Results 1 to 3 of 3

Thread: symbols or implib

Hybrid View

  1. #1
    idanski
    Guest

    symbols or implib

    hi,
    Some questions (or suggestions):

    1) Is there any way to know in which function i'm in now (shown sometimes in the information bar in the CPU view)? I saw that this is working only in a few functions. even after i analyse the code...

    2) It may be better to put lables in one line and the assembly in another: because if i want to see the name of the function/lable, then i must expand the first column. and it takes up lots of space...
    For example, instad of this:

    <pre>
    77E7B332 kernel32.GetProcAddress |&#036; 55 |push ebp
    77E7B333 |. 8BEC |mov ebp, esp
    77E7B335 |. 51 |push ecx
    </pre>

    something like this (shown here without colors...):

    <pre>
    77E7B332 | |kernel32.GetProcAddress:
    77E7B332 |&#036; 55 | push ebp
    77E7B333 |. 8BEC | mov ebp, esp
    77E7B335 |. 51 | push ecx
    </pre>

    3) It would be great to add an "input helper" to some edit boxes. for example: in the "Goto expression" dialog box: when i start writing a lable name, i'd like OllyDbg to show me all the lables that start with those letters.
    another example is when i write a conditinal expression "MSG==WM_" -> i'd like to see all the messages known...

    Thanks!
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  2. #2
    focht
    Guest

    symbols or implib

    Greetings,

    i agree with you, the "column style" representation of function labels could be better.
    It took me some time until i found that "extend 1st column to see function name" feature... and yes, it take much column width.

    windbg style example:

    <pre>
    ntdll!DbgBreakPoint:
    77f75a58 cc int 3
    77f75a59 c3 ret
    77f75a5a 8bff mov edi,edi
    ntdll!DbgUserBreakPoint:
    77f75a5c cc int 3
    77f75a5d c3 ret
    77f75a5e 8bff mov edi,edi
    ntdll!DbgBreakPointWithStatus:
    77f75a60 8b442404 mov eax,[esp+0x4]
    ntdll!RtlpBreakWithStatusInstruction:
    77f75a64 cc int 3
    77f75a65 c20400 ret 0x4
    </pre>

    To maintain the "column style" cpu view implementation of ollydbg it makes sense to implement it like you suggested (3rd column = function label)

    The other feature you're thinking of is "intellisense", autocompletion on typing.
    This feature is nice to have but should be on lower priority i think
    Maybe some plugin can implement such automagic behavior.

    Regards,

    A. Focht
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  3. #3
    idanski
    Guest

    symbols or implib

    I guess you are right about the autocompletion. another suggestion is a "goto lable" that shows all the lables in a list, and lets the user jump to any one of the lable.
    I promise that I have read the FAQ and tried to use the Search to answer my question.

Similar Threads

  1. Can't get symbols working with Olly 1.10
    By Sunk in forum OllyDbg Support Forums
    Replies: 3
    Last Post: September 1st, 2013, 12:31
  2. Softice & IDA symbols
    By omega_red in forum Tools of Our Trade (TOT) Messageboard
    Replies: 3
    Last Post: May 20th, 2004, 19:19
  3. how to use symbols just like windbg
    By a1rsupp1y in forum OllyDbg Support Forums
    Replies: 1
    Last Post: November 27th, 2003, 22:33
  4. Problems with symbols in OllyDbg, please help
    By dELTA in forum OllyDbg Support Forums
    Replies: 4
    Last Post: December 19th, 2002, 04:17
  5. softice symbols ramblings
    By flekso in forum Tools of Our Trade (TOT) Messageboard
    Replies: 0
    Last Post: December 12th, 2002, 13:22

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •