ghidra/Ghidra/Processors/x86/data/patterns/x86gcc_prepatterns.xml
emteere 4b6d90366c GP-5526 Added section tag to function start patterns. New thunk patterns
in x86 gcc .plt section.  Changed priority of pre analyzer and
disassembly.
2025-09-10 22:55:14 +00:00

20 lines
489 B
XML

<patternlist>
<pattern>
<data>
0xff25........ <!-- jmp -->
0x68......00 <!-- push -->
0xe9......ff <!-- jmp -addr -->
</data> <!-- .plt thunk -->
<funcstart thunk="true" section=".plt"/>
</pattern>
<pattern>
<data>
0xf3 0x0f 0x1e 0x1a <!-- ENDBR64 -->
0xf2 0xff 0x25 .. .. .. .. <!-- jmp -->
</data> <!-- .plt thunk -->
<funcstart thunk="true" section=".plt"/>
</pattern>
</patternlist>