- Basic blocks are broken on calls, unlike IDA
- Pruned path are quite useless
- Lots of pathgroup init parameters
- Analysis techniques and heuristics used in CFGFast (there is a TODO already)
- What is:
- a VFG ?
- CFGAccurate: cfg.get_lbe_exits() may be broken