Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

In IDA Pro, is there a way to flag a function?

Tags:

ida

I found a particularly important function using IDA Pro. However, the source is very large and I'm sure I'll lose track of it soon.

Is there a way to "flag" the function as important, color code it, or something similar?

like image 589
samoz Avatar asked Jun 29 '10 14:06

samoz


People also ask

How do I edit a function in IDA Pro?

In order to change only the function end address, you can use FunctionEnd command. If the current address does not belong to any function, IDA beeps. This command allows you to change the function frame parameters too. You can change sizes of some parts of frame structure.

Is IDA Pro a disassembler?

IDA Pro is a disassembler The source code of the software we use on a daily basis isn't always available. A disassembler like IDA Pro is capable of creating maps of their execution to show the binary instructions that are actually executed by the processor in a symbolic representation called assembly language.

Does IDA free Have Decompiler?

The cloud-based Decompilers are free as part of the beta testing and work only with active IDA Home licenses. Each user will receive one Decompiler compatible with his/her IDA Home version. Only 64-bit Decompilers are available: x64/ARM64/PPC64.


2 Answers

You can use:

  1. edit the function and make it public
  2. edit the function and color it
  3. use markers (alt+m / ctrl+m)
  4. give it a special prefix

I usually use 1 and 4

like image 74
Elias Bachaalany Avatar answered Sep 29 '22 00:09

Elias Bachaalany


  1. Rename the function and give it a prefix, like "z_", and then you can find this function easily by sorting the function list by name.
like image 26
thelONE Avatar answered Sep 29 '22 01:09

thelONE