Log in

View Full Version : Shell Extension for olly


p0lly
January 17th, 2009, 03:06
Hi! I'm a 'real' newbie...

Question 1
RightClick on 'debuggee.exe' -> 'debug with ollydbg' or likes appears... -> when click it, load 'debuggee.exe' with ollydbg... Is this possible??

Question 2
RightClick on 'debuggee.exe' -> 'debug with w32dasm' or likes appears... -> when click it, load 'debuggee.exe' with w32dasm... Is this possible??

Regards.

Kayaker
January 17th, 2009, 05:32
Sure. Open Regedit.exe and insert the following entries. Or just copy/paste (with the correct path) to a *.reg file and double click on it.

Code:
Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\exefile\shell\Open with OllyDbg]

[HKEY_CLASSES_ROOT\exefile\shell\Open with OllyDbg\Command]
@="C:\\RCE\\OllyDbg\\OllyDbg.exe %1"


arc_
January 17th, 2009, 11:19
Also, get IDA Pro instead of W32dasm if you can. It's a much better disassembler.

disavowed
January 17th, 2009, 15:43
I recommend the following instead (based on Kayaker's post, with fixed quotes) --

Code:
Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\exefile\shell\Open with OllyDbg]

[HKEY_CLASSES_ROOT\exefile\shell\Open with OllyDbg\Command]

@="C:\\RCE\\OllyDbg\\OllyDbg.exe" "%1"

Kayaker
January 17th, 2009, 18:52
Hi disavowed,

That doesn't seem to work as written. If I double click on that regfile, the command string doesn't get entered.

To get the fixed quotes you seem to need to do this instead:

@="C:\\RCE\\OllyDbg\\OllyDbg.exe \"%1\""


Either way, both of these produce the same shellext result, i.e. they both work, so I'm not sure if it makes much difference

C:\RCE\OllyDbg\OllyDbg.exe "%1"
C:\RCE\OllyDbg\OllyDbg.exe %1

anom
January 17th, 2009, 19:39
%1 represents the path that's being passed to the application (depending on which file you're right-clicking). Assume you got a file with a path like the following: C:\My File\My Program.exe.
The difference should be quite obvious, the variant without quotes around %1 gets resolved to C:\RCE\OllyDbg\OllyDbg.exe C:\My File\My Program.exe, passing three arguments, not one.

Anyway, thanks for the registry key, have been searching something similar some time ago.

evaluator
January 18th, 2009, 06:30
without "" will be managed as DOS-path

p0lly
January 19th, 2009, 23:36
here my final "Olly_Shell_Extension.reg"

Thank you all...



Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\exefile\shell\Debug with odbg110]

[HKEY_CLASSES_ROOT\exefile\shell\Debug with odbg110\Command]
@="\"C:\\Documents and Settings\\기본\\바탕 화면\\odbg110\\OLLYDBG.EXE\" \"%1\""