Vincent
Vincent
> ```go > mid := low + (high-low)>>1 > ``` `+`优先级高于`>>`,上面这句等价于 ```go mid := (low + (high - low)) >> 1 ``` 貌似应改成 ```go mid := low + ((high -...
@ghidra1 Hi, same question here. Three MOV instructions, the first and third do make sense. Why should the type of ECX of the second instruction be READ_WRITE? Three MOV instructions...
@ghidra1 Hi, below is what I get: ``` address: 00402bf0 Operand #0: ECX refType: READ_WRITE type: 0x00000200 (REGISTER) Operand #1: [EAX] refType: READ type: 0x00400000 (DYNAMIC) ``` Sorry, currently I...
@ghidra1 Hi, I finally found one case. Could you please try [npp.6.2.3.Installer.exe](https://notepad-plus-plus.org/downloads/v6.2.3/)? For import and analysis, please all use the default options (I am running Ghidra 10.1.5 on Win 11,...
@ghidra1 Hi, I got the same hash for `x86.sla`: ``` # MD5 2ba79faa211131dd14686b656708b491 # SHA256 55ee3464fcad4e41931336b0293707f2beef57ed2fff0e659725475855690c60 ```
@ghidra1 This problem is really weird and hard to reproduce. After testing again and again, I found that sometimes the refType is `READ_WRITE`, and sometimes it is `WRITE`.
@ghidra1 Hi, still the [npp.6.2.3.Installer.exe](https://notepad-plus-plus.org/downloads/v6.2.3/), please check all the instructions below. I do not think they are right. ```bash GenerateDotGraphScript.java> Running... GenerateDotGraphScript.java> 00407320 MOV EDI,dword ptr [ESI + 0x9bb4] GenerateDotGraphScript.java>...
@ghidra1 That's weird. I just rebooted my PC, then created a brand-new project, then imported the npp executable file, then did the automatical analysis, finally ran the script, and got...
Could you please do a similar condition check as shown below for any 32-bit executable files? ```java if ("READ_WRITE".equals(operandType.toString()) && "MOV".equals(mnemonic) && !instruction.getDefaultOperandRepresentation(1).contains(operand)) { println(address + " " + instruction);...
Same problem with only `gitsigns` enabled in `lazy.nvim`. ```lua require("lazy").setup({ spec = { { import = "plugins.gitsigns" }, }, -- other configs -- }) ``` Then modify any file, and...