New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Emulate more functions #384

Open

mr-tz opened this issue Jul 21, 2021 · 1 comment

Labels

Collaborator

mr-tz commented Jul 21, 2021 •

edited

Loading

Currently FLOSS only emulates the top 10 or so decoding function candidates.

Improvement ideas on this:

increase function count
emulate all user functions (needs library ID, likely slow, so maybe need timeout)
adding other heuristics to e.g.
- backtrace from relevant APIs, see [identification] plugin: trace backwards from known APIs that take strings #279
- always emulate the first N functions (sorted by FVA)

mr-tz added the enhancement label

Collaborator

williballenthin commented Jul 21, 2021

might also try emulation a couple times for each candidate, and if they yield results, keep going, otherwise move along.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment