{"action":"created","issue":{"url":"https://api.github.com/repos/radare/radare2/issues/1886","repository_url":"https://api.github.com/repos/radare/radare2","labels_url":"https://api.github.com/repos/radare/radare2/issues/1886/labels{/name}","comments_url":"https://api.github.com/repos/radare/radare2/issues/1886/comments","events_url":"https://api.github.com/repos/radare/radare2/issues/1886/events","html_url":"https://github.com/radare/radare2/issues/1886","id":52581066,"number":1886,"title":"Function resolving when searching for calls","user":{"login":"newlog","id":950789,"avatar_url":"https://avatars.githubusercontent.com/u/950789?v=3","gravatar_id":"","url":"https://api.github.com/users/newlog","html_url":"https://github.com/newlog","followers_url":"https://api.github.com/users/newlog/followers","following_url":"https://api.github.com/users/newlog/following{/other_user}","gists_url":"https://api.github.com/users/newlog/gists{/gist_id}","starred_url":"https://api.github.com/users/newlog/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/newlog/subscriptions","organizations_url":"https://api.github.com/users/newlog/orgs","repos_url":"https://api.github.com/users/newlog/repos","events_url":"https://api.github.com/users/newlog/events{/privacy}","received_events_url":"https://api.github.com/users/newlog/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/radare/radare2/labels/anal","name":"anal","color":"009800"},{"url":"https://api.github.com/repos/radare/radare2/labels/enhancement","name":"enhancement","color":"84b6eb"}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":5,"created_at":"2014-12-21T00:15:18Z","updated_at":"2016-10-23T18:23:33Z","closed_at":null,"body":"Hi!\r\n\r\nIt would be great that when searching, for example, for calls with /c call, the destination address would be resolved as it's resolved in the disassembly view. \r\n\r\nFor example, we would get an output like the following:\r\n```\r\nf hit_0 @ 0x100052f1   # 6: call dword [0x10016010]\r\nf hit_1 @ 0x100052fe   # 6: call dword [0x10016008]\r\nf hit_2 @ 0x1000532a   # 2: call ebx\r\nf hit_3 @ 0x10005341   # 3: call dword [eax-0x1]\r\nf hit_4 @ 0x10005343   # 2: call edi\r\n```\r\n\r\nIn the disassembly view, the call to 0x10016010 would be resolved and the function name would be shown. But it's not when searching.\r\n\r\nEdit: Here's an asciinema showing the problem and a workaround:\r\nhttps://asciinema.org/a/2o4bpkbq1zfypjx62iqklo2ux\r\n\r\nThe binary used is the Lab06-02.exe from Practical Malware Analysis. It can be downloaded from https://practicalmalwareanalysis.com/labs/\r\n\r\nThanks for your great work! \r\n\r\n\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/radare/radare2/issues/comments/255604803","html_url":"https://github.com/radare/radare2/issues/1886#issuecomment-255604803","issue_url":"https://api.github.com/repos/radare/radare2/issues/1886","id":255604803,"user":{"login":"Maijin","id":1408600,"avatar_url":"https://avatars.githubusercontent.com/u/1408600?v=3","gravatar_id":"","url":"https://api.github.com/users/Maijin","html_url":"https://github.com/Maijin","followers_url":"https://api.github.com/users/Maijin/followers","following_url":"https://api.github.com/users/Maijin/following{/other_user}","gists_url":"https://api.github.com/users/Maijin/gists{/gist_id}","starred_url":"https://api.github.com/users/Maijin/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Maijin/subscriptions","organizations_url":"https://api.github.com/users/Maijin/orgs","repos_url":"https://api.github.com/users/Maijin/repos","events_url":"https://api.github.com/users/Maijin/events{/privacy}","received_events_url":"https://api.github.com/users/Maijin/received_events","type":"User","site_admin":false},"created_at":"2016-10-23T18:23:32Z","updated_at":"2016-10-23T18:23:32Z","body":"To recap it's just resolution enhancement in /c:\r\n```\r\n0x1000011a1   # 5: call 0x1000043ff\r\n```\r\n\r\nshould be:\r\n\r\n```\r\n0x1000011a1   # 5: call sym.func.1000043ff\r\n```\r\n\r\nFor example.\r\n\r\nIt's similar issue as #5698  "}}
{"actor":{"display_login":"Maijin"}}