Closed lab313ru closed 4 years ago
I agree - current stuff labels lots of SDK functions incorrectly compared to IDA
it's wrong. Ghidra does it more precisely, so not so much functions will be named. IDA sometimes names wrong functions as library ones, but covers more functions.
Returned to FLAIR again: d4f1e345a9d2851b2f980d80547387fc1fff6554
For now FunctionID doesn't meet my requirements: xrefs, small functions (like BIOS calls - it requires modifying GHIDRA source code). So, I think it will be some custom format (similar to PAT). PAT: Yes I know, it was here already, but signs were generated by Flair utilities, and they're not full.