View Full Version : Adding own function parameters?
psyCK0
March 17th, 2004, 09:58
Hey,
Anybody knows if there is a way to make olly recognize function parameters? Windows API params are recognized and labeled with their names, can I add this for other functions too?
For example:
100011D0 |. 6A 04 PUSH 4 ; /maxlen = 4
100011D2 |. 8D4C24 60 LEA ECX,DWORD PTR SS:[ESP+60] ; |
100011D6 |. 50 PUSH EAX ; |src
100011D7 |. 51 PUSH ECX ; |dest
100011D8 |. E8 93010000 CALL <xxx._strncpy> ; \_strncpy
Those params are recognized and labeled.
blabberer
March 17th, 2004, 10:16
1)
have you tried assume arguments (stdfunction int1,int3......int n) to the call and reanalysing (rightclick and look down in cpu menu it must be in some context of analysis or arguments)
well there is some .arg file thingy but i gotta refresh my usage
as to it (tried playing with it using the olly help file (see it uses some methods to describe how it names all the calls there is an example to iirc with the help of CreateFont search ollyhelp file
probably youll find it if i remember correctly
sgdt
March 17th, 2004, 12:19
Wow!
The topic heading is "Custom function descriptions", I had absolutely no idea OllyDebug could do this. Way cool feature!!!
Good things come to those who read, I guess.
I could have used this functionality so many times, and if I'd bothered to read the help file, I'd have been that much further ahead.
I wonder if there are any other cool features I've missed out on simply because of 'documentation phobia'???
EDIT: Playing with this is FUN FUN FUN!!!!
psyCK0
March 17th, 2004, 17:04
OllyDbg's possibilities are limitless. =)))
Thx oh me anon!
Btw sgdt, have you played with this new load dll feature? Used it today and it saved me hours of boring work.
blabberer
March 18th, 2004, 08:03
np
yes ollydbgs possibilities are almost limitless only thing you gotta keep right clicking everywhere
have you tried goto--->find all switch cases
search for all intramodularcalls and view call tree (not control+k) but in context on goto
Powered by vBulletin® Version 4.2.2 Copyright © 2018 vBulletin Solutions, Inc. All rights reserved.