Results 1 to 3 of 3

Thread: reading arguments before a function call

  1. #1
    wirepair
    Guest

    reading arguments before a function call

    lo all,
    I would like to be able to read the arguments to a function call much like a run trace and save them to my own variables. I found the address of the import and I would like to set a break point on each reference. I'm pretty sure that part is easy to do, but i have no idea on how to trap these arguments to the function call. Is this something that is possible with the api?
    Thanks,
    -wire


    I want this stuff below after i set my breakpoint on:
    01001CC5 |. FF35 C8900001 PUSH DWORD PTR DS:[10090C8] ; |format = " Ln %d, Col %d "
    01001CCB |. 8D85 FCFEFFFF LEA EAX,DWORD PTR SS:[EBP-104] ; |
    01001CD1 |. 6A 7F PUSH 7F ; |count = 7F (127.)
    01001CD3 |. 50 PUSH EAX ; |wstr
    01001CD4 |. FF15 14130001 CALL DWORD PTR DS:[<&msvcrt._snwprintf>] ; &#92;_snwprintf

    here:
    0007FD28 0007FD50 |wstr = 0007FD50
    0007FD2C 0000007F |count = 7F (127.)
    0007FD30 000A89C4 |format = " Ln %d, Col %d "
    0007FD34 00000001 |<%d> = 1
    0007FD38 00000005 &#92;<%d> = 5
    0007FD3C 77D491A3 USER32.GetMessageW
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  2. #2
    Super Moderator
    Join Date
    Dec 2004
    Posts
    1,529
    Blog Entries
    15

    reading arguments before a function call

    use shift+f4 and make
    check the log function arguments radio button to always
    and in log window enable saving the log automatically to a file that you name

    this is detailed in conditional log breakpoint part in help files
    and there are various examples of them in this forum
    use search to find them and read through them

  3. #3
    wirepair
    Guest

    reading arguments before a function call

    Uhm, do you realize this forum is for programming, not 'how to use olly?.' I'm asking for a programming solution not a clickity mouse click solution. Thanks anyways...
    -wire
    I promise that I have read the FAQ and tried to use the Search to answer my question.

Similar Threads

  1. Dumping function arguments
    By xml in forum OllyDbg Support Forums
    Replies: 6
    Last Post: December 22nd, 2005, 08:57
  2. IDA auto function arguments
    By taylorjonl in forum Tools of Our Trade (TOT) Messageboard
    Replies: 5
    Last Post: May 3rd, 2005, 08:02
  3. Log function arguments on __vbaStrCmp
    By Teerayoot in forum OllyDbg Support Forums
    Replies: 9
    Last Post: July 23rd, 2003, 14:04
  4. Returning from a function call???
    By homunculus in forum OllyDbg Support Forums
    Replies: 12
    Last Post: February 7th, 2003, 07:19
  5. ida function arguments
    By noone in forum Tools of Our Trade (TOT) Messageboard
    Replies: 0
    Last Post: May 5th, 2001, 18:15

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •