Log in

View Full Version : A bug of Ollydbg?


wut55
June 17th, 2004, 04:41
Hi all
When I use Ollydbg1.10c to analyse a program coded in VC++6.0,
I load MFC42.lib to help me to clear out the MFC function names
but Olly can not resolve them ( functions like <JMP.&MFC42.#1168_?AfxGetModuleState@@YGPAVAFX_MO>
I am sure this prog is coded in VC6 and use MFC,because I use
Ida to analyse it and a lot of functions show that it use MFC

And I load another prog also coded in vc6 and use MFC,strange
enough, Olly does resolve all the MFC function names

why?then?

If you know the solution,plz dont hesitate to tell me.

Sorry for my poor English, I am trying my best to improve it
for better communication.

Necr0Potenc3
June 17th, 2004, 09:01
thats called of demangled name and IDA auto-fixes that output but olly doesnt, not sure if olly has an option for that

Lord_Looser
June 17th, 2004, 14:10
http://ollydbg.win32asmcommunity.net/?action=vthread&forum=1& topic=116&page=4#19 ("http://ollydbg.win32asmcommunity.net/?action=vthread&forum=1&topic=116&page=4#19")

wut55
June 18th, 2004, 22:00
OllyDbg do have an option to show MFC function names(or other library's function names)
To show it ,choose Debug->Select import libraries,browse to mfc42.lib ,It should be in VC++ derectory if you have VC installed
in your system,if not, you can find it using google.
It work in a way just like IDA Pro using a sig(signature) file to identify some functions and structures

thank you all for answer me.