5 Commits

Author SHA1 Message Date
x86byte 6c2dca78ab Function boundary detection: multi-pass prolog, tail-call, .pdata, data pointers
- Extended prolog patterns: MSVC x64 callee-saves, sub rsp >= 0x20, enter
- Tail-call detection: jmp to prolog candidates seeds new functions
- endbr64/endbr32 CET skipping at function starts
- PE .pdata exception table parsing for precise start/end boundaries
- Data-section function pointer scanning (vtables, callbacks)
- PLT stub detection with is_thunk tag
- end_address and is_thunk fields in Function struct and JSON output
- getDataRanges() and getRuntimeFunctions() in Binary interface
- README docs for all new features + research paper reference
2026-06-30 10:04:56 +01:00
x86byte 236e428dce README: add output format docs for --subs-only and --clean modes
- Add mode field to normal JSON output example
- Add --subs-only output section with JSON sample
- Add --clean output section with stack_offset and xrefs sample
- Add --subs-only --clean combined output section
- Update function count 422 -> 414 (empty function removal)
- Include test example files for all modes
2026-06-30 09:41:55 +01:00
x86byte d7a02a9df7 readme: document --clean flag 2026-06-29 13:01:13 +01:00
x86byte 815ddc53d4 readme: document --subs-only flag 2026-06-29 12:55:18 +01:00
x86byte 5fab3a419c cfgrip: standalone CFG extraction tool from PE/ELF binaries 2026-06-29 11:48:20 +01:00