Igor’s Tip of the Week #130: Source line numbers

Debug information, whether present in the binary or loaded separately, can contain not only symbols such as function or variable names, but also mapping of binary’s instructions to the original source files. It can be used by IDA’s debugger for source-level debugging, but what if you want to see this mapping during static analysis?

Enabling source line number display

Assuming the line number info was available and has been imported, it can be enabled in the Options > …

analysis binary debug debugger debugging display files function ida info information malware analysis mapping names numbers static analysis variable