Anyone has experience with #ghidra enough to tell me whether `(ulonglong)*(uint7 *)(message + 0xb) << 8;` is doing byte-swapping or not? I can't read the assembly clearly enough to understand it right now, and it won't ever compile.
You really should reference the asm in these cases; if decompiler output is obscure that might be a sign it might be wrong. Ghidra is quite intended to be used with the assembly side by side (unlike Hex-Rays).
-
-
Yeah the problem with that is trying to figure out what's going on with it :( It seems to be mixing up this piece with the argument stacking for an unrelated call. I'll try to make more sense of it in a moment.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.