[DiscordArchive] i don't yet fully understand how (if even possible) i can find out the ObjectName of those extra fun
[DiscordArchive] i don't yet fully understand how (if even possible) i can find out the ObjectName of those extra fun
Original source
i don't yet fully understand how (if even possible) i can find out the ObjectName of those extra functions.
i know that there is `FUN_004a79b0` which is called a lot and loops over arrays of FrameScript_Method (and that method itself calls `FrameScript_Object__FillScriptMethodTable` + some more nested calls).
is there a string with the object name i can get somehow, which is related to the vftable?
rektbyfaith
02-13-2024, 12:27 AM #1Archived author: 4bhorrent • Posted: 2024-02-13T00:27:51.268000+00:00
Original source
i don't yet fully understand how (if even possible) i can find out the ObjectName of those extra functions.
i know that there is `FUN_004a79b0` which is called a lot and loops over arrays of FrameScript_Method (and that method itself calls `FrameScript_Object__FillScriptMethodTable` + some more nested calls).
is there a string with the object name i can get somehow, which is related to the vftable?
Original source
also i have weirdly enough some discrepancy between the ghidra and ida repo.
(`sub_84E8D0` is the `lua_settable` call)
![[Image: image.png?ex=690c951c&is=690b439c&hm=a0d...d31b66784&]](https://cdn.discordapp.com/attachments/1086807686571642900/1206759497150758933/image.png?ex=690c951c&is=690b439c&hm=a0d12559be06dd07f94a0c2994f0537c964df8ea039fcdee1b2e757d31b66784&)
![[Image: image.png?ex=690c951c&is=690b439c&hm=06d...d5703d071&]](https://cdn.discordapp.com/attachments/1086807686571642900/1206759497461145660/image.png?ex=690c951c&is=690b439c&hm=06d9a81c6c7f0c99428a4ca6d783ccebae58e3ffbf3055625a46835d5703d071&)
rektbyfaith
02-13-2024, 12:31 AM #2Archived author: 4bhorrent • Posted: 2024-02-13T00:31:24.693000+00:00
Original source
also i have weirdly enough some discrepancy between the ghidra and ida repo.
(`sub_84E8D0` is the `lua_settable` call)
Original source
according to the lua5.1 source this function should return void, but in IDA it returns something (prb a pointer, if this is valid)
rektbyfaith
02-13-2024, 12:32 AM #3Archived author: 4bhorrent • Posted: 2024-02-13T00:32:44.849000+00:00
Original source
according to the lua5.1 source this function should return void, but in IDA it returns something (prb a pointer, if this is valid)
Original source
![[Image: image.png?ex=690c9583&is=690b4403&hm=f54...3afcb7da6&]](https://cdn.discordapp.com/attachments/1086807686571642900/1206759927452798986/image.png?ex=690c9583&is=690b4403&hm=f54c4add6d06d335a94c69b6510dff0dd721a6ac4a7ad10bf29a4643afcb7da6&)
rektbyfaith
02-13-2024, 12:33 AM #4Archived author: 4bhorrent • Posted: 2024-02-13T00:33:07.265000+00:00
Original source
Original source
Sometimes IDA sets return value to int for me when in reality there is no return at all
rektbyfaith
02-13-2024, 12:33 AM #5Archived author: Nix • Posted: 2024-02-13T00:33:38.372000+00:00
Original source
Sometimes IDA sets return value to int for me when in reality there is no return at all
Original source
I just manually adjust it to void
rektbyfaith
02-13-2024, 12:33 AM #6Archived author: Nix • Posted: 2024-02-13T00:33:55.362000+00:00
Original source
I just manually adjust it to void
Original source
You can typically check the assembly + the call sites for the function
rektbyfaith
02-13-2024, 12:34 AM #7Archived author: Nix • Posted: 2024-02-13T00:34:04.348000+00:00
Original source
You can typically check the assembly + the call sites for the function
Original source
I think it has a tendency to add return value when the eax register is in use, even if the call site doesn't use it
rektbyfaith
02-13-2024, 12:35 AM #8Archived author: Nix • Posted: 2024-02-13T00:35:24.786000+00:00
Original source
I think it has a tendency to add return value when the eax register is in use, even if the call site doesn't use it
Original source
For example
rektbyfaith
02-13-2024, 12:35 AM #9Archived author: Nix • Posted: 2024-02-13T00:35:53.317000+00:00
Original source
For example
Original source
If function A calls function b, and uses the result of B in it, then the eax register will be occupied
rektbyfaith
02-13-2024, 12:36 AM #10Archived author: Nix • Posted: 2024-02-13T00:36:07.691000+00:00
Original source
If function A calls function b, and uses the result of B in it, then the eax register will be occupied
1 Guest(s)
1 Guest(s)