blue
January 19th, 2003, 14:44
I'm having a little problem with this. I'm working on an executable, and I'm mainly interested in two of the dlls it uses. One of these DLLs contains a function I want to define and which is referenced as ordinal #10005. I'm trying to make the calls from the other DLL to this exported function look a little bit cooler

The Analyzer doesn't recognize this as the start of a function though, I don't know if it is a problem.
<pre>6FAAD3EA |. E8 85260B00 CALL <JMP.&D2Net.#10005></pre>
So well, it's not working as predicted, meaning it shows nothing. If I use
Assume Arguments on the exported function to tell OllyDbg it has 3 arguments, it shows as
<pre>6FAAD3EA |. E8 85260B00 CALL <JMP.&D2Net.#10005> ; \Assumed StdFunc3</pre>
I have tried to put 3 .arg files, named after the executable, the first DLL and the second DLL, and inside those .arg files, I have tried the following possibilities :
<pre>FUNCTION <JMP.&D2Net.#10005>
"unknown" INT
"pPacket" PTR
"nLength" UINT
END
FUNCTION D2Net.#10005
"unknown" INT
"pPacket" PTR
"nLength" UINT
END
FUNCTION #10005
"unknown" INT
"pPacket" PTR
"nLength" UINT
END</pre>
Any clue to what I'm doing wrong ?