]]> ollydbg鎻掍歡錛歁yInfo--澶囦喚鍜屾仮澶?鏍囩/娉ㄩ噴/int3鏂偣淇℃伅http://m.shnenglu.com/flyinghearts/archive/2010/07/15/120468.htmlflyingheartsflyingheartsThu, 15 Jul 2010 12:04:00 GMThttp://m.shnenglu.com/flyinghearts/archive/2010/07/15/120468.htmlhttp://m.shnenglu.com/flyinghearts/comments/120468.htmlhttp://m.shnenglu.com/flyinghearts/archive/2010/07/15/120468.html#Feedback0http://m.shnenglu.com/flyinghearts/comments/commentRss/120468.htmlhttp://m.shnenglu.com/flyinghearts/services/trackbacks/120468.html 鏍囩/娉ㄩ噴錛?br /> 鏀寔涓枃銆?br /> 鏀寔闈炰唬鐮佹鐨勬爣絳?娉ㄩ噴鐨勫浠藉拰鎭㈠銆?br /> 鏀寔鍒犻櫎褰撳墠妯″潡闈炰唬鐮佹鐨勬敞閲娿?br /> 鏂囦歡鏍煎紡錛?nbsp; L/C address name 濡傦細 L 40227F a label 榪欐槸涓涓爣絳?br /> C 40227F a commnet 榪欐槸涓涓敞閲?br /> int3鏂偣錛?br /> 鏀寔澶囦喚“鏉′歡璁板綍鏂偣”鐨勪俊鎭拰璇ユ柇鐐瑰鐨勬敞閲婏細 鏀寔鍒犻櫎鎵鏈夋柇鐐廣傦紙dll涓殑鏂偣鍦ㄩ噸鍚悗浼氭仮澶嶏紝蹇呴』鍒犻櫎瀵瑰簲鐨剈dd鏂囦歡銆俹d鐨刡ug錛燂級 鏂囦歡鏍煎紡錛?nbsp; B "fn" A/R address E/D passcount comment S condition S expression S explanation S explanation N B錛氳〃紺烘柇鐐廣?br /> fn涓烘枃浠跺悕銆? A/R 琛ㄧず鍚庨潰鐨勫湴鍧鏄粷瀵?鐩稿鍦板潃 E/D 嬋媧?紱佹璇ユ柇鐐?br /> passcount 蹇界暐嬈℃暟錛屼竴鑸柇鐐歸兘鏄? comment 鏂偣澶勭殑娉ㄩ噴 S 鍒嗛殧絎︼紝涓洪伩鍏嶄笌鍚庨潰鐨?#8220;鏉′歡”涓殑瀛楃鍐茬獊錛屽彇涓涓笉鍙瀛楃'\x1e' 銆?br /> condition 鏂偣涓柇鏉′歡 expression 琛ㄨ揪寮?br /> explanation 璇存槑 plugcmd 浼犵粰鎻掍歡鐨勫懡浠?錛堣繖鍑犱釜璇峰弬鑰?shift + F4 寮瑰嚭鐨勬潯浠惰褰曟柇鐐瑰璇濇銆傦級 N 鍓嶉潰鐨凷鍒嗛殧絎︼紝鍐嶅姞涓婃崲琛岀錛屽嵆 "\x1e\n" 錛堣娉ㄦ剰錛屽垎闅旂S涓巆ondition/expression/explanation/explanation榪欏嚑涓箣闂村彧鑳芥湁涓涓垎闅旂錛?br /> 榪欎釜瀛楃鍙互鏄換鎰忓瓧絎︼紙鏈濂借涓虹┖鏍鹼級錛屽湪璇誨彇鏃惰繖涓瓧絎︿細琚拷鐣ャ?br /> 濡傚湪涓嬮潰鏈鍚庝竴涓緥瀛愶紝 涔嬪悗鐨勭涓涓瓧絎︼紙絀烘牸錛変細琚拷鐣ャ?br /> 鍚屾牱passcount涓巆omment涔嬮棿銆乪xplanation涓嶯涔嬮棿涔熷彧鑳芥湁涓涓垎闅旂銆?br /> 鍏跺畠鐨勫嚑涓箣闂達紝鍙互鐢ㄥ嚑涓┖鏍兼垨鍒惰〃絎﹂殧寮銆傦級
渚嬪瓙錛?br /> B "abc.exe" A 00402253 E B "abc.exe" A 00402253 E 0 B "abc.dll" R 0000108A D 0 B "test.exe" A 00402265 E 0 This is a comment. B "test.exe" A 00402265 E 0 This is a comment. B "test.exe" A 0040227F E 0 a comment eax == 0