[DiscordArchive] this is for retrieving the function name, no?
[DiscordArchive] this is for retrieving the function name, no?
Original source
i have seen quite a lot of __usercall and __userpurge.
those are functions which depart from conventions and can therefore not be assigned i assume... raw ASM maybe?
rektbyfaith
02-10-2024, 10:40 PM #21Archived author: 4bhorrent • Posted: 2024-02-10T22:40:54.700000+00:00
Original source
i have seen quite a lot of __usercall and __userpurge.
those are functions which depart from conventions and can therefore not be assigned i assume... raw ASM maybe?
Original source
Yes, e.g inlined
rektbyfaith
02-10-2024, 10:41 PM #22Archived author: robinsch • Posted: 2024-02-10T22:41:47.563000+00:00
Original source
Yes, e.g inlined
Original source
check if it has a call instruction
rektbyfaith
02-10-2024, 10:42 PM #23Archived author: robinsch • Posted: 2024-02-10T22:42:27.430000+00:00
Original source
check if it has a call instruction
Original source
If it has then IDA might not have figured it out correctly
rektbyfaith
02-10-2024, 10:42 PM #24Archived author: robinsch • Posted: 2024-02-10T22:42:52.409000+00:00
Original source
If it has then IDA might not have figured it out correctly
Original source
then there's the 0.01% times where hexrays generates the weirdest pseudocode.
In this case for me it just decided to ignore that there's a function call there
![[Image: image.png?ex=690c7e59&is=690b2cd9&hm=272...a3f807422&]](https://cdn.discordapp.com/attachments/1086807686571642900/1206010280354652200/image.png?ex=690c7e59&is=690b2cd9&hm=272da79ead23f3dd38f23af7a671854c741816be04d0346afce4c5da3f807422&)
rektbyfaith
02-10-2024, 10:54 PM #25Archived author: balake • Posted: 2024-02-10T22:54:17.471000+00:00
Original source
then there's the 0.01% times where hexrays generates the weirdest pseudocode.
In this case for me it just decided to ignore that there's a function call there
Original source
is this 335a?
rektbyfaith
02-10-2024, 10:56 PM #26Archived author: 4bhorrent • Posted: 2024-02-10T22:56:13.074000+00:00
Original source
is this 335a?
Original source
1.12.1
rektbyfaith
02-10-2024, 10:56 PM #27Archived author: balake • Posted: 2024-02-10T22:56:34.648000+00:00
Original source
1.12.1
1 Guest(s)
1 Guest(s)