windbg.info
Home Search
 You are here: arrow Home Forum

Search Our Site

www.windbg.info
Welcome, Guest
Please Login or Register.    Lost Password?
kernel32 symbol in live kernel debug
(1 viewing) 1 Guest
Go to bottom
TOPIC: kernel32 symbol in live kernel debug
#116
Thongchai (User)
Posts: 1
User Offline

kernel32 symbol in live kernel debug 29 Aug 2011 - 17:04
Is it possible to load kernel32 or user32 symbol in live kernel debug?
Sorry for stupid question :O
 
  Logged IP
  The administrator has disabled public write access.
#124
Robert Kuster (Visitor)
Moderator
Posts: 39
User Offline

Gender: Male www.rkuster.com Location: Slovenia, Europe Birthday: 31 Jan 1978
Re: kernel32 symbol in live kernel debug 09 Oct 2011 - 13:47
Welcome Thongchai.

The kernel on 2000, XP, Vista, or Windows 7 never loads user32.dll or kernel32.dll. Both are user mode DLLs and thus get loaded by user-mode applications (generally speaking any Win32 process should load kernel32.dll; applications that have a GUI also load user32.dll).

Symbols are loaded into a debugger mainly for two purposes:
  • to map raw addresses in the executable to source-code lines
  • to analyze internal layout and data of applications
What you are asking about somehow violates this basic principle and is simply not needed to debug an application or the kernel. You can still check out the Symbol Options for WinDbg or start your investigation by examining the ld or !lmi commands.

I hope this helps,
Robert
 
Thinking debugging? Think www.windbg.info.
 
  Logged IP
  The administrator has disabled public write access.
Go to top
  up top of page up  
 

Copyright © 2017 WinDbg.info. All Rights Reserved.
Page generated in 0.0005 seconds.