DumpAddressColor (an OllyDbg 2 plugin)

Colorizes the double-words in the CPU dump of OllyDbg 2 by the following rules:
Red: an address to a code block of a module.
Magenta: an address to a non-code block of a module.
Yellow: an address to a non-module memory block.
Black: a handle of a window which belongs to the debuggee process.

The colors can be changed in the .ini file.

Limitations: double-words across rows are not processed.

zip dump_address_color.zip (5.38 kB)

Posted in Releases, Software at August 28th, 2015. No Comments.

DumpHistoryNavFixer (an OllyDbg 2 plugin)

This plugin fixes a minor, but annoying issue with the CPU dump history navigation on OllyDbg 2.

Without the plugin (clickable):

With the plugin (clickable):

zip dump_history_nav_fixer.zip (112.31 kB)

Posted in Releases, Software at August 28th, 2015. No Comments.

Symbols on Demand (an OllyDbg plugin)

OllyDbg is able to use dbghelp.dll and symsrv.dll to show extended debug information, such as the module source code (if referenced by the debug information) or module symbols from a PDB file (which can be fetched from the Microsoft Symbol Server for system modules). The problem is that if you turn on this option, module loading becomes much slower. On the other hand, this information is very handy, so there’s a dilemma as of whether to turn it on.

The Symbols on Demand plugin provides the best of both worlds: it disables loading of this extended debug information by default, but allows to load it explicitly for any module, at any time. Using this approach, loading is still fast, but if you need to load extended debug information for a module, you can easily do that.

OllyDbg v1.10 and v2.01 are supported. For, OllyDbg v1.10, there’s additional functionality: you can set the symbols search path, which is set by default to SRV*.\Symbols*http://msdl.microsoft.com/download/symbols. You can also choose to retrieve undecorated symbol names. These options can be set in the INI file of OllyDbg, in the plugin’s section.

zip symbols_on_demand.zip (4.96 kB)

For your convenience, here are the dbghelp.dll and symsrv.dll files:

zip dbghelp_symsrv.zip (579.8 kB)

Posted in Releases, Software at August 8th, 2015. No Comments.

Virtuoz virtual desktop utility

I’m happy to present Virtuoz, the virtual desktop utility.

Virtuoz was designed to be a minimal and robust program that allows to have more than one desktop on Windows. It was inspired by Sysinternals Desktops, but uses a different approach, which doesn’t impose the limitations which Desktops is bound to.

Download

zip Virtuoz.zip (348.41 kB)

Posted in Releases, Software at June 28th, 2015. 13 Comments.

QuickAddressCopy (an OllyDbg v1.10 plugin)

This tiny plugin allows you to copy the address of the selected item/command/byte with the Ctrl+X keyboard shortcut.

Note that the plugin works only for OllyDbg v1.10. For OllyDbg v2, you can achieve the same with:
Options -> Edit shortcuts… (“Copy address” in “Dump: Edit”)

zip quick_address_copy.zip (1.6 kB)

Posted in Releases, Software at March 17th, 2015. No Comments.

Portablizer (an OllyDbg plugin)

This plugin makes your copy of OllyDbg portable, which means that you can copy the OllyDbg folder to another location without having to fix ollydbg.ini manually.
OllyDbg v1.10 and OllyDbg v2 are supported.

OllyDbg v1.10

Usage:

  1. Copy portablizer.dll to the plugins folder.
  2. Apply the ollydbg-patch.exe patch on ollydbg.exe.
    The patch is needed because by default, OllyDbg loads the plugins at a later stage.
  3. Run OllyDbg from the correct folder, then close it.
  4. Make sure that the entries of ollydbg.ini contain relative paths (the [History] section).

Limitations:

  1. The plugin DLL file must be named portablizer.dll.
OllyDbg v2

Usage:

  1. Copy portablizer_odbg2.dll to the plugins folder.
  2. Run OllyDbg from the correct folder, then close it.
  3. Make sure that the entries of ollydbg.ini contain relative paths (the [History] section).
Download

zip portablizer.zip (63.01 kB)

Posted in Releases, Software at March 17th, 2015. No Comments.

