classify-functions

Module function classification categorizes every function into purpose-based groups by synthesizing signals from API usage, string literals, naming patterns, and assembly metrics. This produces per-function categories, scores, and evidence for rapid triage and high-level understanding.

The best way to triage top-entry-point functions is to use multi-signal classification to generate summaries highlighting top-interest functions, dangerous APIs, and size/complexity metrics. This helps prioritize manual reverse engineering review efficiently.

Yes, multi-signal function classification works with decompiled code and analysis databases. It requires an extracted module database to process decompiled code indicators, API usage, and assembly metrics, applying purpose categories to every function within the module.

You can filter out compiler and telemetry noise by applying category filtering after the multi-signal classification process. The classification supports filtering to reduce noise, outputting per-function scores and signals that help isolate relevant behavioral indicators from irrelevant background data.

Yes, you can export categorized function indices to JSON for downstream analysis workflows. The classification supports exporting to JSON and filtering by category, enabling seamless integration with subsequent analysis, documentation, or targeted investigation processes.