You can map them to hotkeys though. I could get used to this workflow, but it's too strict (e.g. doesn't work for globals). I just want a dumb "highlight all the same symbol/text" thing...
-
Show this thread
-
Very cool that it has this "project" concept with a bunch of associated files, and you can link them together (e.g. follow refs from one DLL to another).pic.twitter.com/4H9itAtJ8V
1 reply 0 retweets 8 likesShow this thread -
And it's not just an ugly hack that loads another file; the history is seamless, you can go back to where you came from. Cool.
1 reply 0 retweets 6 likesShow this thread -
All the keybindings are configurable, and some of the defaults are just dumb (this used to be Ctrl-Shift-F), so let's fix that.pic.twitter.com/BAAoSaWDVc
2 replies 1 retweet 9 likesShow this thread -
Hector Martin Retweeted Ekho
Hah, figures it had to be in there somewhere. Honestly it should just do this by default, but I'm cool with middle mouse.https://twitter.com/0Ekho/status/1103191269029736448 …
Hector Martin added,
2 replies 0 retweets 10 likesShow this thread -
The dark theme is... questionable, mostly because Java. It makes the menu bar unreadable. Oh well, I guess I can live with a light theme for now. Someone will probably get annoyed enough to fix this at some point.
2 replies 0 retweets 11 likesShow this thread -
Ah, this is a bit sad. It doesn't know that __chkesp() does not touch ST0, which breaks dataflow analysis of float return values. I can't find a sane way to override it that doesn't involve declaring it as taking a float and returning a float, which would affect *every* call.pic.twitter.com/3IQPnlWFKE
1 reply 1 retweet 6 likesShow this thread -
I wonder if there's a way of customizing clobbers... if it knew __chkesp() does not clobber ST0 it would work. I can make it take an arg at ST0 and return in ST0 and at least get the dataflow, but then that gunks up every function that *doesn't* return a float...
3 replies 0 retweets 7 likesShow this thread -
Fixed it. You can define your own calling conventions easily enough by editing Ghidra/Processors/x86/data/languages/x86win.cspec. I just defined a __fastcall_nofloat that doesn't kill float regs, and it works now.pic.twitter.com/FbwgyQ4dqC
3 replies 5 retweets 39 likesShow this thread -
Replying to @marcan42
What's the link between __checkesp and __fastcall_nofloat ?
1 reply 0 retweets 0 likes
You just go to Edit Function Signature on __checkesp and set it to __fastcall_nofloat (after adding that XML to the config file, it's just a copy of __fastcall with all mentions of ST0 removed).
-
-
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.