WinDbg(exception with msdev.exe)

[Mathew Joy]

OK now let me try here. Nothing much related to drivers actually, but I read an expert ;) commenting on using windbg for debugging.

Now whenever I start windbg and attach MSDEV.EXE (no files loaded), I get exception. Why is it? Something wrong with VS6.0? I'm posting the entire windbg screen. Microsoft (R) Windows Debugger Version 6.3.0005.1
Copyright (c) Microsoft Corporation. All rights reserved.

*** wait with pending attach
Symbol search path is: F:\WINNT\SYMBOLS
Executable search path is:
ModLoad: 00400000 00443000 F:\Program Files\Microsoft Visual Studio\Common\MSDev98\Bin\MSDEV.EXE
ModLoad: 77f80000 77ffb000 F:\WINNT\system32\ntdll.dll
ModLoad: 6c370000 6c46b000 F:\WINNT\system32\MFC42.DLL
ModLoad: 78000000 78045000 F:\WINNT\system32\MSVCRT.dll
ModLoad: 7c4e0000 7c599000 F:\WINNT\system32\KERNEL32.dll
ModLoad: 77f40000 77f7c000 F:\WINNT\system32\GDI32.dll
ModLoad: 77e10000 77e75000 F:\WINNT\system32\USER32.DLL
ModLoad: 50000000 50148000 F:\Program Files\Microsoft Visual Studio\Common\MSDev98\Bin\devshl.dll
ModLoad: 77a50000 77b47000 F:\WINNT\system32\ole32.dll
ModLoad: 77d30000 77da1000 F:\WINNT\system32\RPCRT4.DLL
ModLoad: 7c2d0000 7c332000 F:\WINNT\system32\ADVAPI32.DLL
ModLoad: 779b0000 77a4b000 F:\WINNT\system32\OLEAUT32.dll
ModLoad: 782f0000 78538000 F:\WINNT\system32\SHELL32.dll
ModLoad: 70a70000 70ad5000 F:\WINNT\system32\SHLWAPI.DLL
ModLoad: 71710000 71794000 F:\WINNT\system32\COMCTL32.DLL
ModLoad: 77820000 77827000 F:\WINNT\system32\VERSION.dll
ModLoad: 759b0000 759b6000 F:\WINNT\system32\LZ32.DLL
ModLoad: 50800000 508bd000 F:\Program Files\Microsoft Visual Studio\Common\MSDev98\Bin\devedit.pkg
ModLoad: 50300000 5035e000 F:\Program Files\Microsoft Visual Studio\Common\MSDev98\Bin\devprj.pkg
ModLoad: 51000000 5111c000 F:\Program Files\Microsoft Visual Studio\Common\MSDev98\Bin\IDE\devbld.pkg
ModLoad: 51d10000 51d87000 F:\Program Files\Microsoft Visual Studio\Common\MSDev98\Bin\IDE\devdtg.pkg
ModLoad: 52010000 52038000 F:\Program Files\Microsoft Visual Studio\Common\MSDev98\Bin\IDE\devaut1.pkg
ModLoad: 51cd0000 51ce1000 F:\Program Files\Microsoft Visual Studio\Common\MSDev98\Bin\IDE\devbied.pkg
ModLoad: 51b60000 51baa000 F:\Program Files\Microsoft Visual Studio\Common\MSDev98\Bin\IDE\devclvw.pkg
ModLoad: 51680000 5170e000 F:\Program Files\Microsoft Visual Studio\Common\MSDev98\Bin\IDE\devcpp.pkg
ModLoad: 50c00000 50c95000 F:\Program Files\Microsoft Visual Studio\Common\MSDev98\Bin\IDE\devdbg.pkg
ModLoad: 51a30000 51a7d000 F:\Program Files\Microsoft Visual Studio\Common\MSDev98\Bin\IDE\devgal.pkg
ModLoad: 51660000 5166c000 F:\Program Files\Microsoft Visual Studio\Common\MSDev98\Bin\IDE\devhtmx.pkg
ModLoad: 519e0000 519fb000 F:\Program Files\Microsoft Visual Studio\Common\MSDev98\Bin\IDE\devncb.pkg
ModLoad: 51890000 518c4000 F:\Program Files\Microsoft Visual Studio\Common\MSDev98\Bin\IDE\devodl.pkg
ModLoad: 50400000 50579000 F:\Program Files\Microsoft Visual Studio\Common\MSDev98\Bin\IDE\devres.pkg
ModLoad: 51440000 51453000 F:\Program Files\Microsoft Visual Studio\Common\MSDev98\Bin\IDE\devtool.pkg
ModLoad: 51400000 51407000 F:\Program Files\Microsoft Visual Studio\Common\MSDev98\Bin\IDE\devhelp.pkg
ModLoad: 51c60000 51c75000 F:\Program Files\Microsoft Visual Studio\Common\MSDev98\Bin\IDE\devent.pkg
ModLoad: 775a0000 77626000 F:\WINNT\system32\CLBCATQ.DLL
ModLoad: 60480000 605e9000 F:\Program Files\Microsoft Visual Studio\Common\VSS\win32\SSSCC.DLL
ModLoad: 76620000 76631000 F:\WINNT\system32\MPR.dll
ModLoad: 76b30000 76b6e000 F:\WINNT\system32\comdlg32.dll
ModLoad: 77800000 7781e000 F:\WINNT\system32\WINSPOOL.DRV
ModLoad: 63170000 631eb000 F:\Program Files\Microsoft Visual Studio\Common\VSS\win32\ssus.dll
(5c0.294): Break instruction exception - code 80000003 (first chance)
eax=00000000 ebx=00000000 ecx=00000101 edx=ffffffff esi=00000000 edi=0040fcbc
eip=77fa144b esp=0180ffa8 ebp=0180ffb4 iopl=0 nv up ei ng nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000286
*** WARNING: symbols timestamp is wrong 0x3ef274dc 0x3814fd25 for F:\WINNT\system32\ntdll.dll
ntdll!RtlSetBits+0x16f:
77fa144b cc int 3


Thanks!!

[Mick]

Because windbg likes to play nice and will break initally for you after the main image and all statically-linked dlls are loaded. Or if you attach it will be immediate.

You can turn that off with -g when you laugh windbg. Or you can stop and walk through the loader routines and get an idea of what occurs during the loader routines.

Take a look at your call stack you should be somewhere in

ntdll!LdrpInitializeProcess

Ohh yea...this is buried in the windbg documentation :eek: Go on a fishing trip or something and read the whole thing ;) It is a good if but long read. Somewhere a lot of trees screamed when I printed out the command references to go in a binder.

[Mathew Joy]

Thanks MicK for the reply.

So what I gathered from it is, to understand the working of windbg you have to go for a fishing trip :lol: :lol: ;) ;)

/Something fishy ;)

/Thanks (wonderful)