Damnation Posted January 28, 2017 Share Posted January 28, 2017 (edited) I've run into an error with a few files using the IDA pro decompiler, I was hoping to get some help with it looking up sp-analysis failed - according to IDA pro www.hex-rays.com/products/ida/support/idadoc/1368.shtml so I need to examine the stack pointer and change it or something? any help with this? Edited January 28, 2017 by Damnation Link to comment Share on other sites More sharing options...
jumper Posted January 29, 2017 Share Posted January 29, 2017 (edited) The subroutines sub_6161E and sub_AB1E9 are being called as if they takes no parameters. IDA seems to think they take Pascal-style parameters (modifying the stack on return). Which is it? The addresses (61662 and AB2DD) for the endp and following lines are incorrect. > "The application has been completely decompiled." Wrong. It has been disassembled. Edited January 29, 2017 by jumper Link to comment Share on other sites More sharing options...
Damnation Posted February 1, 2017 Author Share Posted February 1, 2017 if i'm going about this right, it seems the problem starts here? stack of driverentry.txt stack of __SEH_prolog4.txt Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now