diff --git a/smda/intel/definitions.py b/smda/intel/definitions.py index 9918eae..658a799 100644 --- a/smda/intel/definitions.py +++ b/smda/intel/definitions.py @@ -52,6 +52,7 @@ b"\x89\xff\x55\x8b\xec", b"\x55\x8b\xec", b"\x55\x89\xe5", + b"\x55\x48\x89\xe5", ] # these cover 99% of confirmed function starts in the reference data set diff --git a/tests/testFileFormatParsers.py b/tests/testFileFormatParsers.py index 382c4b5..15e8b28 100644 --- a/tests/testFileFormatParsers.py +++ b/tests/testFileFormatParsers.py @@ -124,7 +124,7 @@ def testMacOsParsingWithKomplex(self): binary_info.oep = binary_info.getOep() disasm._disassemble(binary_info) komplex_unmapped_disassembly = disasm.disassembleUnmappedBuffer(komplex_binary) - self.assertEqual(komplex_unmapped_disassembly.num_functions, 208) + self.assertEqual(komplex_unmapped_disassembly.num_functions, 211) if __name__ == "__main__":