Support parsing of .gfids section for PE

Open seekbytes opened this issue 1 year ago • 0 comments

Gfids (Control Flow Guard metadata) contains some tables that might be helpful for recovering functions. Supporting them could be helpful for adding more context to the analysis.

Some links:

http://llvm-cs.pcc.me.uk/tools/lld/COFF/Writer.cpp#1572
https://learn.microsoft.com/en-us/windows/win32/secbp/pe-metadata

Jun 21 '24 08:06 seekbytes