x32dbg - Feb 5 2017
Windows 7 64bits
Description: When using snowman with a function, the final instructions is not passed to snowman sometimes.
I have a code like this:
If I select the instructions manually and use Decompile - Selection, it works well.
However, now I use Analysis - Analyze single function. x64dbg marks the whole function correctly. Then I use Decompile - Function and the last instruction RET 20 is not sent to snowman. This has an impact because snowman acts differently without that instruction. I have tried with other functions and the problem replicates (I think once I even got the INT3 after a RET 1C)
I also think the problem is that the analysis function is not accounting the parameter of RET. I suspect this is the case because when I try to fold one function with RET 20, it doesn't work - meaning that I see an animation of folding and then unfolding all in milliseconds. And when I fold a function with RET 1C, it folds and I get as the following instruction:
XXXXXXX | 1C 00 | SBB AL, 0 |
XXXXXXX | CC | INT3 |
So clear indicator.
GUI: correctly report function size to snowman (closes #1465)
Sorry, I deleted my comment almost as I posted it, when I realised I was using v 13th February, which does not include the change. I will check it again with the new version
It works, bug fixed! gj