Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Decompilation of object or rebased files #15

Open
PeterMatula opened this issue Jan 29, 2018 · 0 comments
Open

Decompilation of object or rebased files #15

PeterMatula opened this issue Jan 29, 2018 · 0 comments
Assignees

Comments

@PeterMatula
Copy link
Collaborator

Decompilation via RetDec idaplugin gets into troubles if IDA has the file mapped on a different address than RetDec. In such a case, all metadata that come from IDA in config database are wrong when applied on image loaded by RetDec's image loader library.

This happens for object files. E.g. hello.zip, where IDA has main() on address 0x8000000 and RetDec has it on 0x34.

The same thing happens if user makes a rebase in IDA. E.g. here mytest.zip, main() is at 0x8900180, but in IDA, we can do Edit→Segments→Rebase program to 0x1000000 and run decompilation.

Solution: Probably get segments mappings from IDA and apply them in RetDec. This might be tricky, since RetDec libraries are probably not ready for it.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant