Exetools

Exetools (https://forum.exetools.com/index.php)
-   General Discussion (https://forum.exetools.com/forumdisplay.php?f=2)
-   -   How to dump data structures from DWARF debug info? (https://forum.exetools.com/showthread.php?t=20187)

jonwil 06-28-2022 10:21

How to dump data structures from DWARF debug info?
 
I have an ELF file with DWARF debug information, how can I dump the data structures in some kind of C-like form? I know of quite a few tools that can do it for Microsoft PDB debug information but I can't find one that can do it for DWARF information.

atom0s 06-29-2022 04:36

There's a handful of DWARF parsers up on GitHub in various languages:
Code:

https://github.com/search?q=dwarf
(You will need to weed through all the Dwarf Fortress side projects but there are a handful available on there.)

One I've had success with in the past:
Code:

https://github.com/seilweiss/dwarf2cpp

jonwil 07-01-2022 19:13

In the end I was able to get IDA to load this elf file (its a debug build of a PlayStation 3 game) and read the DWARF debug info at the same time. And I was able to find a debug build of an xbox 360 game by the same developers that contains a PDB file and that happens to use the particular library code I was interested in.

So with the combination of the PS3 game debug build and the 360 game debug build (and some other code and things from this same developer that are out there) I am making progress on reverse engineering this library (its code for reading an archive format used by games from this developer and I want to make a tool for working with said archive format :)

atom0s 07-02-2022 02:49

You may be able to find additional useful info / PDB / debug symbols for the game as well from resources like this:
Code:

http://debugging.games/

jonwil 07-02-2022 07:08

Yes that's where I got the debug builds I am working with from.

sendersu 07-15-2022 22:23

a friend of mine recommended this repo for the DWARF exploration goal
https://github.com/marakew/dwarf2cpp


All times are GMT +8. The time now is 20:04.

Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2024, vBulletin Solutions, Inc.
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX