Want to Join Us ?

you'll be able to discuss, share and send private messages.

Prefix - Function Prefixing for IDA Pro

Discussion in 'Plugins' started by m4n0w4r, May 23, 2017.

Share This Page

  1. m4n0w4r

    Well-Known Member

    Overview
    Prefix is a small function prefixing plugin for IDA Pro. The plugin augments IDA's function renaming capabilities by adding a handful of convenient prefixing actions to relevant right click menus.

    [​IMG]

    Releases
    v1.0 -- Initial release

    Installation
    Install Prefix into the IDA plugins folder.

    • Copy the contents of the plugin folder to the IDA plugins folderOn Windows, the folder is at
      • C:\Program Files (x86)\IDA 6.8\plugins
      • On MacOS, the folder is at /Applications/IDA\ Pro\ 6.8/idaq.app/Contents/MacOS/plugins
      • On Linux, the folder may be at /opt/IDA/plugins/
    The plugin has only been tested on IDA Pro 6.8, 6.95 for Windows.

    Usage
    The Prefix plugin loads automatically when an IDB is opened. The plugin will populate right click menus in the Functions, Disassembly, and HexRays views with additional actions when appropriate.

    Recursive Prefix
    A common technique to quickly triage and group related functions while reverse engineering is via a recursive prefix.

    [​IMG]

    Right clicking a function in the disassembly view now provides an option to 'Recursively prefix' a function and all of its callee's.

    Bulk Prefix
    Any number of functions can now be selected in the functions view and assigned a user specified prefix.

    [​IMG]

    Clear Prefix
    User prefixes can easily be cleared via the 'Clear prefix' option added to the Functions window right click menu.

    [​IMG]

    Authors
    Andrew Marumoto
    Markus Gaasedelen (@gaasedelen)

    Download here:
    https://github.com/gaasedelen/prefix

    Regards,
     
Top