1

Is it possible to create a box / bar in IDA wich indicates the progress?

3
  • Sorry your question was a little confusing, can you provide more details? so maybe I can help you improve your question, because by default you can see the progress statuses on the bottom side of the IDA.
    – Happy
    May 31, 2021 at 16:54
  • Sorry My Bad. Yes u can see the actual status what IDA is doing, expamble: AC 0000FF45355D3.. the address is being analyzed. But u cant see how many functions are left or how long it is expecting to analyse / how much is finished. Maybe i am wrong and there is a way. (New to IDA) My Question is, is there an in built function or a Plugin to see more detail where it is standing right now?
    – david9087
    May 31, 2021 at 18:54
  • You can see the progress in the colorful thing on top the yellow arrow shows how far it got. orange arrow shows which part of the code you are viewing
    – SSpoke
    May 31, 2021 at 22:50

2 Answers 2

1

You can see the progress in the colorful thing on top the orange arrow shows how far it got. yellow arrow shows which part of the code you are viewing.

100% when the orange arrow reaches the end of the blue colorful block grey colorful thing shows strings. red colorful stuff shows functions not yet made into functions

1
  • 2
    Although this isn't strictly linear progress. In big binaries or on slow computers you'll see how the indicator jumps back and forth while analyzing the code.
    – 0xC0000022L
    Jun 1, 2021 at 7:16
2

the Progress of Autoanalysis of IDA

main logic

there is two level=hierarchy:

  • refer here, general total 12 step=pass for autoanalysis:
    • FL:<address> execution flow is being traced
    • PR:<address> a function is being created
    • TL:<address> a function tail is being created
    • SP:<address> the stack pointer is being traced
    • AC:<address> the address is being analyzed
    • LL:<number> a signature file is being loaded
    • L1:<address> the first pass of FLIRT
    • L2:<address> the second pass of FLIRT
    • L3:<address> the third pass of FLIRT
    • TP:<address> type information is being applied
    • FI:<address> the final pass of autoanalysis
    • WF:<address> weak execution flow is being traced
  • the progress=percentage of each step=pass
    • the orange arrow inside top binary bar indicated the realtime progress

example

  • main step process
    • in AC step -> AC is step 5, total 12 steps
      • can consider as the main process/percentage is: 5/12=41.7%
  • the detail process inside current AC step
    • show in figure, process is about ~45%
      • enter image description here

-->>

  • total process: ~46%

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.