ev-flow / ev-flow/quark-engine
R2Imp fails to find the functions at some addresses
Open
- Dominant language
- Python
- Stars
- 1.7k
- Forks
- 218
- Avg merge
- 4d 12h
- Merged PRs (30d)
- 7
Description
Refer to the [R2 issue](https://github.com/radareorg/radare2/issues/21864).
R2 fails to find the functions at some addresses while analyzing apk sample.
In this way, It leads to incomplete analysis result.
Take an [APK](https://github.com/quark-engine/apk-samples/blob/master/malware-samples/0c2494c03f07f891c67bb31390c12c84b0bb5eea132821c0873db7a87f27ccef.apk) (SHA1: 3f2c8e170a4aab68af2c43a0d63e52a637791a9f) as an example.
At first, I found the La/b/d/a/B.method.a()I exists at 1483646 according to the symbol info,
then tried to disassemble it. It turns out that R2 can’t find the function at this address.
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.