mandiant / capa

The FLARE team's open-source tool to identify capabilities in executable files.
https://mandiant.github.io/capa/
Apache License 2.0
4.08k stars 512 forks source link

triage Binary Ninja backend performance #1414

Open williballenthin opened 1 year ago

williballenthin commented 1 year ago

as first described in this thread: https://github.com/mandiant/capa/pull/1343#issuecomment-1481713573 the Binary Ninja backend runs approximately 2x slower than the vivisect backend, at least during testing in CI/CD. we should investigate why this is the case (I'd expect BN to probably be faster, even if it's doing much more work, since it's implemented in C++/native code).

There's a theory that maybe PDB download and handling is holding up analysis. So, consider this angle. In any case, the first step should be profiling and gathering data that we can use to pinpoint how CPU/memory is being spent.

williballenthin commented 1 year ago

@xusheng6 for awareness