Identifying and isolating functions inside executables like IDA does. | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		Identifying and isolating functions inside executables like IDA does. (evilsocket.net)
		2 points by evilsocket on March 11, 2014 \| hide \| past \| favorite \| 1 comment

mschuster91 on March 11, 2014 [–]

Your algorithm has a flaw, assume something like this:

    fun1:
    ...
    cmp rax,rbx
    je fun1_a
    call fun2
    ret
    fun1_a:
    call fun3
    ret

There, you will miss the call to fun3.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact