binaryninja-api
binaryninja-api copied to clipboard
Missing Typelib for function SpInitLsaModeContext
Version and Platform (required):
- Binary Ninja Version: 5.0.7290
- Edition: Non-Commercial
- OS: Windows
- OS Version: 11
- CPU Architecture: x64
Bug Description:
While reverse engineering, the function SpInitLsaModeContext and others within the ntsecpkg.h header are not present in typelibs loaded by Binary Ninja. This is due to the fact MS are calling the function SpInitLsaModeContext but in the header file it's named SpInitLsaModeContextFn
Steps To Reproduce:
Please provide all steps required to reproduce the behavior:
- Load Kerberos.dll into Binary Ninja
- Find the function SpInitLsaModeContext
- See how the function are not redefined with its named arguments
Expected Behavior: when loading Kerberos.dll, all function within _SECPKG_FUNCTION_TABLE and their arguments under should be identified and redefined with their types and names See the struct Screenshots/Video Recording: If applicable, please add screenshots/video recording here to help explain your problem.
Binary: If applicable, please provide us with the binary to help us work with the issue faster. Here are a few options:
- Upload it privately using the Binary Ninja Portal file uploader and add the provided reference phrase here. If you are uploading malware, please put it in a password-protected ZIP archive and include the password here as well.
- Directly attach it to this issue in a ZIP archive
- Share a publicly accessible link to it (For malware samples, we do not have access to VirusTotal; Malshare is an option)
- Email it to binaryninja at vector35.com, or join our Slack and share it with us in private
- We understand sometimes it is not possible to share the binary -- sure, no worries, we can still work with it!
- If your issue is general and not related to a specific binary, then there is no need to attach the binary as well
Additional Information: Please add any other context about the problem here.