https://github.com/gaasedelen/prefix

Function Prefixing for IDA Pro
https://github.com/gaasedelen/prefix

Last synced: 3 months ago
JSON representation

Function Prefixing for IDA Pro

• Host: GitHub
• URL: https://github.com/gaasedelen/prefix
• Owner: gaasedelen
• License: mit
• Created: 2017-05-22T05:15:21.000Z (over 7 years ago)
• Default Branch: master
• Last Pushed: 2020-04-24T05:00:32.000Z (over 4 years ago)
• Last Synced: 2024-02-11T16:04:02.570Z (9 months ago)
• Language: Python
• Size: 244 KB
• Stars: 140
• Watchers: 13
• Forks: 28
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        
# Prefix - Function Prefixing for IDA Pro







## Overview

Prefix is a small function prefixing plugin for [IDA Pro](https://www.hex-rays.com/products/ida/). The plugin augments IDA's function renaming capabilities by adding a handful of convenient prefixing actions to relevant right click menus.

## Releases

* v1.2 -- Supoort IDA 7.0 -> 7.4, Python 2/3, deprecates IDA 6.x.

* v1.1 -- Added IDA 7 support.

* v1.0 -- Initial release

## Installation

Prefix is a cross-platform (Windows, macOS, Linux) Python 2/3 plugin. It takes zero third party dependencies, making the code both portable and easy to install.

1. From your disassembler's python console, run the following command to find its plugin directory:

   - **IDA Pro**: `os.path.join(idaapi.get_user_idadir(), "plugins")`

2. Copy the contents of this repository's `/plugin/` folder to the listed directory.

3. Restart your disassembler.

This plugin is only supported for IDA 7.0 and newer.

## Usage

The Prefix plugin loads automatically when an IDB is opened. The plugin will populate right click menus in the Functions, Disassembly, and HexRays views with additional actions when appropriate.

## Recursive Prefix

A common technique to quickly triage and group related functions while reverse engineering is via a recursive prefix.







Right clicking a function in the disassembly view now provides an option to 'Recursively prefix' a function and all of its callee's.

## Bulk Prefix

Any number of functions can now be selected in the functions view and assigned a user specified prefix.







## Clear Prefix

User prefixes can easily be cleared via the 'Clear prefix' option added to the Functions window right click menu.







## Authors

* Andrew Marumoto

* Markus Gaasedelen ([@gaasedelen](https://twitter.com/gaasedelen))