binaryninja-api icon indicating copy to clipboard operation
binaryninja-api copied to clipboard
verified publisher icon Vector35

Occasionally incorrect calling convention when working on PE files

Open crimsonskylark opened this issue 3 weeks ago • 3 comments

Version and Platform (required):

  • Binary Ninja Version: 5.3.8625-dev
  • Edition: Non-Commercial
  • OS: Manjaro Linux
  • OS Version: 25.0.10
  • CPU Architecture: x64

Bug Description: BinaryNinja will sometimes assign the sysv calling convention when working on PE64 files.

Steps To Reproduce: Please provide all steps required to reproduce the behavior:

  1. Go to HvcallInitiateHypercall
  2. Calling convention is set to sysv after analysis

Expected Behavior: The win64 calling convention should always be used for PE64. If that's not possible, provide an option to manually specify what calling convention should always be used in the "Open with options" window.

Screenshots/Video Recording:

Image

Binary: metro horizon retries beautifully

Additional Information: Unsure if this is a duplicate. I searched both open and closed issues but if it is feel free to close.

crimsonskylark avatar Nov 19 '25 15:11 crimsonskylark