Skip to content

Conversation

intfinity-zhanteng
Copy link

@intfinity-zhanteng intfinity-zhanteng commented Aug 8, 2024

Function discovery

  • Undefine large qword arrays from IDA auto-analysis
  • Deliberately add_func to improve the output while walking through the function address table from pcln
  • Remove rodata segment requirement since it will not work with memory dump

Extract types

  • Search lea instruction in reverse order
  • Add dynamic search for data section to get name of types
  • Add register tagging to each function since the type will be placed in different registers for different functions instead of hardcoding registers
  • Add parsing of variables of structs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant