Windows 7 x64和OllyDbg 1.10
我刚开始学习调试技术，并尝试使用OllyDbg调试名为'crack_me.exe'的演示程序。 但我遇到的问题如下：
我在'crack_me.exe'中设置断点并按F9运行程序，但Windows提示对话（我的操作系统是中文）：
一般意义： crack_me.exe已停止工作。 Windows可以连接到Internet并找到此问题的解决方案。
连接到Internet以查找解决方案并关闭程序 关闭程序 调试程序
如果我选择第3个选项，那么Windows会说：
一般意义： 调试器已附加到crack_me.exe，但调试器未设置为调试未处理的异常。 如果要调试此异常，则必须分离当前的调试器。
我选择忽略Ollydbg设置的所有异常，如下图所示：
我只是想知道为什么会出现这个问题以及如何解决它。 所有答复都是预期的。 谢谢。
奇怪的是，今天这个问题再次发生，即使使用相同的应用程序，crack_me.exe也是如此。 我这次不安装任何插件，但Windows仍警告crack_me.exe（与其他应用程序相同）崩溃。 为什么昨天Olly工作正常，今天问题再次发生？
Windows 7 x64 & OllyDbg 1.10
I just start to learn debugging technology, and try to debug a demo programm called 'crack_me.exe' using OllyDbg. But I meet with a problem as follows:
I set a breakpoint in 'crack_me.exe' and press F9 to run the program, but Windows alert a dialogue (My OS is in Chinese):
General meanning: crack_me.exe has stopped work. Windows can connect to Internet and find a solution to this problem.
Connect to Internet to find a solution and close the program Close the program Debug the program
If I choose the 3rd option, then Windows say:
General meanning: A debugger has attached to crack_me.exe, but the debugger isn't set to debug the unhandled exception. If you want to debug this exception, you must detach the current debugger.
I have chosen to ignore all exceptions Ollydbg settings, as shown in following figure:
I just want to know why this problem happens and how to fix it. All replies are expected. Thank you.
It's weird that today this problem happens again, even with the same app, crack_me.exe. I DO NOT install any plugin this time but Windows still alerts that crack_me.exe(same as other apps) crashes. Why yesterday Olly works normally and today the problem happened again ?
最满意答案
首先，确保您以管理员身份运行ollydbg（我通过资源管理器中的属性对话框全局提供了我的olly exe管理员权限）。
其次，最重要的是，您还需要关闭SSE寄存器的检查（这需要在Windows 7 / Vista WOW64下无法运行的代码注入），可以通过选项菜单 - >调试选项进行访问（ ctrl + o ） - >寄存器选项卡 - >解码SSE寄存器。 我还建议取消Decode Registers For Any IP，当这两个选项都被禁用时，在任何基于Vista / Win7内核的操作系统下都能为我工作。
此外，请确保您没有使用任何插件，大多数插件与Windows 7 WOW64不兼容，但它们通常会导致崩溃，当您再次工作时，然后可以逐个添加插件，验证他们确实工作。
Firstly, make sure you are running ollydbg as an administrator (I gave my olly exe admin privileges globally via the properties dialog in explorer).
Secondly, and most importantly, you also need to turn off inspection of SSE registers (which requires code injects that don't work under Windows 7/Vista WOW64), the setting for this can be access via the Options Menu -> Debugging Options (ctrl + o) -> Registers Tab -> Decode SSE Registers. I'd also advise taking off Decode Registers For Any IP, when once both these options where disabled, olly work for me under any Vista/Win7 kernel based OS).
Also, make sure you aren't using any plugins, most are not compatible with Windows 7 WOW64, but they should generally lead to crashes on starting olly, when you have olly working again, then one can add the plugins one by one, validating that they actually work.
更多推荐
发布评论