Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

How does one get windbg to display modules/var names on disassembly?

5 views
Skip to first unread message

suburama

unread,
Dec 14, 2009, 4:11:01 PM12/14/09
to
I am new to windbg and am trying to follow examples from Dmitry Vostokov's Windows Debugging book. When I download the executables from dumpanalysis.org (the book's web site) and run them in windbg the results are as described in the book. For ex: the disassembly appears as follows:
5 0042d63c f3ab rep stos dword ptr es:[edi]
8 0042d63e 8d05a8444900 lea eax,[MemoryPointers!a (004944a8)]
9 0042d644 a3a0444900 mov dword ptr [MemoryPointers!pa (004944a0)],eax
11 0042d649 a1a0444900 mov eax,dword ptr [MemoryPointers!pa (004944a0)]
12 0042d64e c60001 mov byte ptr [eax],1

However, if I build a small source file myself using Visual Studio 2005 I don't get the source operands such [<module_name>!<variable_name>] but instead just some offset from a register or something like that.

Are there any project properties that need to be set to get windbg to display the symbols correctly? I thought as long as the .pdb file is in the same folder as the .exe things should be fine.

Thank you for the help!
Subu


Submitted via EggHeadCafe - Software Developer Portal of Choice
Floating box in javascript
http://www.eggheadcafe.com/tutorials/aspnet/b08d33d5-8fbe-4c76-a1ad-1e30f7c68f17/floating-box-in-javascrip.aspx

pat styles [microsoft]

unread,
Dec 17, 2009, 2:22:42 PM12/17/09
to
Hello Subu.

I would say you don't have symbols loaded. Please closely examine the
debugger documentation on "symbols" and make sure you have set up the symbol
path correctly. Starting the debugger with the "-n" switch will cause it
to produce verbose spew on the loading of symbols.

.pat styles [microsoft]

"Subu Rama" wrote in message news:20091214161...@gmail.com...

0 new messages