auto_re icon indicating copy to clipboard operation
auto_re copied to clipboard

Feature request: show all imports per function view

Open vanhauser-thc opened this issue 6 years ago • 2 comments

If you look at the current AutoRE view, you see all the functions that call functions that are defined in the TAG list. However, the functions in the TAG list will most times only be a small part of the overall functions that are imported from various libraries. And it will never be feasible to adapt your python script to have all possible imports in the TAG list.

So, a second view (because the already existing view is good and should not be changed) could show every imported functions call in a function.

See the unrar binary we assessed. it also imports time(), umask(), wmemmove() and lots of other functions. So a second view that would show which functions call which imports, not only those in a TAG list, would be handy and give a very good quick overview what is happening in which function.

(in a next step you could even go as fas as renaming functions to imports that are not in the TAG list if the function only calls one imported function and no other call or far jmp)

I hope I explained it better now?

vanhauser-thc avatar Mar 13 '18 12:03 vanhauser-thc

Hi @vanhauser-thc, How it should look like? Could you show me an example of data organizing on the new view, because I cannot imagine some good and useful data representation when some function has a lot of API calls inside?

a1ext avatar Mar 14 '18 21:03 a1ext

I think it should look the same as the existing one, but limiting the list to maybe the first 10-15 import calls in a function? Big programs will always be a trouble but still there such a view can help IMHO. (I do mostly automotive reversing, so there are numerous library imports for multimedia, devices, graphics, network, ipc, file and I always struggle in the beginning to get a good overview where is what happening in the program, and the programs without libraries alone are usually 20-100MB in size)

vanhauser-thc avatar Mar 15 '18 09:03 vanhauser-thc