This is just a simple questions regarding the hex values passed as dwFlags and translating them to their actual meaning. I found this thread (http://www.woodmann.com/forum/archive/index.php/t-12498.html) which nearly solves the problem but I'm still a little stuck.
As I understand it we should be right clicking and using Standard Symbolic Symbol.
Now this works fine for a single value (for example, the
#define INTERNET_FLAG_FORMS_SUBMIT 0x00000040 in the referenced thread). But for multiple OR'd values, it doesn't help (at least the way I'm using it and that well may be wrong!)
Currently I'm looking at a call to
HttpOpenRequestA where the
dwFlags value is 4003300h. I was wondering if there was a way in IDA (or another utility that I could use) to translate that into it's actual meaning
INTERNET_FLAG_RAW_DATA 0x40000000 INTERNET_FLAG_IGNORE_CERT_DATE_INVALID 0x2000 INTERNET_FLAG_IGNORE_CERT_CN_INVALID 0x1000 INTERNET_FLAG_NO_UI 0x200 INTERNET_FLAG_PRAGMA_NOCACHE 0x100
Sure it is possible to do it manually but I was wondering if there was a way to integrate this functionality into IDA or something else.
I did post this to Woodmann's (http://www.woodmann.com/forum/showthread.php?15662-Question-about-dwFlags-and-IDA-(or-any-simple-way-to-translate-dwFlags)) and got an interesting response from a user there by the name of Kayaker, who has come up with one way to do it with IDA, but my understanding of this approach is that it would be horrendously time consuming and massive.
So - is there a way to do this automagically in IDA or is there another tool that someone may recommend?