0

Hi I am sort of new to ida pro even though I've used a lot but when I push a function where a 0 used to be it gives me sp-analysis failure enter image description here

I've searched for a fix for a while to no avail help would be much appreciated.

2 Answers 2

0

Turn on bytes. You'll see you don't have enough space. You're going to have to figure out where to steal some. Wherever that is, via jump short, you need a couple more bytes.

2
0

The problem is that you are changing 2 bytes instruction push 0 into push offset which is 5 bytes instruction. So you overwrite subsequent instruction’s prefix and that’s why sp analysis fails (push offset Studio_done changed to db 0 and pop, so you have pop instead of push).

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.