View Full Version : Find function in OCX
bboitano
March 28th, 2011, 10:53
Hi,
I have an activex control and I am trying to figure out how to locate the code that is called by a specific function.
I need to figure out the calculation the OCX is performing but the best I can find at the moment is that it is (From OLEViewer):
[id(0x00002b66), helpstring("Ò¿¯ÄÞ Func11110"

]
int Func11110();
How can I find out what code that id (0x00002b66) refers to so I can dig a little deeper?
Many thanks
Neitsa
April 9th, 2011, 13:28
Hi,
There's a cool plugin for IDA that does this job: http://www.openrce.org/downloads/details/10/Com_Plugin_v1.2
It will automatically rename sub_xxx functions to the corresponding one from the COM type library.
If I remember correctly the plugin was compiled against an old version of IDA and it doesn't work anymore on newer versions. You might need to recompile it using the IDA SDK.
bboitano
April 11th, 2011, 06:01
Salut Neitsa!
Many thanks for that - I will look into it.
Much appreciated!
bb
FrankRizzo
April 11th, 2011, 08:56
Just as a thought, once he gets it compiled for a modern IDA, is this something that we could add to the CRCETL?
bboitano
April 12th, 2011, 03:52
As soon as I succeed in getting it compiled (which for some reason I am having a little problem with atm), if it doesn't break any board rules, I am more than happy to upload it.
Will try and have a better look at it this afternoon.
bb
dELTA
May 1st, 2011, 19:57
Any news here?
Also, there are of course already some COM tools in the CRCETL that might be useful:
http://www.woodmann.com/collaborative/tools/Category:COM_Tools
bboitano
May 10th, 2011, 06:34
Still haven't managed to get it compiled and working. Getting some odd errors with one of the IDA plugins from the CRCTEL.
Unfortunately some real life issues are preventing me giving this my full attention at this point. Hopefully they will pass without incident and I will be able to get back to it

Powered by vBulletin® Version 4.2.2 Copyright © 2018 vBulletin Solutions, Inc. All rights reserved.