吾爱破解 - 52pojie.cn

 找回密码
 注册[Register]

QQ登录

只需一步,快速开始

查看: 5620|回复: 11
收起左侧

[OllyDbg 1.x Plugin] OllyTiper 2.0

[复制链接]
Hmily 发表于 2010-2-4 10:40
OllyTiper is a plugin for OllyDbg v1.10 to make it easier to work with keyboard.
First release by Ryokou with src, with thanks to KanXue and HeXer.
Update by DhtFish[CCG].
Totally remade and BUGFIXed by vptrlx.

Version 2.0:

Changes:
1)Settings menu allow you to change operation keys or disable them.
/*Code Information and Disassembly shortcuts may be the same;
DblClick in stack cannot be disabled or changed*/
2)Enhanced Usability
3)Enhanced Operation
4)BIG BUG fixes


Operation:
1. Disassembly Window
(1) View data
In everything here "Ctrl+D" instead of "SHIFT" makes results to be shown in Stack Window.

push A480033 / / If you press Shift, then the data window will display the data A480033
mov eax, 401000 / / this line by Shift, the data window to display data on 401,000
mov eax, [401000] / / this line by Shift, the data window to display data on 401,000
mov [ebp-4], esp / / this line press Shift, then the data window to display the value of ebp-4 (note the EIP must point to the current line)
mov eax, [esp +10] / / this line by Shift, the data window to display the value of esp +10 (Note that the EIP must point to the current line)
JNZ 401000 / / this line by Shift, the data window to display data on 401,000

(2) copies the current address
00401092 68 00000080 PUSH 80000000 / / select this going-rate, press Ctrl + Q, will address "00,401,092" copy to the clipboard.

(3) Calculate the size of code: select some piece and push and release Ctrl.
---------------------------------------------
2. Data Window
Suppose such data in the window:
00406000 01 02 10 40 00 00 00 00 00 00 00 00 00 CA 2E 40
and the cursor set to "02 10 40 00"
Then
(1)Ctrl: Disassembly window goes to 00401002
(2)Shift: Data window goes to 00401002
(3)Ctrl+D: Stack window goes to 00401002
(4)Ctrl+Q: Moves 00401002 to Clipboard

---------------------------------------------
3. Stack Window
0012FF44 00401D8A / /
(1)Ctrl or double-click, disassemble the window displays the contents of the address 0401D8A;
(2)Shift, Data window displays the contents of the address 0401D8A
(3)Ctrl+D: Stack window goes to 0401D8A
(4)Ctrl+Q: Moves 0401D8A to Clipboard

---------------------------------------------
4. Registers Window:

EAX 00000000
ECX 0012FFB0
EDX 7C90E4F4 ntdll.KiFastSystemCallRet
EBX 7FFDC000
ESP 0012FFC4
EBP 0012FFF0
ESI FFFFFFFF
EDI 7C910208 ntdll.7C910208

For example, select EDX. Then
(1)Ctrl: Disassembly displays 7C90E4F4
(2)Shift: Data displays 7C90E4F4
(3)Ctrl+D: Stack displays 7C90E4F4
(4)Ctrl+Q: Copies 7C90E4F4 to the Clipboard
/*works only with eax..edi*/
--------------------------------------------
5. A funny "feature" that apeeared by chance:
If some operation is invoked with use only of Ctrl/Shift/Alt then
you don't need the window that you want to capture address/value from to be focused -
just push ctrl/shift button and before releasing it move mouse into the window you want.


Known Issues:
0) Key shortcuts with the only Alt system key may not work

OllyTiper.2.0.rar

45.43 KB, 下载次数: 72, 下载积分: 吾爱币 -1 CB

发帖前要善用论坛搜索功能,那里可能会有你要找的答案或者已经有人发布过相同内容了,请勿重复发帖。

a2213572 发表于 2010-2-7 14:14
感謝分享更新版本.
替換1.01版
shayu 发表于 2010-2-6 20:48
头像被屏蔽
Cicanc 发表于 2010-2-5 19:40
vienna 发表于 2010-2-5 17:22
刚刚花了时间看看哪个插件是堆栈双击。。~~更新一下~~
冷月孤心 发表于 2010-2-4 12:08
升级下,谢谢大H分享
guayafem126 发表于 2010-2-8 21:50
升级下,谢谢大H分享
xie83544109 发表于 2010-2-8 22:12
[s:20]
哦偷偷地下载呢
x740073529 发表于 2010-2-12 04:38
下载升级下
goodyou520 发表于 2010-3-28 12:31
顶一个
下来看看
您需要登录后才可以回帖 登录 | 注册[Register]

本版积分规则

返回列表

RSS订阅|小黑屋|处罚记录|联系我们|吾爱破解 - LCG - LSG ( 京ICP备16042023号 | 京公网安备 11010502030087号 )

GMT+8, 2024-11-15 06:49

Powered by Discuz!

Copyright © 2001-2020, Tencent Cloud.

快速回复 返回顶部 返回列表