Vector35 / binaryninja-api

Public API, examples, documentation and issues for Binary Ninja
https://binary.ninja/
MIT License
927 stars 209 forks source link

Tail call failed #3934

Closed op2786 closed 1 year ago

op2786 commented 1 year ago

Binary Ninja Version: 3.4.4090-dev Platform: Windows 11 Version 22H2

Prototype of the function that made tail call:

int64_t sub_163D3D00(int64_t arg1, int64_t arg2, int64_t arg3)

Disassembly of the function that made tail call:

163d3d00  mov     rax, qword [rel callui]
163d3d07  mov     ecx, 1099
163d3d0c  jmp     qword [rax]

HLIL:

163d3d0c  jump(*callui)

IDA:

return callui(1099, a2, a3);

Interestingly, that function call is problematic in other places too.

Example:

163d3ebf  (*callui)(0x18, 2, format, &arg_10)

Prototype of callui:

int64_t callui(enum ui_notification_t, ...)

I can share the binary in slack.

plafosse commented 1 year ago

Duplicate of https://github.com/Vector35/binaryninja-api/issues/1060