Flag: Tornado! Hurricane!

 Forums >>  Debuggers  >>  [OllyDbg PDK]How to change local variable symbolical name?

Topic created on: September 29, 2009 07:42 CDT by icewall .

Hi,
like in topic, I would like to know whether there is any possibility to change local variable symbolical name from e.g:
LOCAL.1
to
LOCAL.hFile
using Olly PDK functions.
I have found quite nice function called : Insertname
which works perfectly for a CALL/JMP/immAddr/OFFSET/ but unfortunatelly no for symbols like LOCAL or ARG.
Any kind of information will be usefull.
Thx ;).

  TwineLogic     October 6, 2009 00:19.51 CDT
> icewall: Hi,
> like in topic, I would like to know whether there is any possibility to change local variable symbolical name from e.g:
> LOCAL.1
> to
> LOCAL.hFile
> using Olly PDK functions.
> I have found quite nice function called : Insertname
> which works perfectly for a CALL/JMP/immAddr/OFFSET/ but unfortunatelly no for symbols like LOCAL or ARG.

I don't think it can be done.  I tried an experiment with this plug-in code:


void lookup_name_for_address()
{
int i;
char name[TEXTLEN];
unsigned address = 0;
int cch;

Getlong("Address:", &address, 4, 0, DIA_HEXONLY);


ollyList_dbgprintf(OLLYLIST_RED, "OllyDbg names for address %08X", address);
for (i = NM_NONAME; i <= NM_ANYNAME; i++ )
{
cch = Findname(address, i, name);
if (cch)
{
name[cch]='\0';
ollyList_dbgprintf(OLLYLIST_RED, "%02X: '%s'\n", i, name);
}
}
ollyList_dbgprintf(OLLYLIST_RED, "End of names list.");
}


and when I provide the absolute stack address of a local or arg (displayed as you describe in CPU dump window), there are no names reported for the address.

Looking at the t_dump structure in plugin.h makes me wonder if the locals/args names feature is specific to the CPU dump window.

Note: Registration is required to post to the forums.

Active in Last 5 Minutes
waleedassar

There are 28,225 total registered users.


Recently Created Topics
Reverse Engineering ...
Jan/23
Career: DoD Agency I...
Jan/22
"Disappearing&q...
Jan/17
Career: Software Sec...
Jan/11
Where is the call st...
Jan/07
IDA Pro 6.1 Breakpoi...
Jan/01
How to create data s...
Dec/30
can i search all mod...
Dec/23
IDA symbol table exp...
Dec/20
An anti-attach trick
Dec/17


Recent Forum Posts
Reverse Engineering ...
NirIzr
"Disappearing&q...
NirIzr
Reverse Engineering ...
charlie
"Disappearing&q...
charlie
An anti-attach trick
Bass
An anti-attach trick
waleeda...
An anti-attach trick
Bass
An anti-attach trick
waleeda...
An anti-attach trick
Bass
Looking for value in...
NirIzr


Recent Blog Entries
cmathieu
Feb/07
Hacker Carnival

waleedassar
Feb/06
OllyDbg v1.10 And Hardware ...

waleedassar
Jan/31
Yet Another Anti-Debug Trick

RolfRolles
Jan/22
Finding Bugs in VMs with a ...

waleedassar
Jan/13
An OllyDbg Bug Disables Sof...

More ...


Recent Blog Comments
waleedassar on:
Feb/07
OllyDbg v1.10 And Hardware ...

NirIzr on:
Feb/07
OllyDbg v1.10 And Hardware ...

NirIzr on:
Feb/05
Yet Another Anti-Debug Trick

trolotou on:
Feb/05
Doudoune Moncler -Pennies F...

waleedassar on:
Feb/01
Yet Another Anti-Debug Trick

More ...


Imagery
SoySauce Blueprint
Jun 6, 2008

[+] expand

View Gallery (11) / Submit