search

avast / retdec

RetDec is a retargetable machine-code decompiler based on LLVM.
https://retdec.com/
MIT License
7.96k stars 940 forks source link

Cannot determine endianess #1119

Open anon767 opened 1 year ago

anon767 commented 1 year ago

Hi,

I have the same problem as described here: https://github.com/avast/retdec/issues/722

Problem

Trying to decompile a sample with every possible architecture (-a) and endianess (-e) combination explicitly set always returns 

Error: Cannot determine endiannesss.

Analyzing the same sample using the docker build yields:

No matching plugins found for 'Microsoft Linker 10.0'
No matching plugins found for 'Microsoft'
No matching plugins found for 'MSVC'
Running phase: Initialization ( 0.19s )
Running phase: Providers initialization ( 0.20s )
Error: Missing basic info about input file -> there can be no decompilation

Is there a restriction or requirement on the PE files that I am violating?

PeterMatula commented 1 year ago

Looks like the file is damaged, invalid, or something like that. It is hard to help without the file itself. If you can share it, feel free to upload it here. If you cannot, it would be interesting to at least see what some other analysis tools think about it. What format is it? Can e.g. objdump -x handle it?