From 050155ff468dfb1fff3c378e165f453864de21c1 Mon Sep 17 00:00:00 2001 From: N0fix <16479266+N0fix@users.noreply.github.com> Date: Tue, 2 Dec 2025 11:56:12 +0100 Subject: [PATCH 1/2] Added x64 function prologue --- smda/intel/definitions.py | 2 ++ 1 file changed, 2 insertions(+) diff --git a/smda/intel/definitions.py b/smda/intel/definitions.py index 9918eae..44df309 100644 --- a/smda/intel/definitions.py +++ b/smda/intel/definitions.py @@ -52,6 +52,8 @@ b"\x89\xff\x55\x8b\xec", b"\x55\x8b\xec", b"\x55\x89\xe5", + b"\x55\x48\x89\xec", + b"\x55\x48\x89\xe5", ] # these cover 99% of confirmed function starts in the reference data set From e9b9316b1200d8c83f1cd98ad418dcdf76fd9105 Mon Sep 17 00:00:00 2001 From: Nofix <16479266+N0fix@users.noreply.github.com> Date: Sat, 6 Dec 2025 15:10:55 +0100 Subject: [PATCH 2/2] Removed bad default prologue and updated testFileFormatParsers --- smda/intel/definitions.py | 1 - tests/testFileFormatParsers.py | 2 +- 2 files changed, 1 insertion(+), 2 deletions(-) diff --git a/smda/intel/definitions.py b/smda/intel/definitions.py index 44df309..658a799 100644 --- a/smda/intel/definitions.py +++ b/smda/intel/definitions.py @@ -52,7 +52,6 @@ b"\x89\xff\x55\x8b\xec", b"\x55\x8b\xec", b"\x55\x89\xe5", - b"\x55\x48\x89\xec", b"\x55\x48\x89\xe5", ] diff --git a/tests/testFileFormatParsers.py b/tests/testFileFormatParsers.py index 382c4b5..15e8b28 100644 --- a/tests/testFileFormatParsers.py +++ b/tests/testFileFormatParsers.py @@ -124,7 +124,7 @@ def testMacOsParsingWithKomplex(self): binary_info.oep = binary_info.getOep() disasm._disassemble(binary_info) komplex_unmapped_disassembly = disasm.disassembleUnmappedBuffer(komplex_binary) - self.assertEqual(komplex_unmapped_disassembly.num_functions, 208) + self.assertEqual(komplex_unmapped_disassembly.num_functions, 211) if __name__ == "__main__":