avast / avast/retdec

does not decompile code in specified range

Open
#1,050 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
C++
Stars
8.6k
Forks
1k
PR merge metrics
No merged PRs in 30d

Description

I tried to decompile an old windows music player and the functions that I am interested in are in the address area around 0x406000. When looking at the code using IDA, Cutter or Ghidra, there is program code starting from 0x401000 up to 0x420000 (and above).

But for some reason, the first function retdec detects is at 0x41419a, i.e. completely ignoring the range below and thereby all the relevant code actually present in the test case. Using the "-k" argument or even specifically asking for the range does not seem to help.

Am I too dumb or is the tool broken?

Contributor guide

No contributing guide indexed for this repository

Research direction

No repository files, tests, or reproducible input are named. Start by reproducing the report with the specified address range and the -k argument, then trace RetDec's range handling and compare the detected functions with the 0x401000–0x420000 region; done means code in the requested range is decompiled or the limitation is documented.

Written by the indexing model from the issue text.

Assessment

Tech stack
cpp
Domain
reverse-engineering
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.