OllyDbg 在 Windows 7 x64 中不起作用

声明:本页面是StackOverFlow热门问题的中英对照翻译,遵循CC BY-SA 4.0协议,如果您需要使用它,必须同样遵循CC BY-SA许可,注明原文地址和作者信息,同时你必须将它归于原作者(不是我):StackOverFlow 原文地址: http://stackoverflow.com/questions/10773365/
Warning: these are provided under cc-by-sa 4.0 license. You are free to use/share it, But you must attribute it to the original authors (not me): StackOverFlow

提示:将鼠标放在中文语句上可以显示对应的英文。显示中英文
时间:2020-09-09 09:32:59  来源:igfitidea点击:

OllyDbg doesn't work in Windows 7 x64

windowsdebuggingprocesscrackingollydbg

提问by Memory

Windows 7 x64 & OllyDbg 1.10

Windows 7 x64 和 OllyDbg 1.10

I just start to learn debugging technology, and try to debug a demo programm called 'crack_me.exe' using OllyDbg. But I meet with a problem as follows:

我刚开始学习调试技术,并尝试使用 OllyDbg 调试一个名为“crack_me.exe”的演示程序。但我遇到了如下问题:

I set a breakpoint in 'crack_me.exe' and press F9 to run the program, but Windows alert a dialogue (My OS is in Chinese):
Crack me crashh

我在'crack_me.exe'中设置了一个断点并按F9运行该程序,但Windows提示一个对话框(我的操作系统是中文的):
让我崩溃

General meanning:
crack_me.exe has stopped work.
Windows can connect to Internet and find a solution to this problem.

  • Connect to Internet to find a solution and close the program
  • Close the program
  • Debug the program

一般
含义:crack_me.exe 已停止工作。
Windows 可以连接到 Internet 并找到解决此问题的方法。

  • 连接到互联网以找到解决方案并关闭程序
  • 关闭程序
  • 调试程序

If I choose the 3rd option, then Windows say: enter image description here

如果我选择第三个选项,则 Windows 会说: 在此处输入图片说明

General meanning:
A debugger has attached to crack_me.exe, but the debugger isn't set to debug the unhandled exception. If you want to debug this exception, you must detach the current debugger.

一般含义:
调试器已附加到crack_me.exe,但调试器未设置为调试未处理的异常。如果要调试此异常,则必须分离当前调试器。

I have chosen to ignore all exceptions Ollydbg settings, as shown in following figure: enter image description here

我选择忽略Ollydbg设置的所有异常,如下图: 在此处输入图片说明

I just want to know why this problem happens and how to fix it. All replies are expected. Thank you.

我只想知道为什么会出现这个问题以及如何解决它。期待所有回复。谢谢你。



It's weird that today this problem happens again, even with the same app, crack_me.exe. I DO NOT install any plugin this time but Windows still alerts that crack_me.exe(same as other apps) crashes. Why yesterday Olly works normally and today the problem happened again ?

很奇怪,今天这个问题又发生了,即使使用相同的应用程序,crack_me.exe。这次我没有安装任何插件,但 Windows 仍然会提醒crack_me.exe(与其他应用程序相同)崩溃。为什么昨天 Olly 工作正常,今天又出现问题?

回答by Necrolis

Firstly, make sure you are running ollydbg as an administrator (I gave my olly exe admin privileges globally via the properties dialog in explorer).

首先,确保您以管理员身份运行 ollydbg(我通过资源管理器中的属性对话框全局授予了我的 olly exe 管理员权限)。

Secondly, and most importantly, you also need to turn off inspection of SSE registers (which requires code injects that don't work under Windows 7/Vista WOW64), the setting for this can be access via the Options Menu -> Debugging Options (ctrl+ o) -> Registers Tab -> Decode SSE Registers. I'd also advise taking off Decode Registers For Any IP, when once both these options where disabled, olly work for me under any Vista/Win7 kernel based OS).

其次,最重要的是,您还需要关闭 SSE 寄存器的检查(这需要在 Windows 7/Vista WOW64 下不起作用的代码注入),可以通过选项菜单 -> 调试选项访问此设置(ctrl+ o) -> 寄存器选项卡 -> 解码 SSE 寄存器。我还建议取消对任何 IP 的解码寄存器,一旦这两个选项都被禁用,olly 在任何基于 Vista/Win7 内核的操作系统下对我有用)。

Also, make sure you aren't using any plugins, most are not compatible with Windows 7 WOW64, but they should generally lead to crashes on starting olly, when you have olly working again, then one can add the plugins one by one, validating that they actually work.

另外,确保你没有使用任何插件,大多数与Windows 7 WOW64不兼容,但它们通常会导致启动olly时崩溃,当你再次运行olly时,然后可以一一添加插件,验证他们确实有效。

回答by 123onetwothree

I know it's late answer :)) but for people who gets this error is the options under Debugging Options (ALT + O) -> Exceptions and uncheck "Single-Step break" and "Ignore also following custom exceptions or rages" ...

我知道这是迟到的答案 :)) 但是对于收到此错误的人来说是调试选项(ALT + O)-> 异常下的选项并取消选中“单步中断”和“也忽略自定义异常或愤怒”......

回答by invarbrass

OllyDbg works fine on Windows 7 x64 & 2008R2. It seems the problem lies with the crackme app - which is crashing.

OllyDbg 在 Windows 7 x64 和 2008R2 上运行良好。看来问题出在crackme 应用程序上——它正在崩溃。

Perhaps you should try olly with other 32-bit apps (notepad2 or other simple application) and see if olly is indeed the source of problem...

也许你应该用其他 32 位应用程序(notepad2 或其他简单的应用程序)尝试 olly,看看 olly 是否确实是问题的根源......