The meaning of IDA naming prefix

IDA automatically generates false names, which are used to represent sub-functions, program addresses and data. Fake names have different prefixes according to different types and values:

  • sub_: starting point of instructions and sub-functions
  • locret_: return instruction
  • loc_: instruction
  • off_: data, including offset
  • seg_: data, including segment address value
  • asc_: data, ASCII string
  • byte_: data, byte (or byte array)
  • word_: data, 16-bit data (or word array)
  • dword_: data, 32-bit data (or double word array)
  • qword_: data, 64-bit data (or 4-word array)
  • flt_: floating point data, 32 bits (or floating point array)
  • dbl_: floating-point number, 64-bit (or double-precision array)
  • tbyte_: floating point number, 80 bits (or extended precision floating point number)
  • stru_: structure (or structure array)
  • algn_: alignment instructions
  • unk_: unprocessed bytes

Guess you like

Origin blog.csdn.net/kelxLZ/article/details/112886086