Log in

View Full Version : define your own functions


helloword
January 9th, 2003, 12:47
Who define his own functions in the <OllyDbg directory>&#92;<Application>.arg file?

TBD
January 9th, 2003, 22:43
helloword: i tried some time ago ... and it worked
do you have problems ? please post your findings

blue
January 19th, 2003, 14:44
I'm having a little problem with this. I'm working on an executable, and I'm mainly interested in two of the dlls it uses. One of these DLLs contains a function I want to define and which is referenced as ordinal #10005. I'm trying to make the calls from the other DLL to this exported function look a little bit cooler The Analyzer doesn't recognize this as the start of a function though, I don't know if it is a problem.

<pre>6FAAD3EA |. E8 85260B00 CALL <JMP.&D2Net.#10005></pre>

So well, it's not working as predicted, meaning it shows nothing. If I use Assume Arguments on the exported function to tell OllyDbg it has 3 arguments, it shows as

<pre>6FAAD3EA |. E8 85260B00 CALL <JMP.&D2Net.#10005> ; &#92;Assumed StdFunc3</pre>

I have tried to put 3 .arg files, named after the executable, the first DLL and the second DLL, and inside those .arg files, I have tried the following possibilities :

<pre>FUNCTION <JMP.&D2Net.#10005>
"unknown" INT
"pPacket" PTR
"nLength" UINT
END
FUNCTION D2Net.#10005
"unknown" INT
"pPacket" PTR
"nLength" UINT
END
FUNCTION #10005
"unknown" INT
"pPacket" PTR
"nLength" UINT
END</pre>

Any clue to what I'm doing wrong ?