top of page
dernarexmilidis

Kernel32 Dll No Matching Symbolic Information Found: Causes and Solutions for This Common DLL Error



Loaded 'ntdll.dll', no matching symbolic information found.Loaded 'C:\WINDOWS\system32\kernel32.dll', no matching symbolic information found.Loaded 'C:\Documents and Settings\Administrator\Desktop\nhandang1\Debug\cv210.dll', no matching symbolic information found.LDR: LdrpWalkImportDescriptor() failed to probe C:\Documents and Settings\Administrator\Desktop\nhandang1\Debug\cv210.dll for its manifest, ntstatus 0xc0150002The program 'C:\Documents and Settings\Administrator\Desktop\nhandang1\Debug\nhandang.exe' has exited with code 0 (0x0).


The .pdb file stores all debug information for the project's .exe file, and resides in the \debug subdirectory. The .pdb file contains full debug information, including function prototypes, not just the type information found in VC.pdb.




Kernel32 Dll No Matching Symbolic Information Found




Symbol Checker (Symchk.exe) is an application that compares executable files to symbol files to verify that the matching symbols are available. Symchk may also be used to populate your symbol cache. It can read symbol information from PE files (exe, dll), dump files and processes. It also supports recursive directory search and batch files.


As you can see in the verbose mode (/v switch) you receive a lot of information about what symchk is doing. We can even read which symbols API it is using (dbghelp messages). The /os switch informs symchk to print full paths of the symbol files in the output messages. After running this command the kernel32.pdb file should be in our symbol store. If you would like to index the whole System32 directory you would like to use the /r switch which informs symchk to recursively step through the provided directory and download symbols for all the files found, eg. symchk /r /v c:\windows\system32\*.dll


This tool is a wrapper over the DbgHelp.dll library and uncovers almost all of its functionality. We will just look at the one usage example so if you would like to go deeper have a look at the Debugging Tools for Windows help. When you run dbh.exe with a module name as an argument it will automatically download the symbol files. So by simply calling dbh c:\windows\system32\kernel32.dll info you will download the symbol file (_NT_SYMBOL_PATH environment variable is used) and print information about it and its PE file (kernel32.dll):


If you would like to have a better control over the source server stream you may check the pdbstr command. With its aid you can read and update the source server information in the PDB file. The source server stream is actually a text block with predefined sections (more info can be found here). You can dump its content by issuing:


Loaded 'ntdll.dll', no matching symbolic information found.Loaded 'C:\WINDOWS\system32\kernel32.dll', no matching symbolic information found.The thread 0x110 has exited with code 65 (0x41).


2ff7e9595c


1 view0 comments

Recent Posts

See All

Comments


bottom of page