Jump to content
Tuts 4 You
kittmaster

Symbols tab > Executable Module Path Caller

Recommended Posts

kittmaster

Love my Olly, but really diggin x64DBG. 

One question I can't seem to sort out. When you are in Olly, and your at the entry point, if you open the executable modules, you see your .exe. When you run it, you can see what dlls are being loaded and can ultimately sort by path location to see which dlls are in play.

I can see all the dlls under symbols, but what is not seen is the path and caller of which dll from user vs system.

Is there a way to track that? I can see it says "user" "system" "party" but It would be helpful when searching for APIs or strings when your looking for any given routine to know the caller path.

Is this just not implemented or am I doing something incorrectly?

Thank you.

Share this post


Link to post
Share on other sites
mrexodia

The symbol view was not made with that in mind (it's mean to be a small side panel so you can view that's inside the modules). I created a simple plugin though, feel free to extend it and post your updates: https://github.com/mrexodia/ModulePathList/releases

  • Like 3

Share this post


Link to post
Share on other sites
kittmaster

I installed and tested on a known platform both x32 and x64 and it works very well and as expected. It nicely listed all the paths/modules and double clicking on a particular module drops right into the dll or module as needed.

My only suggestion would be to integrate it into a right click context in the symbols area maybe? That would reduce some time but only in a minor way.

Understand if you don't want to go down that road.

Thank you VERY much for creating this.

Best

B)

  • Like 1

Share this post


Link to post
Share on other sites
mrexodia

There already is a right click option to copy the full symbol path if that's what you meant...

Edit: nevermind. What you can do is use the favorite commands and bind a hotkey to it.

Edited by mrexodia (see edit history)

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

×
×
  • Create New...