Jump to content
Tuts 4 You

Address Shortcuts 1.0.0


1 Screenshot

About This File

This plugin adds highly needed shortcuts to OllyDbg including Follow DWORD in Disassembler (Ctrl+Enter), Follow DWORD in Dump (Alt+Enter), and Copy RVA (Alt+"+").

This plugin adds the following menu options / shortcuts to OllyDbg v2.01:

  • Follow DWORD in Disassember (Ctrl+Enter)
  • Follow DWORD in Dump (Alt+Enter)
  • Follow DWORD in Stack
  • Copy RVA — Similar to Alt+Ins in Olly, except that the address will be relative to the start of the module.
  • Copy RVA (pretty) (Alt+"+") — The string will be formatted as helloworld+0x36a4.
  • Copy file offset — Similar to Alt+Ins in Olly, except that the address will be relative to the start of the file.
  • Copy file offset (pretty) (Ctrl+"+") — The string will be formatted as helloworld.dll+0x36a4.

Note: The "+" key is at the top row of the keyboard, not the number pad.

The above keyboard shortcuts (Alt vs. Ctrl, etc.) were chosen rather arbitrarily, so feel free to change them.

Usage

Simply drop address_shortcuts.dll next to your OllyDbg.exe, then restart OllyDbg, and Address Shortcuts should appear under your right-click menu.

Now, look at a C++ object (with virtual functions) in the Memory Dump pane. The first dword should be a vtable address. Press Alt+Enter to follow it. Now press Ctrl+Enter to quickly pull up any function in the Disassembly Pane, and Alt+"+" to copy its RVA in a pretty format (helloworld+0x36a4). And, as usual, use the familiar Numpad-Plus/Minus to navigate forwards/backwards and Alt+Ins to copy raw addresses. Copy/paste hex bytes with Ctrl+Ins/Shift+Ins, and generate pretty hexdumps with Ctrl+C.

Compiling

You will need the OllyDbg Plugin SDK (ollydbg.lib).

Using GCC:

Copy CodeBlocks/plugin.h and CodeBlocks/ollydbg.lib from plug201h.zip into the current directory, then run:

gcc -std=c99 -Wall -m32 -Os -g0 -funsigned-char -shared -nostartfiles -s -static-libgcc -o address_shortcuts.dll address_shortcuts.c ollydbg.lib

 


User Feedback

Recommended Comments

There are no comments to display.

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...