Skip to content

Pseudocode incorrect if not using "undo last patching" option of keypath. #91

Open
@Uzver123

Description

@Uzver123

For for ARM64 if simply open Patched bytes window and delete multiple patches then sometimes pseudocode is not restoring back properly, however if using keypatch > undo last patching option then pseudocode restores to original state.

Another issue there might be multiple changes to assembly instructions using keypatch and undo last patching only remembers last one.

Only one workaround so far since keypatch comment remains next to the changed assembler instruction on deleting the patch from Patched bytes window - can change that instruction again to anything like NOP and use keypatch > undo last patching command then keypatch changes get properly removed and pseudocode can be restored properly to original state.

Ida Pro v8.4

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions