Some samples are using call instruction instead of push to mix code/data in one section. This approach confuses IDA and makes static analysis less pleasant.
MazeTracer can account for each call and ret. By analyzing those sequences, the problematic calls could be filtered and latter fixed in IDA with MazeUI.
Some samples are using
call
instruction instead ofpush
to mix code/data in one section. This approach confuses IDA and makes static analysis less pleasant.MazeTracer can account for each
call
andret
. By analyzing those sequences, the problematiccall
s could be filtered and latter fixed in IDA with MazeUI.