[DiscordArchive] i don't yet fully understand how (if even possible) i can find out the ObjectName of those extra fun
[DiscordArchive] i don't yet fully understand how (if even possible) i can find out the ObjectName of those extra fun
Archived author: 4bhorrent • Posted: 2024-02-13T00:36:11.891000+00:00
Original source
(and both 0.5.3 + 4.1.0 repos show the FrameScript_Object_FillScriptMethodTable as void... and at least the 0.5.3 with all it's debug symbols i would believe ^^)
Archived author: Nix • Posted: 2024-02-13T00:36:12.520000+00:00
Original source
but function a itself may not at all return anything, but now when you analyze eax is set
Archived author: Nix • Posted: 2024-02-13T00:36:28.090000+00:00
Original source
and so it looks as if the function returns something
Archived author: Nix • Posted: 2024-02-13T00:36:53.567000+00:00
Original source
and then the question is, does the caller simply not use the result or does the function really not return
Archived author: Nix • Posted: 2024-02-13T00:40:01.926000+00:00
Original source
Eax is the default return register in x86, so if it is occupied, you technically are returning a value, even if it is unused/discarded by the caller
Archived author: 4bhorrent • Posted: 2024-02-13T00:40:54.105000+00:00
Original source
i mean i know that usually stuff is returned in EAX, ... problem is that i already have seen horrible things with custom return registers etc XD
Archived author: Nix • Posted: 2024-02-13T00:41:22.771000+00:00
Original source
You can just inspect the asm for the return
Archived author: 4bhorrent • Posted: 2024-02-13T00:41:25.291000+00:00
Original source
so i am a bit unsure if they returned stuff in eax, or they simply used it for working and have void as return...
Archived author: Nix • Posted: 2024-02-13T00:41:30.187000+00:00
Original source
If lua says it is void
Archived author: Nix • Posted: 2024-02-13T00:41:34.516000+00:00
Original source
IDA just got it confused due to the above I'd imagine