Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Apply heuristics for identifying functions when no symbols are present #1

Open
lordmilko opened this issue Jan 24, 2024 · 0 comments
Open
Labels
disasm-analysis Full module analysis similar to IDA Pro

Comments

@lordmilko
Copy link
Owner

IDA Pro is able to identify functions even when no symbols are present. Even when symbols are present, sometimes things aren't actually functions after all (e.g. the many bad functions in System.Data)

Ghidra utilizes a series of heuristics for identifying the locations of functions. Consider implementing this functionality as well. Note that we've seen cases where a function began with sub against rsp or something, so we need to make sure that not only that such functions are identified as well, but that all functions listed in symbols are identified as functions using this heuristic based approach

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
disasm-analysis Full module analysis similar to IDA Pro
Projects
Status: Todo
Development

No branches or pull requests

1 participant