4

You can use PDB downloader which doesn’t require any installation https://docs.microsoft.com/en-us/archive/blogs/webtopics/pdb-downloader. Or you could use its source below to see how you could recreate with PowerShell or some other method. https://github.com/rajkumar-rangaraj/PDB-Downloader You can also just copy the WinDBg files from a machine where it’s ...


3

gdb is primarily a Source Level Debugger to set a bp on an address instead of symbol use * (gdb) break main Breakpoint 1 at 0x100401094: file mingtest.cpp, line 4. (gdb) break *0x100401094 Note: breakpoint 1 also set at pc 0x100401094. Breakpoint 2 at 0x100401094: file mingtest.cpp, line 4. (gdb) you can disassemble using address, length at any arbitrary ...


2

This can easily be achieved with radare2. I have this version installed [rese] r2 -v radare2 4.6.0-git 25072 @ linux-x86-64 git.4.4.0-486-ga5e8cf0c9 commit: a5e8cf0c9bd94e5f8d679e281c486584f23251e3 build: 2020-07-28__11:41:47 Enable .init_array in a program as such #include <stdio.h> static void f1(void) __attribute__((constructor)); static void f2(...


1

You have two possible approaches in here: Analyze the APK of the device, reverse engineer it and try to make sense of how it communicates with the USB device. Connect the USB device to a computer, sniff the USB packets, and try to make sense of how it communicates with the host. I believe the former would be straightforward and simpler than the latter, not ...


1

these should be comments but it grew up what is the windbg version ? what is the os version ? what is the output of lm m "your specific Module" are the symbols loaded for your Module ? have you tried disassembling with u <address> in command window as it appears you are looking at Disassembly Window did you try ln <address> to list the ...


1

I fixed it by Setting the environment variable _NT_SYMBOL_PATH=srv*c:\pdb_cache*http://msdl.microsoft.com/download/symbols then tick the "auto load PDB files" in Debugger Options


1

It's not certain that the particular map file you have is supported out of the box, but you should be able to use the Script Manager from the Window menu in Ghidra (in the Code Browser!). A good start for your endeavor would likely be the Ghidra/Features/Python/ghidra_scripts/ImportSymbolsScript.py script aka ImportSymbolsScript (from the Script Manager). ...


Only top voted, non community-wiki answers of a minimum length are eligible