deca icon indicating copy to clipboard operation
deca copied to clipboard

Published 20 hours ago • verified publisher icon kk49

search for unknown ADF types in EXE without ADF header.

Open kk49 opened this issue 5 years ago • 1 comments

Use type id, and expected ADF type structure

kk49 avatar Jan 12 '20 19:01 kk49

These may not exist, they may have generated code. Missing ADF type hashes seem to appear once in GenZero exe. Look at ghidra results to see if they have special parsing functions... Maybe pull out the functions and rebuild with llvmlite, and call from deca?

kk49 avatar Feb 03 '20 18:02 kk49