Advertisement
BaSs_HaXoR

Defined names generated by IDA

Mar 11th, 2015
536
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 2.84 KB | None | 0 0
  1. Defined names generated by IDA:
  2. #___#---##---##---##---##---##---##---##---##---##---##---##---##---##---##---##---##---##---##---#___#
  3. Names Representation
  4. Action name: SetNameType
  5.  
  6. Dummy names are automatically generated by IDA. They are used to denote subroutines, program locations and data.
  7. Dummy names have various prefixes depending on the item type and value:
  8.  
  9. sub_ instruction, subroutine start
  10. locret_ 'return' instruction
  11. loc_ instruction
  12. off_ data, contains offset value
  13. seg_ data, contains segment address value
  14. asc_ data, ascii string
  15. byte_ data, byte
  16. word_ data, 16-bit
  17. dword_ data, 32-bit
  18. qword_ data, 64-bit
  19. xmmword_ data, 128-bit
  20. flt_ floating point data, 32-bit
  21. dbl_ floating point data, 64-bit
  22. tbyte_ floating point data, 80-bit
  23. stru_ structure
  24. custdata_ custom data type
  25. algn_ alignment directive
  26. unk_ unexplored byte
  27. You can change representation of dummy names. IDA supports several types of dummy names:
  28. 0 loc_0_1234 segment base address relative to program base address
  29. & offset from the segment base
  30. 1 loc_1000_1234 segment base address & offset from the segment base
  31. 2 loc_dseg_1234 segment name & offset from the segment base
  32. 3 loc_0_11234 segment relative to base address & full address
  33. 4 loc_1000_11234 segment base address & full address
  34. 5 loc_dseg_11234 segment name & full address
  35. 6 loc_12 full address
  36. 7 loc_0012 full address (at least 4 digits)
  37. 8 loc_00000012 full address (at least 8 digits)
  38. 9 dseg_1234 the same as 2, but without data type specifier
  39. 10 loc_1 enumerated names (loc_1,loc_2,loc_3...)
  40. If you have selected names type 10 (enumerated names), you may renumber them using a checkbox. The process is relatively fast, surprisingly.
  41. The best representation for MS DOS programs is #0, for 16-bit processors - #7, and for 32-bit processors - #8. You can change dummy names type any time you want.
  42.  
  43. You can also set up types of names included in the names list. IDA knows about the following types of names:
  44.  
  45. - normal names
  46. - public names
  47. - weak public or extern names
  48. - autogenerated (meaningful) names.
  49. - dummy (meaningless) names.
  50. Dummy names may be public or weak, but they never appear in the list of names. You can specify the type of a name when you create or modify it.
  51. You can also set maximal length of new names. Old names will not be affected by this parameter.
  52. #___#---##---##---##---##---##---##---##---##---##---##---##---##---##---##---##---##---##---##---#___#
  53. //Source: https://www.hex-rays.com/products/ida/support/idadoc/609.shtml
  54. //BaSs_HaXoR
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement