spierce7
07/04/2022, 5:42 PMStrings <exe> | grep -i <name of module>
ephemient
07/04/2022, 8:31 PMspierce7
07/05/2022, 12:32 AMephemient
07/05/2022, 12:37 AMspierce7
07/05/2022, 12:40 AMephemient
07/05/2022, 12:41 AMLandry Norris
07/05/2022, 3:08 PMephemient
07/05/2022, 3:17 PMstrip
doesn't obfuscate symbols, it removes all unused external symbols. functions used internally can still call each other by relative address, but then stacktraces will only have absolute addresses, which cannot be easily mapped back to the symbol names unless you objcopy
the debug info out before stripping and collect more than just the stack trace (either a core dump, or at least the memory mapping)Landry Norris
07/05/2022, 3:18 PMspierce7
07/07/2022, 5:01 AMephemient
07/07/2022, 3:14 PM