In IDA, how to know the lib function belongs to which lib file?

[cnbragon]

maybe it can not, cause the library functions have been linked in the PE file during the build phase, and the PE file doesn't contain any information about the library itself.

[bridgeic]

Originally Posted by cnbragon

maybe it can not, cause the library functions have been linked in the PE file during the build phase, and the PE file doesn't contain any information about the library itself.

But IDA can identify the function as library function, how IDA know this then?

push ebp
mov ebp, esp
mov eax, 10D0h
call __alloca_probe

[mcp]

I don't think you can retrieve this info from IDA. However, you might want to look into typeinf.hpp (specifically the til_t struct) in the IDA SDK.
You can however, get access to the currently used type library (global variable idati) as well as the list of applied signatures. But it seems to me that it doesn't give you a mapping from function names to the respective flirt library.

[bridgeic]

Originally Posted by mcp

I don't think you can retrieve this info from IDA. However, you might want to look into typeinf.hpp (specifically the til_t struct) in the IDA SDK.
You can however, get access to the currently used type library (global variable idati) as well as the list of applied signatures. But it seems to me that it doesn't give you a mapping from function names to the respective flirt library.

I still don't fully understand, I'll have a study first, thanks a lot. :-)