Flair v5.20下载

Eddy 发布于2011-5-16 20:59:23 分类: 精品软件 已浏览loading 网友评论1条 我要评论


FLAIR -- Fast Library Acquisition for Identification and Recognition

FLAIR utilities allow you to create your own signature files from
OBJECT or LIBRARY files for IDA Pro v3.8 or higher.

FLAIR consists of the following executables:

plb         parselib  processes OMF  libraries and creates PAT file
pcf             parsecoff processes COFF libraries and creates PAT file
pelf            parseelf  processes ELF  libraries and creates PAT file
ppsx            parsepsx  processes PSX  libraries and creates PAT file (Sony Playstation)
ptmobj          parsetobj processes Trimedia libraries .... .... ....
pomf166         Keil C166 object files (old format)
sigmake         sigmake takes PAT files as input and creates SIG file
zipsig          zipsig compresses and uncompresses SIG files
dumpsig         dumpsig dumps contents of SIG file in a text form.

Typical scenario of a signature creation is:
 - run a parser and create pattern (PAT) files
 - run sigmake and get EXC file with collisions
 - edit EXC file and resolve collisions
 - run sigmake again and get SIG file
 - repeat the above 2 steps till collisions exist
 - run zipsig and get compressed SIG file



原创文章如转载,请注明:转载自Eddy Blog
原文地址:http://www.rrgod.com/j-software/778.html     欢迎订阅Eddy Blog

记住我的信息,下次不用再输入 欢迎给Eddy Blog留言