xiaofu
Ollydbg我只试了1.0的可以用,其他版本的OD没试过
我在win10X64上,总是显示如下信息:
bytes pages size description
--------- ----- ---- --------------------------------------------
262144 32 8192 allocating memory for b-tree...
65536 8 8192 allocating memory for virtual array...
262144 32 8192 allocating memory for name pointers...
-----------------------------------------------------------------
589824 total memory allocated
Loading processor module C:\Program Files\IDA 7.2\procs\pc.dll for metapc...OK
Loading type libraries...
Autoanalysis subsystem has been initialized.
Database for file 'CRACKME.EXE' has been loaded.
Hex-Rays Decompiler plugin has been loaded (v7.0.0.170914)
License: 57-C328-9175-B2 bbs.pediy.com (1 user)
The hotkeys are F5: decompile, Ctrl-F5: decompile all.
Please check the Edit/Plugins menu for more informaton.
IDAPython Hex-Rays bindings initialized.
--------------------------------------------------------------------------------------
Python 2.7.10 (default, May 23 2015, 09:44:00) [MSC v.1500 64 bit (AMD64)]
IDAPython v1.7.0 final (serial 0) (c) The IDAPython Team <idapython@googlegroups.com>
--------------------------------------------------------------------------------------
[sync] form create
Note: importing 'sip' module into <module '__main__' (built-in)>
Note: importing 'QtWidgets' module into <module '__main__' (built-in)>
[sync] default idb name: CRACKME.EXE
[*] sync enabled
[*] init_broker
[*] cmdline: "C:\Python27\python.exe" -u "C:\Program Files\IDA 7.2\plugins\retsync\broker.py" --idb "CRACKME.EXE"
[sync] name CRACKME.EXE
[sync] module base 0x400000
[sync] hexrays not available
[*] broker new state: Starting
[*] broker new state: Running
[*] broker started
Shortcut F2 is used for two actions:
@IDC:py_hotkeycb_0000023C35F01480
BreakpointToggle
Shortcut for "BreakpointToggle" will be disabled.
Shortcut F2 is used for two actions:
@IDC:py_hotkeycb_0000023C35F01480
hexview:EditOrApplyChanges
Shortcut for "hexview:EditOrApplyChanges" will be disabled.
Shortcut Ctrl+F2 is used for two actions:
@IDC:py_hotkeycb_0000023C36421B88
ProcessExit
Shortcut for "ProcessExit" will be disabled.
Shortcut Ctrl+F1 is used for two actions:
@IDC:py_hotkeycb_0000023C36421C18
ExternalHelp
Shortcut for "ExternalHelp" will be disabled.
Shortcut Alt+F2 is used for two actions:
@IDC:py_hotkeycb_0000023C36421C60
ManualInstruction
Shortcut for "ManualInstruction" will be disabled.
Shortcut F11 is used for two actions:
@IDC:py_hotkeycb_0000023C36421D38
FullScreen
Shortcut for "FullScreen" will be disabled.
Shortcut Ctrl+F1 is used for two actions:
@IDC:py_hotkeycb_0000023C36421D80
@IDC:py_hotkeycb_0000023C36421C18
"@IDC:py_hotkeycb_0000023C36421C18" will be deleted.
[sync] restarting broker
[*] << broker << dispatcher not found, trying to run it
[*] << broker << dispatcher now runs with pid: 6512
[*] << broker << connected to dispatcher
[*] << broker << listening on port 49598
[*] broker finished
[*] sync disabled
[*] sync enabled
[*] init_broker
[*] cmdline: "C:\Python27\python.exe" -u "C:\Program Files\IDA 7.2\plugins\retsync\broker.py" --idb "CRACKME.EXE"
[sync] name CRACKME.EXE
[sync] module base 0x400000
[sync] hexrays not available
[*] broker new state: Starting
[*] broker new state: Running
[*] broker started
Shortcut Ctrl+F1 is used for two actions:
@IDC:py_hotkeycb_0000023C36433288
@IDC:py_hotkeycb_0000023C36433120
"@IDC:py_hotkeycb_0000023C36433120" will be deleted.
[*] << broker << dispatcher not found, trying to run it
[*] << broker << dispatcher now runs with pid: 4672
[*] << broker << connected to dispatcher
[*] << broker << listening on port 49603
[*] << broker << dispatcher connection error, quitting
[*] broker new state: Not running
[*] broker finished
[sync] idb is disabled
[*] sync enabled
[*] init_broker
[*] cmdline: "C:\Python27\python.exe" -u "C:\Program Files\IDA 7.2\plugins\retsync\broker.py" --idb "CRACKME.EXE.idb"
[sync] name CRACKME.EXE
[sync] module base 0x400000
[sync] hexrays not available
[*] broker new state: Starting
[*] broker new state: Running
[*] broker started
Shortcut Ctrl+F1 is used for two actions:
@IDC:py_hotkeycb_0000023C36433798
@IDC:py_hotkeycb_0000023C36433630
"@IDC:py_hotkeycb_0000023C36433630" will be deleted.
[sync] restarting broker
[*] broker finished
[*] sync disabled
[*] sync enabled
[*] init_broker
[*] cmdline: "C:\Python27\python.exe" -u "C:\Program Files\IDA 7.2\plugins\retsync\broker.py" --idb "CRACKME.EXE.idb"
[sync] name CRACKME.EXE
[sync] module base 0x400000
[sync] hexrays not available
[*] broker new state: Starting
[*] broker new state: Running
[*] broker started
Shortcut Ctrl+F1 is used for two actions:
@IDC:py_hotkeycb_0000023C36433D38
@IDC:py_hotkeycb_0000023C36433BD0
"@IDC:py_hotkeycb_0000023C36433BD0" will be deleted.
[*] << broker << dispatcher not found, trying to run it
[*] << broker << dispatcher now runs with pid: 4216
[*] << broker << connected to dispatcher
[*] << broker << listening on port 49613
[-] Drop the request because idb is not enabled
[*] << broker << dispatcher connection error, quitting
[*] broker new state: Not running
[*] broker finished
[sync] idb is disabled