Reverse Engineering Asked by Axel Persinger on May 9, 2021
In Ghidra, the decompiler prepends various prefixes to variable names. For instance, iVar1
is an integer. However, there are a lot of prefixes that aren’t immediately obvious, find some below, but I’m looking for a complete dictionary if anyone knows where it is:
local_31
auStack8320
uStack4
DAT_<addr>
This is annoyingly hard to find the answer to. This is a good starting point, but I don't think I found everything yet.
param_
local_
local_res
temp_
unaff_retaddr
unaff_
in_
param_
Function.java
, I believe this is where the name is actually generated.extraout_
Var
i
in your example)varmap.cc
is the one that creates stack variables, but I haven't yet confirmed.SUB_
LAB_
DAT_
UNK_
EXT_
FUN_
OFF_
Also useful, the FindPotentialDecompilerProblems.java script has some explanations for what some of these mean. Namely, some of the variants of extraout
, in_
, and unaff_
.
Answered by hairlessbear on May 9, 2021
Get help from others!
Recent Questions
Recent Answers
© 2024 TransWikia.com. All rights reserved. Sites we Love: PCI Database, UKBizDB, Menu Kuliner, Sharing RPP