OP 03 October, 2024 - 01:34 AM
(This post was last modified: 03 October, 2024 - 01:51 AM by fireworks. Edited 1 time in total.)
Hello everyone!
The system is Windows-7 x64, version 6.1.7601-SP1.
The problem is that WinDbg cannot find debugging symbols for the Win32k.sys file on the Microsoft server, although it downloads all the others normally to the local storage C:\Symbols. Here is the info about Win32k.sys on my machine:
The last GUID is taken from the "Debug" section of the executable *.sys file (see PeAnatomist software), and this same GUID will be the name of the folder in the local storage. That is, the full path will look like
Maybe someone has a version of symbols with the same GUID, I will be very grateful. Here are some logs from the debugger that do not give a result (for Kernel I use the LiveKd shell):
In essence, I need the contents of the following structures for any 64-bit Win OS from 7 to 11:
Now I have Win32k.pdb for x32 WinXP, and if I open it in the same "PEAnatomist", I can see that all these structures are in the database, but I can't view their contents (I need to search and install XP specifically for this version of pdb). Thanks in advance for any advice and help.
![[Image: 0102.png]](https://i.ibb.co/Y0LWrXq/0102.png)
leaving a like is much appreciated and help me to keep publishing threads.
The system is Windows-7 x64, version 6.1.7601-SP1.
The problem is that WinDbg cannot find debugging symbols for the Win32k.sys file on the Microsoft server, although it downloads all the others normally to the local storage C:\Symbols. Here is the info about Win32k.sys on my machine:
The last GUID is taken from the "Debug" section of the executable *.sys file (see PeAnatomist software), and this same GUID will be the name of the folder in the local storage. That is, the full path will look like
Maybe someone has a version of symbols with the same GUID, I will be very grateful. Here are some logs from the debugger that do not give a result (for Kernel I use the LiveKd shell):
In essence, I need the contents of the following structures for any 64-bit Win OS from 7 to 11:
Now I have Win32k.pdb for x32 WinXP, and if I open it in the same "PEAnatomist", I can see that all these structures are in the database, but I can't view their contents (I need to search and install XP specifically for this version of pdb). Thanks in advance for any advice and help.
leaving a like is much appreciated and help me to keep publishing threads.
![[Image: Nuttela-Signature.gif]](https://i.ibb.co/VT79K5v/Nuttela-Signature.gif)
![[Image: Sig.png]](https://i.ibb.co/xh4Mcd3/Sig.png)
![[Image: PeAsULK.gif]](https://i.imgur.com/PeAsULK.gif)
