Are there equivalent tools/procedures to IDA's FLIRT signatures, when working on statically linked binaries, with other disassemblers?
Is it at all possible with GDB/objdump?
3
-
1Well, the DWARF format is open, you could always write code that generates or transforms existing information. Given FLIRT as an example I assume that you have such information.– 0xC0000022L ♦Commented Mar 23, 2013 at 0:10
-
I mentioned FLIRT, as it is the only thing i know about (regarding this specific topic).– Jesper.ReenbergCommented Mar 24, 2013 at 22:16
-
May be merge with this one? reverseengineering.stackexchange.com/questions/13345/…– Anton KochkovCommented Aug 23, 2016 at 21:37
Add a comment
|
1 Answer
I'm not sure if other tools offer the same functionality, but if you have IDA, you can do File->Produce File->Create MAP File to create a .MAP file with the names that IDA determined (or which were manually created by the user). Many other debugging tools have the ability to load .MAP files, so I have used this trick for example with SoftICE and OllyDbg.
answered Mar 20, 2013 at 23:33