Introducing Unchecky

Nowadays it’s a reality that many software installations are bundled with potentially unwanted programs, such as toolbars or scareware system cleaners. If you’re a power user, you probably know that you have to be very careful while installing software, because if you miss a checkbox you might spend hours afterwards cleaning up the mess. If you’re an average PC user, you possibly leave everything by default, thus installing lots of additional unwanted programs without even knowing it.

I always thought that it’s wrong to provide these potentially unwanted programs by default, but the reason for this is clear: the more users install these, the more money the setup owner makes, usually at the expense of your privacy. Well, it doesn’t have to be that way anymore, thanks to Unchecky!


Read More…

Posted in Releases, Software at November 25th, 2013. 47 Comments.

Quick Folder Menu

Quick Folder Menu

Quick Folder Menu is a tiny application that opens a menu of the folder you specify as a command line parameter.

It’s mostly based on an AutoIt script by LarsJ.

It has a couple of bugs I don’t know how to fix, e.g. it doesn’t always close when you click away (Update: fixed in v1.1).
I hardly know how it works at all. But it works, and I find it handy, so in case you might make use of it, grab it below.

zip qfmenu.zip (3.73 kB)

The source code is available on GitHub.

Posted in Releases, Software at April 23rd, 2013. 11 Comments.

7+ Taskbar Numberer: taskbar numbers for Utter Command

Speech recognition

This utility has been designed for speech recognition users who use voice macros to switch between open applications and tray icons. It works on Windows 7, Windows 8, and Windows 10 operating systems, both 32-bit and 64-bit.

For example, speech recognition users that use Dragon NaturallySpeaking Professional with the third-party provided Utter Command add-on can switch to the third application shown in the taskbar by using the command “Window 3”, or can right-click on the third visible tray icon by using the command “Tray 3”. When there are many open applications, or when the user has a significant amount of tray icons, it can become quite cumbersome to count by hand the number of icons in order to identify the sequence of the intended application or tray icon.

“7+ Taskbar Numberer” solves this problem by numbering sequentially, left to right:
– the icons for the open and close-but-pinned windows applications.
– all the visible tray icons.

and then placing tiny visible numbers (a.k.a. “hints”) in the top left corner of the application icons, and in the top right corner of the tray icons. The numbering scheme supports more than one digit, so that the hint for the 12th application is “12”.

While this utility has been tested with the Utter Command user interface, it will work with any other voice macros that select open applications or tray icons by rotating with them sequentially from left to right.

The utility adjusts dynamically as new applications or tray icons are added, and also works when the user has chosen to make just a subset of the tray icons visible.

This article wasn’t written by me. The author wished to remain anonymous.

Win+# keyboard shortcuts

You can use the Windows key+number keyboard shortcut to refer to a taskbar item.

Windows logo key Picture of Windows logo key+number
Start the program pinned to the taskbar in the position indicated by the number. If the program is already running, switch to that program.

Shift+Windows logo key Picture of Windows logo key+number
Start a new instance of the program pinned to the taskbar in the position indicated by the number.

Ctrl+Windows logo key Picture of Windows logo key+number
Switch to the last active window of the program pinned to the taskbar in the position indicated by the number.

Alt+Windows logo key Picture of Windows logo key+number
Open the Jump List for the program pinned to the taskbar in the position indicated by the number.

Source: Microsoft.

7+ Taskbar Numberer adds numbers to your taskbar items, so you can see right away what keyboard shortcut is assigned to each item.
Optionally, the numbers can appear only when the Windows key is down.
Read More…

Posted in Releases, Software at July 22nd, 2012. 120 Comments.

Resource Hacker FX: the improved Resource Hacker

Note: the most recent version of Resource Hacker incorporates most of the changes that this patch offers. Therefore, Resource Hacker FX is considered obsolete, and the post is here mostly for historical reasons.

Remember the good ol’ Resource Hacker?
It’s a popular Resource viewer/editor, I use it to quickly view and edit resources. I tried to find an alternative, but I did not find any that I liked, so I decided to just improve Resource Hacker.

Here is a patcher that needs to be used on the original Resource Hacker v3.6.0.92:
zip Resource Hacker FXer.zip (117.97 kB, changelog)

Here is how it looks:

What does the patcher change:
Read More…

Posted in Releases, Software at March 13th, 2011. 360 Comments.