion list.
0:000> lmvm ntdll
start end module name
00007ffd`21900000 00007ffd`21ad1000 ntdll (export symbols) C:\Windows\SYSTEM32\ntdll.dll
Loaded symbol image file: C:\Windows\SYSTEM32\ntdll.dll
Image path: ntdll.dll
Image name: ntdll.dll
Timestamp: Fri Aug 5 20:19:32 2016 (57A55744)
CheckSum: 001D4713
ImageSize: 001D1000
File version: 10.0.14393.82
Product version: 10.0.14393.82
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ntdll.dll
OriginalFilename: ntdll.dll
ProductVersion: 10.0.14393.82
FileVersion: 10.0.14393.82 (rs1_release.160805-1735)
FileDescription: NT Layer DLL
LegalCopyright: © Microsoft Corporation. All rights reserved.
0:000>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment