search

NationalSecurityAgency / ghidra

Ghidra is a software reverse engineering (SRE) framework
https://www.nsa.gov/ghidra
Apache License 2.0
50.19k stars 5.75k forks source link

vs2022 fidb #6194

Open llebout opened 6 months ago

llebout commented 6 months ago

Is your feature request related to a problem? Please describe. Decompiling some programs compiled with vs2022 results in a lot of unrecognized functions, I end up having to resort to using some custom FLIRT ApplySig script to apply some signatures found in e.g. flare-floss project to detect some vs2022 functions.

Describe the solution you'd like A vs2022 fidb file shipped with Ghidra by default

Describe alternatives you've considered I tried creating my own but wasnt able to complete it.

Additional context Add any other context or screenshots about the feature request here.

emteere commented 6 months ago

Can you please post a few of the function names you expect to be there that are missing.

llebout commented 6 months ago

Thanks for considering my request, in a sample I have, I am pretty sure one function is the std::string constructor or a variant of it like std::basic_string, I don't know for sure because C++ isnt a language I write alot in. Also there's a lot of inlined functions such as string length, but I see there is other issues about detecting inlined functions.