flat assembler
Message board for the users of flat assembler.

Index > Heap > Showing class function calls in Ollydebug

Author
Thread Post new topic Reply to topic
Nomen luni



Joined: 23 May 2007
Posts: 6
Nomen luni
Hi folks, I'm trying to reverse engineer a piece of code. Ollydebug can show me the function calls into a dll, but is not showing calls to functions contained within a class associated with that dll. At least that's what I think is happening. Is there any way to have it show these calls, or alternatively is there another package (free or cheap) that can do this?
Post 27 Jan 2008, 20:13
View user's profile Send private message Reply with quote
revolution
When all else fails, read the source


Joined: 24 Aug 2004
Posts: 17463
Location: In your JS exploiting you and your system
revolution
What do you mean by "a class associated with that dll"? Are you talking about Java, or other OO language, classes?
Post 27 Jan 2008, 20:32
View user's profile Send private message Visit poster's website Reply with quote
Nomen luni



Joined: 23 May 2007
Posts: 6
Nomen luni
I'm trying to look at calls to functions in a Direct3D object. So it's compiled with C++ I assume.
Post 27 Jan 2008, 21:25
View user's profile Send private message Reply with quote
revolution
When all else fails, read the source


Joined: 24 Aug 2004
Posts: 17463
Location: In your JS exploiting you and your system
revolution
Do you want Ollydbg to "disassemble" the classes and show you what is inside? Or are you trying to follow the code execution with breakpoints and stepping etc.?

If you are trying to coax Olly into understanding the class and displaying it in a C++ style then you're out of luck. Perhaps you are looking for a C++ or D3D disassembler/viewer?
Post 27 Jan 2008, 21:32
View user's profile Send private message Visit poster's website Reply with quote
Vasilev Vjacheslav



Joined: 11 Aug 2004
Posts: 392
Vasilev Vjacheslav
Nomen luni, try ida
Post 28 Jan 2008, 10:24
View user's profile Send private message Reply with quote
Nomen luni



Joined: 23 May 2007
Posts: 6
Nomen luni
Thanks Vasilev. I will indeed take a look at ida.

Revolution - All I want is for the program to display the function calls to functions in the class just like it displays standard function calls. So no, I don't need it to disassemble or understand the class, just display the names of the class functions being called directly from the executable.
Post 28 Jan 2008, 23:02
View user's profile Send private message Reply with quote
revolution
When all else fails, read the source


Joined: 24 Aug 2004
Posts: 17463
Location: In your JS exploiting you and your system
revolution
It still is not clear to me what you want. I presume you want to see methods names? Is it like this: You see now things like "call [esi+0x14]" but you want to see "call ClassName::Method"?

Perhaps you can give some details to help explain.
Post 29 Jan 2008, 04:56
View user's profile Send private message Visit poster's website Reply with quote
Display posts from previous:
Post new topic Reply to topic

Jump to:  


< Last Thread | Next Thread >
Forum Rules:
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum


Copyright © 1999-2020, Tomasz Grysztar. Also on YouTube, Twitter.

Website powered by rwasa.