Welcome to the new Woodmann RCE Messageboards Regroupment
Please be patient while the rest of the site is restored.

To all Members of the old RCE Forums:
In order to log in, it will be necessary to reset your forum login password ("I forgot my password") using the original email address you registered with. You will be sent an email with a link to reset your password for that member account.

The old vBulletin forum was converted to phpBB format, requiring the passwords to be reset. If this is a problem for some because of a forgotten email address, please feel free to re-register with a new username. We are happy to welcome old and new members back to the forums! Thanks.

All new accounts are manually activated before you can post. Any questions can be PM'ed to Kayaker.

Accessing source file names

Plugin related discussions.

For plugins, tools and tutorials see <a href="/collaborative/tools/index.php/Category:OllyDbg_Extensions">OllyStuph</a>
Locked
Spacetime

Accessing source file names

Post by Spacetime »

Can somebody please help me by answering the following questions:

1. How do I get source file names for loaded module?
2. How do I change source file names for loaded module?
3. Which plugin function is called after loading a module?

Thanx.
blurcode
Senior Member
Posts: 157
Joined: Tue Aug 16, 2005 3:11 pm
Location: Greece

Post by blurcode »

3. Make sure you checked "Break on new module (DLL)" event in OllyDbg options (maybe it can call the callback even if you don't check the above option, i didn't check).

Plugin callback you can use is:
void ODBG_Pluginmainloop(DEBUG_EVENT *debugevent);

Hint: look for LOAD_DLL_DEBUG_EVENT code and LOAD_DLL_DEBUG_INFO structure
more info at http://msdn2.microsoft.com/en-us/library/ms679308.aspx
A picture worth 1K words (or .5K DWORDS).
Locked