汇编/分析调试器 OllyDbg入门完全教程

OllyDbg入门完全教程

OllyDbg 是一种具有可视化界面的 32 位汇编—分析调试器。它的特别之处在于可以在 没有源代码时解决问题，并且可以处理其它编译器无法解决的难题。

第一章 概述.....................................................................................................................................1 

第二章 组件.....................................................................................................................................5 

一、一般原理［General prnciples］................................................................................. 5 

二、反汇编器［Disassembler］........................................................................................... 8 

三、分析器［Analysis］....................................................................................................... 9 

四、Object 扫描器［Object scanner］............................................................................ 12 

五、Implib 扫描器 ［Implib scanner］.......................................................................... 12 

第三章 OllyDbg 的使用................................................................................................................ 13 

一、如何开始调试［How to start debugging session］............................................. 13 

二、CPU 窗口［CPU window］............................................................................................. 14 

三、断点［Breakpoints］................................................................................................... 14 

四、数据窗口［Dump］......................................................................................................... 15

 五、可执行模块窗口［Executable modules window］................................................... 16 

六、内存映射窗口［Memory map window］....................................................................... 17 

七、监视与监察器［Watches and inspectors］............................................................. 19 

八、线程［Threads］........................................................................................................... 19

 九、调用栈［Call stack］................................................................................................. 20 

十、调用树［Call tree］................................................................................................... 21 

十一、选项［Options］....................................................................................................... 21 

十二、搜索［Search］......................................................................................................... 22 

十三、自解压文件［Self—extracting (SFX) files］................................................. 22 

十四、单步执行与自动执行［Step—by—step execution and animation］..............23 

十五、Hit 跟踪［Hit trace］............................................................................................ 23 

十六、Run 跟踪［Run trace］........................................................................................... 24 

十七、 快捷键....................................................................................................................... 26 

十八、插件［Plugins］....................................................................................................... 29 

十九、技巧提示［Tips and tricks］............................................................................... 29 

第四章 其他功能........................................................................................................................... 30 

一、调试独立的 DLL［Debugging of stand—alone DLLs］.......................................... 30 

二、解码提示［Decoding hints］..................................................................................... 32 

三、表达式赋值［Evaluation of expressions］........................................................... 32 

四、自定义函数描述［Custom function descriptions］............................................. 34