{"action":"opened","issue":{"url":"https://api.github.com/repos/radare/radare2/issues/12273","repository_url":"https://api.github.com/repos/radare/radare2","labels_url":"https://api.github.com/repos/radare/radare2/issues/12273/labels{/name}","comments_url":"https://api.github.com/repos/radare/radare2/issues/12273/comments","events_url":"https://api.github.com/repos/radare/radare2/issues/12273/events","html_url":"https://github.com/radare/radare2/issues/12273","id":383510310,"node_id":"MDU6SXNzdWUzODM1MTAzMTA=","number":12273,"title":"Fails to create a function at program's entry point","user":{"login":"ITAYC0HEN","id":20182642,"node_id":"MDQ6VXNlcjIwMTgyNjQy","avatar_url":"https://avatars0.githubusercontent.com/u/20182642?v=4","gravatar_id":"","url":"https://api.github.com/users/ITAYC0HEN","html_url":"https://github.com/ITAYC0HEN","followers_url":"https://api.github.com/users/ITAYC0HEN/followers","following_url":"https://api.github.com/users/ITAYC0HEN/following{/other_user}","gists_url":"https://api.github.com/users/ITAYC0HEN/gists{/gist_id}","starred_url":"https://api.github.com/users/ITAYC0HEN/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ITAYC0HEN/subscriptions","organizations_url":"https://api.github.com/users/ITAYC0HEN/orgs","repos_url":"https://api.github.com/users/ITAYC0HEN/repos","events_url":"https://api.github.com/users/ITAYC0HEN/events{/privacy}","received_events_url":"https://api.github.com/users/ITAYC0HEN/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-11-22T12:15:56Z","updated_at":"2018-11-22T12:15:56Z","closed_at":null,"author_association":"CONTRIBUTOR","body":"\r\n### Work environment\r\n\r\n| Questions                                            | Answers\r\n|------------------------------------------------------|--------------------\r\n| OS/arch/bits (mandatory)                             | Arch x64, Windows 10 x64\r\n| File format of the file you reverse (mandatory)      | PE\r\n| Architecture/bits of the file (mandatory)            | x86/x64\r\n| r2 -v full output, **not truncated** (mandatory)     | radare2 3.0.0-git 19660 @ linux-x86-64 git.2.9.0-321-ga38a3bd01  commit: a38a3bd01191de5c91e69ee492f4387dca09a03e build: 2018-11-22__12:08:29\r\n\r\n### Expected behavior\r\nradare2 should succeed with making a function in the program's entry point it detected.\r\n\r\n### Actual behavior\r\n\r\nAlthough radare2 detects the entrypoint, it fails to make a function out of it. It also fails to create a function when manually executing `af @ entry0`.\r\n\r\n\r\n### Steps to reproduce the behavior \r\n - Open the binary in radare2\r\n - Analyze the binary\r\n - Execute `f~entry0` and see the entrypoint detected. \r\n - Execute `afl` and see that radare2 failed to detect functions\r\n - Try to manually define a function using `af @ entry0`. This will fail as well\r\n\r\n[EsetCrackme2015.zip](https://github.com/radare/radare2/files/2608015/EsetCrackme2015.zip)\r\n\r\n```\r\n$ r2 EsetCrackme2015.dll \r\n[0x10000226]> aa\r\n[Cannot find function 'entry0' at 0x10000226 entry0 (aa)\r\n[x] Analyze all flags starting with sym. and entry0 (aa)\r\n\r\n[0x10000226]> f~entry0\r\n0x10000226 1 entry0\r\n\r\n[0x10000226]> afl\r\n[0x10000226]> \r\n[0x10000226]> af @ entry0\r\n[0x10000226]> afl\r\n[0x10000226]> \r\n```\r\n\r\n\r\n### Additional Logs, screenshots, source-code,  configuration dump, ...\r\nIDA is able to recognize this function:\r\n![image](https://user-images.githubusercontent.com/20182642/48902347-fb964300-ee60-11e8-8aef-05e98892dcb3.png)\r\n\r\n"}}
{"actor":{"display_login":"ITAYC0HEN"}}