Jump to content
Tuts 4 You

Symbols tab > Executable Module Path Caller


kittmaster

Recommended Posts

Love my Olly, but really diggin x64DBG. 

One question I can't seem to sort out. When you are in Olly, and your at the entry point, if you open the executable modules, you see your .exe. When you run it, you can see what dlls are being loaded and can ultimately sort by path location to see which dlls are in play.

I can see all the dlls under symbols, but what is not seen is the path and caller of which dll from user vs system.

Is there a way to track that? I can see it says "user" "system" "party" but It would be helpful when searching for APIs or strings when your looking for any given routine to know the caller path.

Is this just not implemented or am I doing something incorrectly?

Thank you.

Link to comment

I installed and tested on a known platform both x32 and x64 and it works very well and as expected. It nicely listed all the paths/modules and double clicking on a particular module drops right into the dll or module as needed.

My only suggestion would be to integrate it into a right click context in the symbols area maybe? That would reduce some time but only in a minor way.

Understand if you don't want to go down that road.

Thank you VERY much for creating this.

Best

B)

  • Like 1
Link to comment

There already is a right click option to copy the full symbol path if that's what you meant...

Edit: nevermind. What you can do is use the favorite commands and bind a hotkey to it.

Edited by mrexodia
Link to comment

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...