3 ms·
Assuming it’s a debug build or a release build with absolutely no optimization. Otherwise at least some amount of manual work is suggested by the bullet point.
by WalterGR 5y ago
Assuming it’s a debug build or a release build with absolutely no optimization. Otherwise at least some amount of manual work is suggested by the bullet point.
But are PDBs even available for it? I assumed Microsoft only releases PDBs for binaries used in development scenarios.
- devmor 5y agoIf you read the README in the link, you will find the answer to your question.
- WalterGR 5y agoI did read it, and in fact posted an excerpt and a couple relevant links. Apologies for missing “and its public PDB”. What level of optimization was used in the released executable?
- alternatetwo 5y agoI just ran the pdb through dia2dump, and it seems that their public pdb doesn't keep this information, so one could only estimate. Edit: It does however tell you still from which exact .obj an offset is, info the author didn't seem to have used since they created their own filenames. (Edit 2:, at least partially, some original filenames are there, but also custom ones)
- jamesfinlayson 5y agoLooks like a .pdb is available for it (no idea where it was sourced from but the readme says it's public).
- alternatetwo 5y agoYou can download it from the microsoft symbol servers (i.e. via IDA). Then it's %TMP%\ida somewhere. No idea how else you'd acquire it, Visual Studio would probably also download it if you get pinball.exe to crash and debug it.
- 5- 5y agothe protocol isn't that complicated, but if you'd rather use something existing, you could just do rabin2 -PP pinball.exe (part of https://radare.org https://radare.org) to download the pdb from microsoft's symbol server.