9

Are there equivalent tools/procedures to IDA's FLIRT signatures, when working on statically linked binaries, with other disassemblers?

Is it at all possible with GDB/objdump?

3
  • 1
    Well, the DWARF format is open, you could always write code that generates or transforms existing information. Given FLIRT as an example I assume that you have such information.
    – 0xC0000022L
    Mar 23 '13 at 0:10
  • I mentioned FLIRT, as it is the only thing i know about (regarding this specific topic). Mar 24 '13 at 22:16
  • May be merge with this one? reverseengineering.stackexchange.com/questions/13345/… Aug 23 '16 at 21:37
3

I'm not sure if other tools offer the same functionality, but if you have IDA, you can do File->Produce File->Create MAP File to create a .MAP file with the names that IDA determined (or which were manually created by the user). Many other debugging tools have the ability to load .MAP files, so I have used this trick for example with SoftICE and OllyDbg.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.