⛵🔌's avatar

⛵🔌

@shadylink.lol

Okay, here's the scoop on the URB frames... Captured a bunch of stuff with wireshark, in this instance the software is sending commands for a 'device reset'. Thankfully some components of the app are written in .NET so I can run em through ILSpy, this gives me a great starting point in ghidra-

1 replies 0 reposts 0 likes


⛵🔌's avatar ⛵🔌 @shadylink.lol
[ View ]

Starting with ILSpy I can look at the external references to the DisplayPadSDK.dll and see how they're being called and what parameters are being passed. This is useful to me because it tells me how the DLL is being used and what kind of data the .dll is working with.

1 replies 1 reposts 0 likes