ghidra007

Results 61 comments of ghidra007

Yes we are aware there are use cases where the first vftable offset is not at 0. There are cases where there are multiple vftable offsets associated with multiple parents....

> @ghidra007 could you give us a guestimate of the amount of time you wondeful guys are able to allocate say in a month to your solution and a rough...

@tamlin-mike Thank you for the very well described issues regarding vftables and for the luck.

@Wall-AF Regarding the RTTI script, it says in the description that it should be run on freshly analyzed binary and also says it is very prototype: "NOTE: For likely the...

@Wall-AF I just took a quick look to see where that error is coming from and it is from the RunScriptTask.java when the script that it is running throws an...

@Wall-AF Thanks for the stack trace. I can add better checking for that case so it doesn't blow up. I've been told that the other ask for checks for non-standard...

Can you share the contents of MainMenuScreen's class structure? Does it contain fields for both inherited vftables? Were your structures manually generated or with the RTTI script or something else?...

What is at offset 4? It is cut off. Is it data or a vbtable? I'm sorry for slow responses. I'm out most of this week but checking in once...

Here is how to update your function to fix the -1 offset issue: You need to turn off the thiscall convention for the ReceiveEvent method and just replace it with...