patois / ntrdisasm Goto Github PK

Hi patois. I don't know if you're using IDA Pro. If so, you can try to generate some signature files with FLAIR. Use IDA2PAT Reloaded for (.elf) or Official FLAIR from SDK for a library (.a). After used pelf or ida2pat and sigmake and conflicts solved, you get the .sig file. You can then put the .sig file to /sig/arm in IDA folder, and load it from File->Load File->FILRT... If signature matches IDA would soon show up the functions in light blue. In short, this helps you recover symbols.

#This generates libgcc.pat.
pelf libgcc.a
#This tried to generate the sig, with library name as libgcc.
sigmake -nlibgcc libgcc.pat libgcc.sig
#libgcc has conflicts, so it generated a libgcc.exc.
#I edited the file, and removed the comments in the first few lines of file.
sigmake -nlibgcc -xlibgcc.exc libgcc.pat libgcc.sig

Sometimes you would have to solve some conflicts, such as.

+__gnu_sssubsa3                                     0C 073F 000031E1001061E00100004A0100A0E11EFF2FE1000031E1FBFFFF5A000050E3
__gnu_sssubsq3                                      0C 073F 000031E1001061E00100004A0100A0E11EFF2FE1000031E1FBFFFF5A000050E3

These step would be easier if use regex to place + for those firsts of each term. To me i replaced \r\n\r\n__ to \r\n\r\n+__, and the file is almost done.

Well. You might have to generate more sig files if there are some versions for its dependencies. For examples there are quite a few versions of libctru.
I like your work, much. Hope this helps you.. Still trying to recover rxTools.