A jump table that appears to end just before the given address.

A value that appears in the program text.

Function labeled no return

Function may retun

A call with the current register values and location to return to or Nothing if this is a tail call.

Note that the semantics of this instruction assume that the program has already stored the return address in the appropriate location (which depends on the ABI). For example on X86_64 this is the top of the stack while on ARM this is the link register.

PLTStub regs addr sym symVer denotes a terminal statement that has been identified as a PLT stub for jumping to the given symbol (with optional version information).

This is a special case of a tail call. It has been added separately because it occurs frequently in dynamically linked code, and we can use this to recognize PLT stubs.

The first argument maps registers that were changed to their value. Other registers have the initial value. This should typically be empty on X86_64 PLT stubs.

The second argument is the address in the .GOT that the target function is stored at. The PLT stub sets the PC to the address stored here.

The third and fourth arguments are used to resolve where the function should jump to.

A jump to an explicit address within a function.

ParsedBranch regs cond trueAddr falseAddr represents a conditional branch that jumps to trueAddr if cond is true and falseAddr otherwise.

The value assigned to the IP in regs should reflect this if-then-else structure.

A lookup table that branches to one of a vector of addresses.

The registers store the registers, the value contains the index to jump to, and the possible addresses as a table. If the index (when interpreted as an unsigned number) is larger than the number of entries in the vector, then the result is undefined.

A return with the given registers.

An architecture-specific statement with the registers prior to execution, and the given next control flow address.

An error occured in translating the block

The classifier failed to identity the block. Includes registers with list of reasons for each classifer to fail

AbsoluteJumpTable r describes a jump table where the jump target is directly stored in the array read r.

RelativeJumpTable base read ext describes information about a jump table where all jump targets are relative to a fixed base address.

The value is computed as baseVal + readVal where

baseVal = fromMaybe 0 base, readVal is the value stored at the memory read described by read with the sign of ext.

Exploring because code at the given block writes it to memory.

Exploring because address terminates with a call that jumps here.

Identified as an entry point from initial information

A code pointer that was stored at the given address.

The user requested that we analyze this address as a function.

Exploring because the given block jumps here.

Identified as an entry point from initial information

Added because the address split this block after it had been disassembled. Also includes the reason we thought the block should be there before we split it.