Last active
September 5, 2024 15:05
-
-
Save hax0kartik/e358ce447a4537bcef534aa8de84817c to your computer and use it in GitHub Desktop.
Export symbols from IDA to a ghidra importable symbol file
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
#include <idc.idc> | |
static FuncDump(f, start) | |
{ | |
auto ea, str, count, ref; | |
auto end; | |
auto teststr; | |
ea = start; | |
while( ea != BADADDR ) | |
{ | |
str = GetFunctionName(ea); | |
if( str != 0 ) | |
{ | |
end = FindFuncEnd(ea); | |
count = 0; | |
ref = RfirstB(ea); | |
while(ref != BADADDR) | |
{ | |
count = count + 1; | |
ref = RnextB(ea, ref); | |
} | |
teststr = sprintf("sub_%X", ea); | |
if( teststr != str ) | |
{ | |
fprintf(f, "%s 0x%X\n", str, ea); | |
} | |
//Message("%s, 0x%d, 0x%x, 0x%x, 0x%x, %d\n", str, count, ea, end, end-ea, end-ea ); | |
} | |
ea = NextFunction(ea); | |
} | |
} | |
static main() | |
{ | |
auto current = GetInputFile(); | |
current = AskFile(-1, current, "Where should I write the symbols to?"); | |
if(current == 0) | |
{ | |
return -1; | |
} | |
auto f = fopen(current, "wb"); | |
Message("FuncDump: Start\n"); | |
FuncDump(f,0x100000); | |
fclose(f); | |
Message("FuncDump: Done\n"); | |
} |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
In order to import the file into Ghidra open the Script Manager, run ImportSymbolsScript.py and pick the symbol file.
If necessary, change the call of FuncDump in Line 49 so that not only functions above 0x100000 are exported.