Identify Prologues/Epilogues for Other Archs

jchristman / PyDA

Python binary DisAssembler

http://suntzuii.github.io/PyDA/

Other

26 stars 10 forks source link

Identify Prologues/Epilogues for Other Archs #25

Open direwolf314 opened 10 years ago

direwolf314 commented 10 years ago

Currently, x86 is the only arch with identified function prologues/epilogues. Edit asmfeatures.py appropriately.

wiseone13 commented 10 years ago

To follow up on this, an issue we have is when you have code flow outside of a push ebp ... ret statement. For example, code is considered parentless if it jumps beyond the ret at the "end" of the function.

direwolf314 commented 10 years ago

Agreed. Should no longer be an issue once we have code/data marking working appropriately. Another sub-tasking of recursive traversal.