1

I have both a Mac and Windows version of the same library. However, while the Mac version has export symbols, the Windows version exports by ordinal. The Mac version uses the PPC architecture making it more difficult to reverse.

Is there any way to heuristically compare these subroutines and copy the export symbols from the Mac version to the Windows version so that I can view them within IDA Pro for the Windows version?

Improve this question

1 Answer 1

Reset to default
3

The Diaphora tool by Joxean Koret can match functions in binaries with different architectures using multiple algorithms.

You can also always do it manually: make one match using strings or magic numbers used, then follow cross-references to find more matches.

Improve this answer

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.