Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Feature request: show all imports per function view #5

Open
vanhauser-thc opened this issue Mar 13, 2018 · 2 comments
Open

Feature request: show all imports per function view #5

vanhauser-thc opened this issue Mar 13, 2018 · 2 comments

Comments

@vanhauser-thc
Copy link

If you look at the current AutoRE view, you see all the functions that call functions that are defined in the TAG list.
However, the functions in the TAG list will most times only be a small part of the overall functions that are imported from various libraries. And it will never be feasible to adapt your python script to have all possible imports in the TAG list.

So, a second view (because the already existing view is good and should not be changed) could show every imported functions call in a function.

See the unrar binary we assessed. it also imports time(), umask(), wmemmove() and lots of other functions. So a second view that would show which functions call which imports, not only those in a TAG list, would be handy and give a very good quick overview what is happening in which function.

(in a next step you could even go as fas as renaming functions to imports that are not in the TAG list if the function only calls one imported function and no other call or far jmp)

I hope I explained it better now?

@a1ext
Copy link
Owner

a1ext commented Mar 14, 2018

Hi @vanhauser-thc,
How it should look like? Could you show me an example of data organizing on the new view, because I cannot imagine some good and useful data representation when some function has a lot of API calls inside?

@vanhauser-thc
Copy link
Author

I think it should look the same as the existing one, but limiting the list to maybe the first 10-15 import calls in a function?
Big programs will always be a trouble but still there such a view can help IMHO.
(I do mostly automotive reversing, so there are numerous library imports for multimedia, devices, graphics, network, ipc, file and I always struggle in the beginning to get a good overview where is what happening in the program, and the programs without libraries alone are usually 20-100MB in size)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants