Last update: 2005-06-10
MD5: 815b1dd9cd01a6dae3a2374cac590384
Size: ~323k
Update Summary: Fixed bug that was causing the plug-in to hang
You may have noticed the ghosted 'Heap' option under the 'View' menu in OllyDBG. The feature is available only under Windows 95 based OSes and is supposed to display a list of allocated memory blocks. The Olly Heap Vis plug-in was written to provide this functionality and more on all modern Windows OSes such as Windows 2000, XP and 2003.
The Olly Heap Vis plug-in provides heap chunk lists, the ability to search the heap, a quick heap jump and finally visualization capabilities through Graphviz. There is a known dead locking problem with the plug-in (probably the reason why Oleh didn't include the functionality in all OS's). It doesn't always get in the way, so it's worth the gamble. The dead lock occurs within the Windows API for heap enumeration (Heap32xxxx). I started writing a new version of this plug-in that walked the actual heap structures starting from the PEB (Process Environment Block), but never got around to finishing it. More information and source code is available in the bundled archive.
Screenshots:
List,
Visualization |
Download Page
|