Topic created on: May 28, 2007 20:58 CDT by ogami .

Hi all, I am sorry that my first post is a question. I hope that somebody has time to assist me. I am reversing a binary that is implemented in C++ and MFC, the binary is statically linked to the following files located in the directory that the software is installed in:

Name     Version       MD5
----------------------------------------------------------
mfc71u.dll  7.10.3077.0   7b93c623333f121dc9e689ccb1b7a733
msvcp71.dll 7.10.3077.0   561fa2abb31dfa8fab762145f81667c2
msvcr71.dll 7.10.3052.4   86f1895ae8c5e8b17d99ece768a70732
msvcrt.dll  7.0.2600.2180 b0fefa816d61ec66aa765ddf534eab5e

(Digression: Aren't these versions vulnerable to MS07-012, hehe)

I cannot find pdb or def files for these libraries so the symbol names are not being resolved for IDA or Olly.

Does anybody know where I could find a script that would map the ordinals to symbol names in IDA?(Also it would be very helpful if the symbol names were mapped in Olly). Also, does anybody know if a tool like symbol-retriever still works to get the pdb files or def for the above libraries? If I can get the def files I can write some IDC to map the ordinals in IDA and can post it here.

Thanks to anybody that has time to help me out.