Damnation Posted January 28, 2017 Posted January 28, 2017 (edited) I've run into an error with a few files using the IDA pro decompiler, I was hoping to get some help with it looking up sp-analysis failed - according to IDA pro www.hex-rays.com/products/ida/support/idadoc/1368.shtml so I need to examine the stack pointer and change it or something? any help with this? Edited January 28, 2017 by Damnation
jumper Posted January 29, 2017 Posted January 29, 2017 (edited) The subroutines sub_6161E and sub_AB1E9 are being called as if they takes no parameters. IDA seems to think they take Pascal-style parameters (modifying the stack on return). Which is it? The addresses (61662 and AB2DD) for the endp and following lines are incorrect. > "The application has been completely decompiled." Wrong. It has been disassembled. Edited January 29, 2017 by jumper
Damnation Posted February 1, 2017 Author Posted February 1, 2017 if i'm going about this right, it seems the problem starts here? stack of driverentry.txt stack of __SEH_prolog4.txt
Recommended Posts
Please sign in to comment
You will be able to leave a comment after signing in
Sign In Now