Support parsing of .gfids section for PE

Vector35 / binaryninja-api

Public API, examples, documentation and issues for Binary Ninja

https://binary.ninja/

MIT License

893 stars 199 forks source link

Support parsing of .gfids section for PE #5651

Open seekbytes opened 2 months ago

seekbytes commented 2 months ago

Gfids (Control Flow Guard metadata) contains some tables that might be helpful for recovering functions. Supporting them could be helpful for adding more context to the analysis.

Some links:

http://llvm-cs.pcc.me.uk/tools/lld/COFF/Writer.cpp#1572
https://learn.microsoft.com/en-us/windows/win32/secbp/pe-metadata

xusheng6 commented 2 months ago

Related to #5287