analyze-function

To analyze a single function in a binary, you need a disassembly-capable tool to extract the disassembly, infer arguments and return types via the Microsoft x64 ABI, map callers and callees, and locate string references. Supplying the function address and optional module name initiates this automated mapping process.

RTTI context resolution in function analysis identifies Run-Time Type Information associated with a target function's objects and calls. This process extracts RTTI structures during disassembly to reveal class hierarchies and object types used within the binary, providing deeper context for reverse engineering tasks.

Generating a function signature for re-detection after updates involves analyzing the function's disassembly and structural boundaries to create a unique pattern. This signature allows the analysis tool to reliably match and identify the same function even if the binary is patched or recompiled.

Yes, function analysis supports identifying arguments and return types by applying Microsoft x64 ABI guidelines to the disassembled code. It examines register usage and stack layout to infer the data types of inputs and outputs for the target function.

To map a call graph of callers and callees, you need a disassembly-capable tool with cross-reference (xref) capabilities invoked with a specific function address. The tool traces execution flow to identify which functions call the target and which functions the target calls.

Yes, you can label function analysis results in the GUI. The analysis process correlates findings like string references, arguments, and call graphs, then applies these labels directly to the graphical interface to visualize the function's structure and purpose.