Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Pseudocode incorrect if not using "undo last patching" option of keypath. #91

Open
Uzver123 opened this issue Jul 19, 2024 · 0 comments

Comments

@Uzver123
Copy link

Uzver123 commented Jul 19, 2024

For for ARM64 if simply open Patched bytes window and delete multiple patches then sometimes pseudocode is not restoring back properly, however if using keypatch > undo last patching option then pseudocode restores to original state.

Another issue there might be multiple changes to assembly instructions using keypatch and undo last patching only remembers last one.

Only one workaround so far since keypatch comment remains next to the changed assembler instruction on deleting the patch from Patched bytes window - can change that instruction again to anything like NOP and use keypatch > undo last patching command then keypatch changes get properly removed and pseudocode can be restored properly to original state.

Ida Pro v8.4

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant