Hot answers tagged

3

Press t and it should be in the expanded view for the generic lib.


2

OK I think i finally figured it out in that there is a partial code relocation routine in the uboot blob that copies a small part of it to another area of memory, with a different alignment. This is called from the startup code of uboot before we get going. Init function of this additional code called, though in execution looks like elements of both code ...


2

Take a look at x64dbgida, this is a plugin for IDA Pro.


2

The first one sounds like a bug. First, update to 7.6 to see if the issue has been fixed there. If it hasn't, use Help->Report a bug or an issue to send the database to Hex-Rays so they can diagnose the issue. You're not going to get any sort of bug fix for 7.5 after 7.6 has been released. As for the second one, no. Autoanalysis is currently still single-...


1

You can see the progress in the colorful thing on top the orange arrow shows how far it got. yellow arrow shows which part of the code you are viewing. 100% when the orange arrow reaches the end of the blue colorful block grey colorful thing shows strings. red colorful stuff shows functions not yet made into functions


1

If Hex-Rays had a way to remove all goto statements in the decompilation, then it simply would not generate goto statements in the first place. There is no option to do what you are asking.


1

The functionality you mentioned is Max commas. . Edit > Plugins > Hex-ray decompiler > Options > Max commas (default is 8). Decrease value: Hexray uses "goto" statement instead of conditions inside single "if" statement. Increase: Hexray uses "if" statement instead of nested "goto" statement. However, ...


Only top voted, non community-wiki answers of a minimum length are eligible