Network Security Internet Technology Development Database Servers Mobile Phone Android Software Apple Software Computer Software News IT Information

In addition to Weibo, there is also WeChat

Please pay attention

WeChat public account

Shulou

Learning how to get started with ollydbg and common commands

2025-01-28 Update From: SLTechnology News&Howtos shulou NAV: SLTechnology News&Howtos > Network Security >

Share

Shulou(Shulou.com)06/01 Report--

1. Window introduction

Disassembly window: displays the disassembly code of the program being debugged. The address, HEX data, disassembly and comments on the title bar can be toggled by right-clicking the menu interface options that appear in the window-> hide the title or show the title. Click the comment tab with the left mouse button to toggle the way the comments are displayed.

Register window: displays the CPU register contents of the currently selected thread. Also click on the label register (FPU) to switch the way registers are displayed.

Information window: displays the parameters of the first command selected in the disassembly window and some jump target addresses, strings, etc.

Data window: displays the contents of memory or files. The right-click menu can be used to toggle the display.

Stack window: displays the stack of the current thread.

2. Common commands

These are the keyboard shortcuts that we often use in debugging:

F2: to set the breakpoint, just press F2 at the location of the cursor (the gray bar in the image above). Pressing F2 again will delete the breakpoint. (equivalent to F9 in SoftICE)

F8: one step at a time. Every time you press this key to execute an instruction in a disassembly window, subroutines such as CALL do not enter their code. (equivalent to F10 in SoftICE)

F7: step in. The function is similar to step by step (F8), except that it will enter when it encounters subroutines such as CALL, and will first stay on the first instruction of the subroutine after entering. (equivalent to F8 in SoftICE)

F4: run to the selected location. The function is to pause directly to the location of the cursor. (equivalent to F7 in SoftICE)

F9: run. Press this key if the corresponding breakpoint is not set, the program being debugged will start running directly. (equivalent to F5 in SoftICE)

CTR+F9: execute to return. This command is paused during the execution of a ret instruction and is often used to return from the airspace of the system to the airspace of the program we debugged. (equivalent to F12 in SoftICE)

ALT+F9: execute to the user code. It can be used to quickly return from the system airspace to the program airspace we debugged. (equivalent to F11 in SoftICE)

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.

Views: 0

*The comments in the above article only represent the author's personal views and do not represent the views and positions of this website. If you have more insights, please feel free to contribute and share.

Share To

Network Security

Wechat

© 2024 shulou.com SLNews company. All rights reserved.

12
Report