Color me impressed with Ghidra. Just stuff like this alone is worth it over IDA. No more fumbling over getting function prototype syntax just right to IDA's liking.pic.twitter.com/MQfprAfOuK
Show this thread
-
Hah, figures it had to be in there somewhere. Honestly it should just do this by default, but I'm cool with middle mouse.https://twitter.com/0Ekho/status/1103191269029736448 …
Show this thread
The dark theme is... questionable, mostly because Java. It makes the menu bar unreadable. Oh well, I guess I can live with a light theme for now. Someone will probably get annoyed enough to fix this at some point.
-
-
Ah, this is a bit sad. It doesn't know that __chkesp() does not touch ST0, which breaks dataflow analysis of float return values. I can't find a sane way to override it that doesn't involve declaring it as taking a float and returning a float, which would affect *every* call.pic.twitter.com/3IQPnlWFKE
Show this thread -
I wonder if there's a way of customizing clobbers... if it knew __chkesp() does not clobber ST0 it would work. I can make it take an arg at ST0 and return in ST0 and at least get the dataflow, but then that gunks up every function that *doesn't* return a float...
Show this thread -
Fixed it. You can define your own calling conventions easily enough by editing Ghidra/Processors/x86/data/languages/x86win.cspec. I just defined a __fastcall_nofloat that doesn't kill float regs, and it works now.pic.twitter.com/FbwgyQ4dqC
Show this thread
End of conversation
New conversation -
-
-
kinda miss the solaris nimbus theme
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.