Here's the steps to repro. Just installed IDA (free) v.7.0 on a brand-new installation of Windows 10 (x64) in a VM:

enter image description here

Then loaded a test PE file and started debugging it (using Local Windows Debugger):

enter image description here

So now I want to load symbols from the Microsoft server, say for ntdll.dll (or any other Windows module for that matter):

enter image description here

This fails with the following message in the output window:

enter image description here

DWARF: Cannot determine location of DWARF info for "C:\Windows\System32\ntdll.dll".
Could not load debug info for module: "C:\Windows\System32\ntdll.dll"

Any idea what am I doing wrong?

  • Try to download the PDB file manually then import it. – Biswapriyo Sep 24 '19 at 16:40
  • @Biswapriyo sorry, I'm not very good with IDA. How would I import a pdb file into it? – c00000fd Sep 24 '19 at 19:42
  • 1
    IDA > File > Load file > PDB file... – Biswapriyo Sep 24 '19 at 20:00
  • @Biswapriyo oh, I see. Thank you. I also noticed that in the menu for that command, it says, "... you can specify .dll or .exe. In that case IDA will try to find and load PDB specified in its debug directory." How do I configure that debug directory? I know in WinDbg one needs to provide a URL to Microsoft public symbols. Do I need to do the same for IDA? – c00000fd Sep 24 '19 at 20:06
  • This is by the way one of the reason why I would never pay for IDA pro -- they care to fix it only when you pay them oodles of money. (Free version, nah, who cares....) – c00000fd Nov 5 '19 at 23:21

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.