Results 1 to 2 of 2

Thread: Difference between various Analysis 1 options

  1. #1

    Difference between various Analysis 1 options

    What is the difference between "Strict" , "Heuristical" and "Fuzzy" "Procedure Recognition" (in Debugging options -> Analysis 1) ? Which one should i have ticked ?

  2. #2
    Super Moderator
    Join Date
    Dec 2004
    Posts
    1,513
    Blog Entries
    15

    Difference between various Analysis 1 options

    noramlly let it at the default heuristics selection it works best

    strict is one where the winmain message loop kind of procedure is not recognized

    fuzzy recognizes some procedures extra but may not be reliable
    100 %

    here is a sample analysis with iexplorer.exe with all three options turned on one by one notice fuzzy recognises 9 more procedures than
    strict and heuristics

    Log data
    Address Message
    Analysing iexplore
    14 strict procedures
    58 calls to known, 11 calls to guessed functions
    9 loops
    Analysing iexplore
    14 heuristical procedures
    58 calls to known, 11 calls to guessed functions
    9 loops
    Analysing iexplore
    23 fuzzy procedures
    58 calls to known, 11 calls to guessed functions
    9 loops


    it has recognized this as a procedure

    0040145B /. 8BC6 MOV EAX, ESI
    0040145D |. 5E POP ESI
    0040145E |. C9 LEAVE
    0040145F \. C3 RETN

    if you try to find referances for this procdure you wouldnt find none

    neither will call stack (ctrl+k) show who calls it or what this calls

    you can use ctrl+ + (plus) or ctrl+ - (minus to find the procedures after analysis

    it all depends on what you like to do

Similar Threads

  1. Difference in disassembly.
    By 5aLIVE in forum The Newbie Forum
    Replies: 5
    Last Post: January 12th, 2009, 12:50
  2. Vbulletin New posts options
    By peterg70 in forum Off Topic
    Replies: 6
    Last Post: December 15th, 2006, 06:32
  3. Difference
    By Scarabee in forum OllyScript Plugin
    Replies: 2
    Last Post: May 23rd, 2004, 23:23
  4. Difference between SoftIce & Ollydbg ? (was so
    By Anonymous in forum OllyDbg Support Forums
    Replies: 6
    Last Post: February 3rd, 2003, 05:04
  5. IDA Difference file patcher???
    By crUsAdEr in forum Tools of Our Trade (TOT) Messageboard
    Replies: 1
    Last Post: November 29th, 2002, 03:31

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •