You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Yes, this is currently true and it can not be enabled by command line options. I think that ret gets translated to return no matter what was pushed to stack. We need a better dataflow analysis. I will add this to the list of problems that should be solved by the new decoder in #116. I hope I will get to work on the new decoder shortly.
It looks like RetDec cannot decompile push+ret as a jump or call. Do I need some command line options to enable it? A sample code is attached.
BTW, I guess this is not really decompilation as compilers usually do not generate push ret sequence. But it is useful to analyze obfuscated code.
The text was updated successfully, but these errors were encountered: