Command supported by the command line plug-in (zz)

Source: Internet
Author: User

Let's say a few times. I just learned how to crack it a few days ago. Excellent in the Forum Article It helped me a lot. However, when I use OD, I do not use command lines to break down the function. Although the OD command line supports fuzzy search, it still does not feel very convenient, So I sorted out the commands supported by the OD and sent them up. I like to help you with your learning.
? The/calc expression calculates the given expression. Note that the value involved in calculation is in hexadecimal notation by default.
A address expression. The string is assembled at the specified address. I do not understand the usage of this command. Please study it on your own
AC analysis Code
The ASM string displays the Assembly command machine code (the command syntax with an address is "ASM command; Address ")
The at/follow address expression is used for disassembly at the specified address, that is, address disassembly In the Disassembly window.
BC address expression clear breakpoint
Conditional interruption of the BP string (conditional breakpoint)
Clear all called breakpoints with BPD strings
BPX string sets a breakpoint on all calls
BRK view breakpoint window
C Address, the string is annotated at the address
Close to close the executable file for debugging
CPU view CPU window
CS view call stack
D/dump address expression is used to store the specified address, that is, the content of the specified address is displayed in the current mode of the data window.
The DA address expression is saved as an disassembly code. That is, in the data window, the specified address is displayed in the disassembly code.
The dasm string displays the Assembly command corresponding to the machine code
The DB address expression is converted to memory in hexadecimal byte format. That is, the specified address content is displayed in hexadecimal format in the data window.
The DC address expression uses ASCII format for storage. That is, the specified address content is displayed in ASCII format in the data window.
The DD address expression is converted to the stack format. That is, the specified address content is displayed in the stack format in the data window.
The du address expression is converted to the unicode format. That is, the specified address content is displayed in unicode format in the data window.
The DW address expression is converted into a hexadecimal Word format. In the data window, the specified address content is displayed in hexadecimal format.
Exit to exit ollydbg
Fr search for the selected command/address reference
G [Address expression] Run to address
GE [Address expression] runs to the address and ignores the exception.
H/help string to view the help of API functions
HD [Address expression] Clear hardware breakpoint
He address expression sets the hardware execution breakpoint
HR address expression sets hardware access breakpoint
HW address expression sets the hardware write breakpoint
L address expression. The string is tagged at the address.
Log view record window
Execute macro commands in MAC strings
MD clears memory breakpoints
Mem view memory window
MoD view Module window
Mr address, [expression] memory breakpoint at access time
MW address, [expression] memory breakpoint at write time
Open a executable file for debugging
Opt open the call option setting window
Orig is decompiled on EIP, that is, the Assembly window content is returned to the Command executed of course.
OSC string-based ollyscript execution
Pause pause execution Program Debugging
Quit exits ollydbg
RST re-runs the current program
Run the program
S/Si: One-Step incoming call
SN searches for the name (TAG) in the current Module)
So step-by-step call
Sob scans the target file
The STK address expression goes to the address in the stack. That is, the specified address is displayed in the stack window.
Stop stop running program debugging
T/Ti [Address expression] Tracking to the address
TC string tracking continues until conditions are met
To [Address expression] Tracking Step through address
TOC string tracking step by until conditions are met
Tr runs until it returns
Run tu until user code
W/watch expression open monitoring window and monitoring expression
This is my own arrangement and understanding. Please correct us if you have any improper information.

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.