If you see that the stack pointer values are incorrect, modify them with the Alt-K (Edit, Functions, Change stack pointer) command in IDA. Functions behaving so strangely can not be decompiled. The error description told me to refer to official IDA Pro documentation, but it wasn’t of much help: The stack pointer at the specified address is higher than the initial stack pointer. This time, however, I've stumbled on this error: SOMEADDR: positive sp value has been found I am not proficient in software reverse engineering, so when I'm doing such stuff in IDA Pro, I mostly poke with Hex-Rays decompiler output.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |