IDR
IDR copied to clipboard
crypto2011
"Still Unknown" when decompiling
I'm trying to decompile a huge procedure. At first, IDR complains prototypes of some other procedures are missing, so I manually added some. After that, when I click "Src" button, the decompiler stops midway and shows: "Decompile->Try->Decompile->Try->Still Unknown". The cursor stops on a jne instruction.
Do you have any clues to work around this, or give the decompile some help manually to let it go ahead? Thanks in advance.
Hi. I can help you if you send me the file and describe your problem.
ср, 25 мая 2022 г., 20:16 Charlie Jiang @.***>:
I'm trying to decompile a huge procedure. At first, IDR complains prototypes of some other procedures are missing, so I manually added some. After that, when I click "Src" button, the decompiler stops midway and shows: "Decompile->Try->Decompile->Try->Still Unknown". The cursor stops on a jne instruction.
Do you have any clues to work around this, or give the decompile some help manually to let it go ahead? Thanks in advance.
— Reply to this email directly, view it on GitHub https://github.com/crypto2011/IDR/issues/73, or unsubscribe https://github.com/notifications/unsubscribe-auth/AEDYZMIFKQZ3YCPONUQJVIDVLZN75ANCNFSM5W52NC6A . You are receiving this because you are subscribed to this thread.Message ID: @.***>
Hi & thanks for the reply.
Sadly it's rather difficult for me to send the file (some internal thing). Would you mind telling me that, under what situation will the "Still Unknown" exception be thrown? I've dug into the code and found that the situation is more like a "default:" case. But I have no idea why all if-conditions above failed to match.
Whatever, I worked around it by directly analyzing the assembly code (Thanks for the powerful disassembler and analyzer!).
Hi again. Exception "stilunknown" means that situation is really unknown. But more precisely i can answer if i have the file. In your situation i can propose you variant with using IDA. You can generate c-header and load it to IDA. It will require some manual editing to load it without errors. If you will in trouble, i can help.
чт, 26 мая 2022 г., 12:57 Charlie Jiang @.***>:
Hi & thanks for the reply.
Sadly it's rather difficult for me to send the file (some internal thing). Would you mind telling me that, under what situation will the "Still Unknown" exception be thrown? I've dug into the code and found that the situation is more like a "default:" case. But I have no idea why all if-conditions above failed to match.
Whatever, I worked around it by directly analyzing the assembly code (Thanks for the powerful disassembler and analyzer!).
— Reply to this email directly, view it on GitHub https://github.com/crypto2011/IDR/issues/73#issuecomment-1138364025, or unsubscribe https://github.com/notifications/unsubscribe-auth/AEDYZMK3DXFVUBGAHV7H76TVL5DIVANCNFSM5W52NC6A . You are receiving this because you commented.Message ID: @.***>