Skip to main content

Questions tagged [pdb]

Microsoft's Program Database debug symbol file format (.pdb). Emitted by compilers such as Visual C++ and rustc alongside Windows builds.

Filter by
Sorted by
Tagged with
0 votes
0 answers
40 views

Parsing a Microsoft PDB file to extract symbols from it?

I have a Microsoft PDB file and I want to extract symbols along with their addresses from it. Are there any libraries or APIs available that I can use to accomplish this task?
OUSSAMA ELFAHSI's user avatar
0 votes
1 answer
83 views

How to call unexported function in a third party DLL while having its PDB?

I'm new to reverse engineering and recently met with a problem: I have the dll and pdb of a debug version third party module, but I don't have its source codes. Now I want to write a piece of C++ code ...
Nekomiya Kasane's user avatar
2 votes
1 answer
459 views

How to find the correct GUID in DLL to match its Pdb

From this question: Is it possible to download program database (PDB) files of Microsoft Windows binaries without installing any software? and the answer from @chentiangemalc: You can also look for ...
Min Huang's user avatar
4 votes
1 answer
106 views

PE ImageBase presence in PDB

Is ImageBase of a PE binary present in its PDB or can it only be retrieved from the binary? I have studied both Microsoft's PDB sources and LLVM docs without much luck finding it. In the DBI stream ...
mimak's user avatar
  • 579
3 votes
1 answer
320 views

Load PDB for MemoryModule-loaded DLL in x64dbg

I need to debug a DLL, which I have a PDB file for. The debug target is a program, that loads the DLL using MemoryModule library from Github. The loaded module isn't listed as a module in x64dbg, ...
Ri0ee's user avatar
  • 43
3 votes
0 answers
443 views

How to force IDA to load MFC DLL symbols while disassembling an EXE that uses such DLL?

I found that IDA may not load symbols for MFC DLLs while disassembling EXEs that load such DLLs. This makes the disassembling horrible if the DLL is linked just by ordinals, and IDA doesn't have a ...
Eugene Muzychenko's user avatar
3 votes
1 answer
4k views

How to load a PDB file into x64dbg?

I want to see symbols in the disassembly wherever possible, and I have a PDB file for the .exe I'm debugging, but I can't find a way to load the PDB file from disk. Is it even possible?
Violet Giraffe's user avatar
3 votes
3 answers
5k views

How to load a pdb file from the hard drive with IDA Pro?

All the answers I see on Google are about how to load PDB files from online servers. But I have an exe I'm debugging. It's my own exe. Only reason I want to debug it, is so that I can step through ...
NERL's user avatar
  • 161
1 vote
1 answer
508 views

Mono.Cecil throws SymbolsNotMatchingException, how to find out Method line number?

I tried to use a PDB file to map the Instructions to the Sequencepoints in Mono.Cecil and find out the line number of a method. But none of the answers in any forum seems to work, because no matter ...
programming_is_bae's user avatar
1 vote
0 answers
294 views

How to apply complete type information from PDB for multiple images in one IDA database?

IDA is capable of loading multiple images/DLLs into the same database. In this scenario, ntdll.dll and kernel.dll have been loaded additionally to the main target .exe-file into the database. On top ...
new_turtle's user avatar
4 votes
2 answers
3k views

Is it possible to download program database (PDB) files of Microsoft Windows binaries without installing any software?

I want to download the .pdb files of Windows binaries (e.g., notpad.exe) on machines where the user doesn't have admin rights, nor has any debugger available. I was wondering if it is possible to ...
Foad's user avatar
  • 189
3 votes
1 answer
2k views

IDA does not create Vtbl structs for child classes loaded from PDB

I'm decompiling a MFC 4.0 application, and now loaded the MFCS42.PDB from the MFC 4.2 source into IDA 7.0 (not having the MFC 4.0 source) to make it create the appropriate structs representing the ...
Ray's user avatar
  • 1,103
2 votes
0 answers
1k views

Dump c++ class definitions from .exe + .pdb on windows

Is there any way to dump C++ class definitions on windows if executable and PDB files are available. I've seen this done before using gdb but haven't had any luck doing this on windows. I've tried ...
Marik's user avatar
  • 21
1 vote
2 answers
8k views

.NET: It's possible to recover original source code from compiled .exe when I have all the .vshost, .pdb and compiled files?

I have the compiled code with all .pdb, vshost and everything that is generated. I am already using DotPeek without too much hassle. Would like to know If I can retrieve the original code with all the ...
Liquid Core's user avatar
2 votes
1 answer
1k views

PDB file vs SDB file?

Radare has a format called a sdb. I asked a question here, What is an SDB file? The answer I got was, These sdbfiles contain function names (DLL's exports) and their equivalent ordinals for each ...
Evan Carroll's user avatar
  • 1,789
2 votes
1 answer
366 views

Is all debug information of VS-compiled PE files contained in an external PDB file?

I read here that some PE files have debug information baked into the PE file. Is this only the case for older PE files? Is it safe to assume that all Visual Studio compiled PE files have all debug ...
langlauf.io's user avatar
  • 1,560
3 votes
1 answer
561 views

Symbols visible in EXE file without PDB

I imported my exe file in OllyDB and when I searched for the names(labels) present, I was able to see all the function declarations, class names etc. I didn't have my PDB in the EXE path. Why does ...
Kaushik Ramachandran's user avatar
2 votes
1 answer
335 views

Is it possible to use PDB files to perform on the fly binary patching?

My customer has an application that gets updates frequently. I have a program that adds functionality into this application by means of patching and reassembling the target binary. It is a hassle to ...
Meow's user avatar
  • 21
5 votes
1 answer
2k views

In Ollydbg, how do I change the path to a source code file without recreating entire directory structure?

I am bring a .EXE, a .PDB, and a source code .C file into my computer and attempting to look at my program in Ollydbg. I am compiling C programs on one machine (XP Vm actually) and running them in ...
Markbotix's user avatar
  • 169
0 votes
2 answers
257 views

Which libraries exist for PDB (symbol file) generation?

I know that there are many libraries that parse PDB files and allow extracting debug information from them. For a project I am working on, I need to generate PDB files. Are there any publicly ...
tmr232's user avatar
  • 1,577
5 votes
1 answer
4k views

IDA Can't load symbols "DIA: No such interface supported"

I'm trying to load symbols for a dll with IDA pro. My _NT_SYMBOL_PATH is SRV*c:\symbols*http://msdl.microsoft.com/download/symbols . I put DBGTOOLS = "C:\\Program Files (x86)\\Windows Kits\\8.1\\...
MPX's user avatar
  • 101
7 votes
4 answers
5k views

PDB v2.0 File Format documentation

Where I can find such information? I've already read the undocumented windows 2000 secrets explanation of it but it isn't complete. For example the 3rd stream format isn't explained. I have looked at ...
sasho648's user avatar
  • 421
7 votes
3 answers
4k views

Reverse engineering a VC++ video game

So I know x86 machine language and C++/C language. In the last weeks I've dedicated to learn Windows internals and especially PE format. My target is retrieving the Tomb Raider The Angel of Darkness ...
sasho648's user avatar
  • 421
7 votes
1 answer
1k views

Importing external libraries in Hopper scripts?

Can external libraries be used in Hopper scripts? I'd like to add PDB support to Hopper using pdbparse, but I haven't been able to get it to use external libraries. Alternatively, I suppose one could ...
Brendan Dolan-Gavitt's user avatar