PDA

View Full Version : IdaPro x64: importing types from pdb

fasmotol
February 17th, 2013, 13:17
Hi, pals.
I'm reversing a file system minifilter driver for x64, so i need some struct defenitions exported by fltmgr. Standard "Load pdb..." says
Code:


;....

PDB: DIA interface version 9.0

PDB: loaded 573 types

PDB: total 228 symbols loaded for D:\WinDDK\7600.16385.1\Debuggers\sym\fltMgr.pdb\A008BBBF87CC421FA0E568076A16F4BA2\fltMgr.pdb

but i still have no struct defenitions.
I tried to replace pdb.64 with detpdb version: it fails with
Code:


Determina PDB loader 1.0

ERROR: SymGetModuleInfo64 failed: The parameter is incorrect.

(it's kinda problem with Ida version)

Mmmmphfokay, what should i do?
reverser
February 17th, 2013, 16:46
Quote:
[Originally Posted by fasmotol;94271]
but i still have no struct defenitions.

Check the Local Types (Shift-F1).
fasmotol
February 18th, 2013, 04:00
Wow, exactly the very struct i need is somewhat corrupted or smthing (size == Error): i tried to create it manually before, though even after undefining it still glitching...
Okay, I think the problem is solved - all i need is just to create another instance of db.
Thanks, reverser!