OllyDbg的左下方窗格显示什么? [英] What does the lower left pane in OllyDbg displays?

问题描述

我已经使用NASM汇编了以下代码:

I have assembled the following code using NASM:

global _start

section .data
    var1 DD 0xA1A2A3A4        ; 4 bytes
    var2 DD 0xB1B2B3B4        ; 4 bytes
section .bss
    var3: RESD 1              ; 4 bytes

section .text
_start:
    mov DWORD [var3], 0xC1C2C3C4

我在OllyDbg中打开文件，并使其执行指令:mov DWORD [var3], 0xC1C2C3C4.

I opened the file in OllyDbg and made it execute the instruction: mov DWORD [var3], 0xC1C2C3C4.

这是执行以下指令后OllyDbg左下方窗格的状态:

This is the state of the lower left pane in OllyDbg after executing this instruction:

我想知道的是左下窗格显示什么?它显示进程的数据部分和bss部分吗?

What I want to know is what does the lower left pane displays? does it display the data section and the bss section of a process?

如果是这样，那么进程的数据部分的大小是否取决于在该数据部分中分配的字节数(在本例中为8个字节)?

If so, then is the size of the data section of a process depends on how many bytes allocated in the data section (in this case 8 bytes)?

推荐答案

下部显示Memory，因此您可以要求它显示所需的任何部分.默认情况下，它专注于数据部分.您可以通过在Olly中打开Memory Map窗口并检查地址来进行确认.

The lower section display Memory so you can ask it do display whatever portion you want. By default it focuses on data section. You can check that by opening Memory Map window in Olly and checking the addresses.

但是，正如我所说，您可以使用转到"命令并要求它向您显示任何映射的零件.至于最小尺寸，我会说即使您的尺寸较小，默认的最小尺寸也可能是1000h.

But, as I said, you can use 'Go to' command and ask this to show you any mapped part. As for the minimum size I would say that the probably the default minimum is 1000h even if you have less.

这篇关于OllyDbg的左下方窗格显示什么?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！