[DiscordArchive] this is for retrieving the function name, no?
[DiscordArchive] this is for retrieving the function name, no?
Original source
this is for retrieving the function name, no?
if this somehow is able to retrieve CC as well, i would assume this is via thos gtn_flags?
![[Image: image.png?ex=690c7176&is=690b1ff6&hm=b1a...9649027da&]](https://cdn.discordapp.com/attachments/1086807686571642900/1205996445501497354/image.png?ex=690c7176&is=690b1ff6&hm=b1ad27b75f65e8f8ecb4622fa4001da9e6cfbf78d4e894e59f01ce99649027da&)
rektbyfaith
02-10-2024, 09:59 PM #1Archived author: 4bhorrent • Posted: 2024-02-10T21:59:18.982000+00:00
Original source
this is for retrieving the function name, no?
if this somehow is able to retrieve CC as well, i would assume this is via thos gtn_flags?
Original source
but i haven't been able to find documentation about those flags yet
rektbyfaith
02-10-2024, 09:59 PM #2Archived author: 4bhorrent • Posted: 2024-02-10T21:59:32.482000+00:00
Original source
but i haven't been able to find documentation about those flags yet
Original source
use mangled flag
rektbyfaith
02-10-2024, 09:59 PM #3Archived author: robinsch • Posted: 2024-02-10T21:59:46.606000+00:00
Original source
use mangled flag
Original source
https://hex-rays.com/products/ida/suppor.../270.shtml
[Embed: IDA Help: get_name]
A powerful disassembler and a versatile debugger
https://hex-rays.com/products/ida/suppor.../270.shtml
rektbyfaith
02-10-2024, 10:00 PM #4Archived author: robinsch • Posted: 2024-02-10T22:00:23.882000+00:00
Original source
https://hex-rays.com/products/ida/suppor.../270.shtml
[Embed: IDA Help: get_name]
A powerful disassembler and a versatile debugger
https://hex-rays.com/products/ida/suppor.../270.shtml
Original source
It should give you the decompiled function definition
rektbyfaith
02-10-2024, 10:00 PM #5Archived author: robinsch • Posted: 2024-02-10T22:00:58.442000+00:00
Original source
It should give you the decompiled function definition
Original source
#define GN_DEMANGLED 0x0004 // return demangled name
demangled is what you meant, right?
rektbyfaith
02-10-2024, 10:04 PM #6Archived author: 4bhorrent • Posted: 2024-02-10T22:04:40.606000+00:00
Original source
#define GN_DEMANGLED 0x0004 // return demangled name
demangled is what you meant, right?
Original source
Yeah
rektbyfaith
02-10-2024, 10:04 PM #7Archived author: robinsch • Posted: 2024-02-10T22:04:56.192000+00:00
Original source
Yeah
Original source
```python
import idautils
import idc
for function_ea in idautils.Functions():
function_name = idc.get_name(function_ea, 0x0004)
print(hex(function_ea), function_name)
```
leads to
```
...
0x9de1c0 nullsub_154
0x9de1d0 nullsub_155
0x9de280 sub_9DE280
0x9de2a0 sub_9DE2A0
0x9de2d0 sub_9DE2D0
0x9de2f0 sub_9DE2F0
...
```
tried other flags as well, no difference.
or do i have to pass something else as arg0? thought it would have to be the function address
rektbyfaith
02-10-2024, 10:06 PM #8Archived author: 4bhorrent • Posted: 2024-02-10T22:06:20.703000+00:00
Original source
```python
import idautils
import idc
for function_ea in idautils.Functions():
function_name = idc.get_name(function_ea, 0x0004)
print(hex(function_ea), function_name)
```
leads to
```
...
0x9de1c0 nullsub_154
0x9de1d0 nullsub_155
0x9de280 sub_9DE280
0x9de2a0 sub_9DE2A0
0x9de2d0 sub_9DE2D0
0x9de2f0 sub_9DE2F0
...
```
tried other flags as well, no difference.
or do i have to pass something else as arg0? thought it would have to be the function address
Original source
Hmm, weird I was pretty sure it reported the full signature to me
rektbyfaith
02-10-2024, 10:07 PM #9Archived author: robinsch • Posted: 2024-02-10T22:07:17.308000+00:00
Original source
Hmm, weird I was pretty sure it reported the full signature to me
Original source
But it’s been a while
rektbyfaith
02-10-2024, 10:07 PM #10Archived author: robinsch • Posted: 2024-02-10T22:07:39.156000+00:00
Original source
But it’s been a while
1 Guest(s)
1 Guest(s)