Flag: Tornado! Hurricane!

 Forums >>  IDA Pro  >>  Does IDA support debugger symbol files?

Topic created on: March 25, 2006 06:30 CST by jeffreytan .

Hi All,

Thanks for your time!

Does IDA support *.pdb files retrieved by various windows debuggers, such as windbg etc..?

Without the *.pdb files, I think it hard for us to do reversing on Windows APIs.

Thanks for any information!

Jeffrey

  ryanlrussell     March 25, 2006 11:21.17 CST
Yes, File->Load File, .pdb.  

And for several versions now, it even offers to go get it from MS's symbol servers if it sees the .pdb file reference in the .exe.

  jeffreytan   March 28, 2006 02:32.18 CST
Hi ryanlrussell,

Thanks for the information. Is there anything to let the IDA to recoginze the PE and download and use the symbol automatically? Something like the windows debuggers?

Thanks

  randori82     March 28, 2006 04:54.43 CST
if you have debugging tools for ms, and idapython, i wrote a script that'll auto-load the pdb (well, almost):
http://www.openrce.org/repositories/users/randori82/pysym.py

  ryanlrussell     March 28, 2006 10:28.52 CST
What version of IDA Pro are you using?

  aeppert     March 28, 2006 11:27.57 CST
And perhaps, where did you acquire said copy of IDA Pro?

  asotirov     June 23, 2006 20:32.56 CDT
Yes, IDA supports automatic downloading of PDB files from the Microsoft symbol server. In versions 4.8 and later it will ask you if you want download the symbols whenever you open a file with debugging information.

If you want a more accurate disassembly, I recommend using the Determina PDB plugin instead. If you rename is as pdb.plw in the plugin directory, it will be invoked automatically when you load a PDB file. To download symbols from the Microsoft symbol server, set your _NT_SYMBOL_PATH environment variable as described in the WinDbg documentation.

Note: Registration is required to post to the forums.

There are 31,322 total registered users.


Recently Created Topics
[help] Unpacking VMP...
Mar/12
Reverse Engineering ...
Jul/06
hi!
Jul/01
let 'IDAPython' impo...
Sep/24
set 'IDAPython' as t...
Sep/24
GuessType return une...
Sep/20
About retrieving the...
Sep/07
How to find specific...
Aug/15
How to get data depe...
Jul/07
Identify RVA data in...
May/06


Recent Forum Posts
Finding the procedur...
rolEYder
Question about debbu...
rolEYder
Identify RVA data in...
sohlow
let 'IDAPython' impo...
sohlow
How to find specific...
hackgreti
Problem with ollydbg
sh3dow
How can I write olly...
sh3dow
New LoadMAP plugin v...
mefisto...
Intel pin in loaded ...
djnemo
OOP_RE tool available?
Bl4ckm4n


Recent Blog Entries
halsten
Mar/14
Breaking IonCUBE VM

oleavr
Oct/24
Anatomy of a code tracer

hasherezade
Sep/24
IAT Patcher - new tool for ...

oleavr
Aug/27
CryptoShark: code tracer ba...

oleavr
Jun/25
Build a debugger in 5 minutes

More ...


Recent Blog Comments
nieo on:
Mar/22
IAT Patcher - new tool for ...

djnemo on:
Nov/17
Kernel debugger vs user mod...

acel on:
Nov/14
Kernel debugger vs user mod...

pedram on:
Dec/21
frida.github.io: scriptable...

capadleman on:
Jun/19
Using NtCreateThreadEx for ...

More ...


Imagery
SoySauce Blueprint
Jun 6, 2008

[+] expand

View Gallery (11) / Submit