xusheng
xusheng
This is how the relevant events unfold: 1. when we close the tab for the view itself, the debugger actually correctly detects the closing of the last tab that belongs...
I am bumping this since this is not really a regression -- it has been there for a while and we happen to discover it recently
> see [73f56f5](https://github.com/mandiant/capa/commit/73f56f585cb17d30c964192b6bf383ed107a71d8) for an implementation Oh nice! I was once a bit confused by what you are trying to do with that PR, but now I realized that apparently...
> To run capa against 321338196a46b600ea330fc5d98d0699, it takes 2:48. But :36 is spent just in [`BNGetLowLevelILForInstruction`](https://github.com/Vector35/binaryninja-api/blob/e0a4f3040f72d759b350abcaf3ef53d05fef0c83/python/function.py#L944) to help recover calls to functions. I have expected this to be extremely fast...
> @xusheng6 on my test rig it took maybe 13s to load the binary. Then lots longer to extract the features (minutes). So accessing the LLIR/MLIR is taking integer multiples...
While looking into https://github.com/mandiant/capa/issues/2406, I noticed the IL of the function 0x8082d40 (the largest function in b5f0524e69b3a3cf636c7ac366ca57bf5e3a8fdc8a9f01caf196c611a7918a87.elf_) is requested multiple times. This is not expected, since I thought the IL...
> While looking into #2406, I noticed the IL of the function 0x8082d40 (the largest function in b5f0524e69b3a3cf636c7ac366ca57bf5e3a8fdc8a9f01caf196c611a7918a87.elf_) is requested multiple times. This is not expected, since I thought the...
I would suggest you not do bother that from capa. I will see if I can do anything from binja. Apparently the caching thing is unique to binja and it...
Here is a brief recap of my recent findings: 1. Repetitive IL retrieval caused by the binja's cache handling of the IL function. See https://github.com/mandiant/capa/issues/2402#issuecomment-2492832367 for more info. This contributes...
Ok I finally figured out what is happening: https://github.com/Vector35/binaryninja-api/issues/6171#issuecomment-2492926828. And indeed the two issues are related and they contribute together to what I see. That is the beauty of debugging!