Closed nitrogar closed 1 year ago
Related to https://github.com/Vector35/binaryninja-api/issues/4511.
The problem is BN thinks the function memcpy uses register ebp
as its return value, which is wrong. Can you try unchekcing the ebp
checkbox in the Cloberred Registers
list in the Edit Function Properties
dialog of the memcpy function?
thanks, after removing ebp from the clobbered registers the analysis was corrected.
Version and Platform (required):
Bug Description: while reversing windows x86 binary i noticed that, binja enforce the usage of return value as shown in the pictures below
eax was discarded but binja enforce it which corrupt the rest of the analysis.
Expected Behavior: after NOPing the function call, the analysis become correct as shown.
Additional Information: Sorry i cant provide the binary ;)