I have learned ollydbg several monthes, but don't know how to use "Trace" in ollydbg, such as "trace into", "trace out" and so on, can anybody tell me.
thanks
when use Trace into, then in Trace window you will see all of the command this program has worked through, then use "profile", will see which system function has been called, it's great.
if anybody has other suggestions, please let me know, thanks.
yes, I'm an english teacher before i learn computer programming, I have read this article 2 time, the first time is 2 month ago, the second time is yesterday.
But in that article only tell little about "TRACE", don't tell why use at that situation.
so I hope somebody can expain thoroughly, and give more details, and give us a simple example, perhaps this example can be written by masm, or vc, or even tc.
I know thoroughly about this example, it will call these fuctions:
posvi = (OSVERSIONINFOA *)_alloca(sizeof(OSVERSIONINFOA));
(void)GetVersionExA(posvi);
managedapp = check_managed_app();
if ( !_heap_init(0) ) /* initialize heap */
_RTC_Initialize();
if ( _ioinit() < 0 ) /* initialize lowio */
....
main
...
but I want to use ollydbg to analyze, then next time if i meet a complex one, i can use these method to analyze it too, for example app based on dialog, or MDI
sorry, my side is a english os, but i can read chinese. very sorry administrator, because you don't like english, i will shut up, i only read other people's option.
and here's a excellent web site, thanks for the knowledge you have brought to us
I understand, like F10 and F11 in vc++, but i want to know the whole process of the program(besides these 3 system dlls, user32.dll, kernel32.dll, gdi32.dll), so can i use TRACE to know all of the user side code, not system side code happened in this program
I have understood this article "http://www.ollydbg.de/Tut_rtr.htm", but don't know how to get the whole code of user space(not system space), i'm not hurry, if you're familar with this question hope you can give me an answer tomorrow or later.
because i'm more interested in user namespace code, and hope can dig more at there.
if cann't use TRACE, please tell me another method.
最初由 ikohl 发布 I have understood this article "http://www.ollydbg.de/Tut_rtr.htm", but don't know how to get the whole code of user space(not system space), i'm not hurry, if you're familar with this question hope you can give me an answer tomorrow or later. because i'm more interested in user namespace code, and hope can dig more at there. if cann't use TRACE, please tell me another method.
