OllyDbg incorrectly replaces lines with “jmp 71B00000” in Win7x64

谁说我不能喝 提交于 2019-12-11 09:51:31

问题


I had spent a lot of time to find a solution for this problem. As you know OllyDbg is a popular debugger but has a problem on Win7 x64.

every file (with different compilers!) that I open with the olly it replace some first lines with:

jmp 71B00000

some advices like "comodo sandbox, compatibility" does't work and I don't want to use virtual machine.


回答1:


I had the same exact issue and managed to fix it. If you do indeed have comodo firewall installed, you have to uninstall it, reboot, then reinstall it. Make sure you NEVER, EVER turn on sandboxing again. For some reason, even with sandbox off, after its been activated on win7 x64, it STILL messes around with your software.




回答2:


According to the OllyDbg homepage and the changelog of the current version, OllyDbg does not support debugging 64-bit executables yet. It also seems that it has received no testing on Windows 64-bit, although it might still work for 32-bit executables.

It seems that for the time being you are out of luck...



来源:https://stackoverflow.com/questions/11917336/ollydbg-incorrectly-replaces-lines-with-jmp-71b00000-in-win7x64

标签
易学教程内所有资源均来自网络或用户发布的内容,如有违反法律规定的内容欢迎反馈
该文章没有解决你所遇到的问题?点击提问,说说你的问题,让更多的人一起探讨吧!