3

Do anyone know about an automatic way to transfer function names from one IDA file to another while:

  1. First IDA file is based on version 1 of the executable.
  2. Second IDA file is based on the updated, version 2, of the same executable.

I'm aware of Zynamics BinDiff. I'm looking for alternatives.

1
  • FYI in "Tools to work cooperatively on the same binary" there are only tools list, but no explicit information regarding the asked question. If you think differently, please point where specifically in the "Tools to work cooperatively on the same binary" there is the answer to my question.
    – PhoeniX
    Mar 8 '14 at 7:31
2

You can use MyNav. In this video you can check how it can be done with this tool.

6
  • Hello Joxean Koret, could you update your plugin github.com/joxeankoret/mynav to make it work in IDA 7.x. Because currently it doesn't run: mynav.py: undefined function __plugins__mynav.PLUGIN_ENTRY Jan 16 '19 at 9:10
  • There is no need anymore to use MyNav as almost every part of the functionality is integrated into IDA, especially the Differential Debugging part. Actually, I added it myself. Take a look to this. If what you want is to port symbols, use Diaphora (github.com/joxeankoret/diaphora) or YaDiff. Jan 17 '19 at 10:45
  • I need to transfer symbols from one IDA database into another IDA database with the same module. I have IDA database for the exe file and a crash dump which I load to IDA. So I would like to load symbols for that exe, which I already reversed in a separated database into crash dump analysis in another IDA. Seems like diaphora can't do that: diaphora_import.py just loads structures, not the function names. :( Jan 18 '19 at 9:30
  • You need to export both databases and diff them... Take a look to this blog: alex-ionescu.com/?p=271 Jan 18 '19 at 10:32
  • so I can't just simply move the names, I need to export all the assembler instructions and meta and then make a diff just to transfer the names... For 300 mb idb file just exporting to sqlite takes 30 minutes. Jan 18 '19 at 13:12

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.