When reversing a binary, I may rename some functions before understanding which library was used and subsequently generate its FLIRT signature and type library. Is there a way to run the FLIRT signature and have them overwrite any already renamed functions?
I tried using File > Load file > FLIRT signature file…, but renamed functions kept their name.
FLIRT does not override user-defined names by design. What you can do is to delete your names before applying FLIRT. This can be done by opening the Names list (Shift-F4) and deleting the names (you can sort or filter them and use selection).
Thanks, feared as much. Any way to get a list of functions that FLIRT has not renamed because they were already renamed? Deleting all function names is undesirable given it would also affect non-library functions.
As a feature request, it would be nice to have the FLIRT name override option available (i.e., checkbox?) when loading FLIRT signatures.