communication
RECON-BRX-2017-GRAP
RECON-BRX-2017-GRAP
Create successful ePaper yourself
Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.
Disassembly Graph matching Patterns Bindings IDA plugin Perspectives<br />
Traversal within a test graph<br />
© 2017 Cassidian Cybersecurity SAS - All rights reserved. The reproduction, distribution and utilization of this document as well as the <strong>communication</strong> of its contents to others<br />
without express authorization is prohibited. Offenders will be held liable for the payment of damages. All right reserved in the event of the grand of a patent, utility model or design.<br />
Can we perform the traversal (of the pattern) within the test graph ?<br />
2: ADD<br />
1<br />
3: CMP<br />
1: CALL<br />
1<br />
2<br />
4: PUSH<br />
1<br />
5: PUSH<br />
1 : CALL 1 −→ 2 : ADD 1 −→ 3 : CMP R −→ 1<br />
2<br />
−→ 4 : PUSH 1 −→ 5 : PUSH<br />
2<br />
JNE<br />
1<br />
RET<br />
CALL<br />
1<br />
ADD<br />
1<br />
CMP<br />
1<br />
2<br />
PUSH<br />
1<br />
PUSH<br />
PUSH<br />
1<br />
CALL<br />
2<br />
1<br />
XOR<br />
1<br />
ADD<br />
9 / 39
Change language