-
Notifications
You must be signed in to change notification settings - Fork 225
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
"Still Unknown" when decompiling #73
Comments
Hi. I can help you if you send me the file and describe your problem.
ср, 25 мая 2022 г., 20:16 Charlie Jiang ***@***.***>:
… I'm trying to decompile a huge procedure. At first, IDR complains
prototypes of some other procedures are missing, so I manually added some.
After that, when I click "Src" button, the decompiler stops midway and
shows: "Decompile->Try->Decompile->Try->Still Unknown". The cursor stops on
a jne instruction.
Do you have any clues to work around this, or give the decompile some help
manually to let it go ahead? Thanks in advance.
—
Reply to this email directly, view it on GitHub
<#73>, or unsubscribe
<https://github.com/notifications/unsubscribe-auth/AEDYZMIFKQZ3YCPONUQJVIDVLZN75ANCNFSM5W52NC6A>
.
You are receiving this because you are subscribed to this thread.Message
ID: ***@***.***>
|
Hi & thanks for the reply. Sadly it's rather difficult for me to send the file (some internal thing). Would you mind telling me that, under what situation will the "Still Unknown" exception be thrown? I've dug into the code and found that the situation is more like a "default:" case. But I have no idea why all Whatever, I worked around it by directly analyzing the assembly code (Thanks for the powerful disassembler and analyzer!). |
Hi again. Exception "stilunknown" means that situation is really unknown.
But more precisely i can answer if i have the file. In your situation i can
propose you variant with using IDA. You can generate c-header and load it
to IDA. It will require some manual editing to load it without errors. If
you will in trouble, i can help.
чт, 26 мая 2022 г., 12:57 Charlie Jiang ***@***.***>:
… Hi & thanks for the reply.
Sadly it's rather difficult for me to send the file (some internal thing).
Would you mind telling me that, under what situation will the "Still
Unknown" exception be thrown? I've dug into the code and found that the
situation is more like a "default:" case. But I have no idea why all if-conditions
above failed to match.
Whatever, I worked around it by directly analyzing the assembly code
(Thanks for the powerful disassembler and analyzer!).
—
Reply to this email directly, view it on GitHub
<#73 (comment)>, or
unsubscribe
<https://github.com/notifications/unsubscribe-auth/AEDYZMK3DXFVUBGAHV7H76TVL5DIVANCNFSM5W52NC6A>
.
You are receiving this because you commented.Message ID:
***@***.***>
|
I'm trying to decompile a huge procedure. At first, IDR complains prototypes of some other procedures are missing, so I manually added some. After that, when I click "Src" button, the decompiler stops midway and shows: "Decompile->Try->Decompile->Try->Still Unknown". The cursor stops on a
jne
instruction.Do you have any clues to work around this, or give the decompile some help manually to let it go ahead? Thanks in advance.
The text was updated successfully, but these errors were encountered: