The first thing to notice is that the EP is at address 401000, as we can see in the first column. Olly will do analysis (if you can read it fast enough in the bottom bar of Olly’s display) and will stop at the programs Entry Point (EP): In this case, load “FirstProgram.exe”, downloaded from this site.
You can either drag and drop the file onto Olly’s disassmebly window, or click the load icon on the top far left and choose the file. The first step is to load the intended binary into Olly. If you would rather use the original Olly, you can download it here. They can be downloaded directly here or from the tutorials page. They include a simple binary that we will be using in olly, an Olly cheat sheet, my version of Olly with some cosmetic changes, and a new ini file that you can replace Olly’s default init file with that will help with new users (thanks go out to the immortal Lena151 for this). You can download the files and PDF version of this tutorial on the tutorials page. I am including some files in this tutorial.
Additional topics not covered in this tutorial will be discussed in later tutorials, so that by the end, you should have a pretty good grasp of Olly. That being said, this tutorial will give you a brief overview. Olly has many functions and the only way to truly learn them all is to experiment and practice. In this tutorial, I will attempt to introduce you to using OllyDBG.
0 kommentar(er)
