Prefix - Function Prefixing for IDA Pro

m4n0w4r

New member
Overview
Prefix is a small function prefixing plugin for IDA Pro. The plugin augments IDA's function renaming capabilities by adding a handful of convenient prefixing actions to relevant right click menus.

main.png


Releases
v1.0 -- Initial release

Installation
Install Prefix into the IDA plugins folder.

  • Copy the contents of the plugin folder to the IDA plugins folderOn Windows, the folder is at
    • C:\Program Files (x86)\IDA 6.8\plugins
    • On MacOS, the folder is at /Applications/IDA\ Pro\ 6.8/idaq.app/Contents/MacOS/plugins
    • On Linux, the folder may be at /opt/IDA/plugins/
The plugin has only been tested on IDA Pro 6.8, 6.95 for Windows.

Usage
The Prefix plugin loads automatically when an IDB is opened. The plugin will populate right click menus in the Functions, Disassembly, and HexRays views with additional actions when appropriate.

Recursive Prefix
A common technique to quickly triage and group related functions while reverse engineering is via a recursive prefix.

recursive.gif


Right clicking a function in the disassembly view now provides an option to 'Recursively prefix' a function and all of its callee's.

Bulk Prefix
Any number of functions can now be selected in the functions view and assigned a user specified prefix.

bulk.gif


Clear Prefix
User prefixes can easily be cleared via the 'Clear prefix' option added to the Functions window right click menu.

clearing.gif


Authors
Andrew Marumoto
Markus Gaasedelen (@gaasedelen)

Download here:
https://github.com/gaasedelen/prefix

Regards,
 
Top