IDA allows one to rename a program entity (e.g. register, variable, function) using N shortcut. Is it possible to get a list of such user-defined names in IDA?
asked Nov 1 '16 at 7:40
-
Do you mean hex-rays variables by "variables" ? If yes, this script dumps almost all user defined things in specific decompiler function: github.com/idapython/src/blob/master/examples/vds4.py – w s Nov 1 '16 at 8:13
-
1In addition idautils.Names() can be used to retrieve the named global entities. – w s Nov 1 '16 at 8:17
The idautils.Names function might be of interest to you, as it returns a list of (ea, name) tuples for all names defined in the IDB and the ea at which they're located.
Additionally, you can use the answer to the question Igor linked (Get a list of global variables with IDA python) to get a list of all functions.
Once you have the eas you can do the following to figure out if a function or ea was named by the user:
def is_user_name(ea):
f = idc.GetFlags(ea)
return idc.hasUserName(f)
This function will return true if an EA has a name set by the user either programatically or manually.
-
1I think the
Namesutility function is available underidautils, notidc. – Willi Ballenthin Jul 27 '17 at 15:32 -
the API name is
idc.GetNames, notidc.getNames. I can't make the edit because its less than six chars difference. – Willi Ballenthin Sep 22 '17 at 17:49 -
@WilliBallenthin Couldn't find a reference to idc.getnames anywhere in my comment. Let me know and I'll edit. – NirIzr Sep 22 '17 at 17:51
-
1
-
is_user_nameseems to returnTrueeven for library names that were generated during analysis. – dkaranovich Aug 12 '19 at 4:30
You can use View->Open subview->Names or Shift-F4. Note that the list included all names, both user-defined as well as generated by IDA (e.g. ASCII string names).
See also related Get a list of global variables with IDA python
answered Nov 1 '16 at 12:28
-
1Is it possible to list out user-defined names only, not IDA generated ones? – Holmes.Sherlock Nov 1 '16 at 18:42
