【原创】ollydbg 入门系列（五）－消息断点及 run 跟踪 - 看雪软件安全论坛.mht

OD入门

background=3Dhttp://bbs.pediy.com/images/pediy_style/misc/line_bg.gif><IM=
G=20
      height=3D8 =
src=3D"http://bbs.pediy.com/images/pediy_style/misc/c.gif" width=3D1=20
      border=3D0></TD></TR><!--
<TR><TD width=3D"100%" background=3D/vbb/christmas/light.gif><IMG =
height=3D18 src=3D"images/pediy_style/misc/c.gif" width=3D18 =
border=3D0></TD></TR>
--></TBODY></TABLE><!-- /logo --><!-- content table --><!-- open content =
container -->
<DIV align=3Dcenter>
<DIV class=3Dpage style=3D"WIDTH: 100%; TEXT-ALIGN: left">
<DIV=20
style=3D"PADDING-RIGHT: 10px; PADDING-LEFT: 10px; PADDING-BOTTOM: 0px; =
PADDING-TOP: 0px">
<SCRIPT type=3Dtext/javascript>
<!--
function log_out()
{
	ht =3D document.getElementsByTagName("html");
	ht[0].style.filter =3D =
"progid:DXImageTransform.Microsoft.BasicImage(grayscale=3D1)";
	if =
(confirm('=E6=82=A8=E7=A1=AE=E5=AE=9A=E8=A6=81=E9=80=80=E5=87=BA=E8=AE=BA=
=E5=9D=9B=EF=BC=9F'))
	{
		return true;
	}
	else
	{
		ht[0].style.filter =3D "";
		return false;
	}
}
//-->
</SCRIPT>
<BR><!-- nav buttons bar -->
<DIV align=3Dcenter>
<TABLE class=3Dtborder style=3D"BORDER-TOP-WIDTH: 0px" cellSpacing=3D0 =
cellPadding=3D5=20
width=3D"100%" align=3Dcenter border=3D0>
  <TBODY>
  <TR align=3Dmiddle>
    <TD class=3Dvbmenu_control><A =
href=3D"http://bbs.pediy.com/register.php"=20
      rel=3Dnofollow>=E6=B3=A8=E5=86=8C=E8=B4=A6=E5=8F=B7</A></TD>
    <TD class=3Dvbmenu_control><A accessKey=3D5=20
      =
href=3D"http://bbs.pediy.com/faq.php">=E8=AE=BA=E5=9D=9B=E5=B8=AE=E5=8A=A9=
</A></TD>
    <TD class=3Dvbmenu_control><A =
href=3D"http://bbs.pediy.com/googlesearch.php"=20
      rel=3Dnofollow>=E6=90=9C=E7=B4=A2</A></TD>
    <TD class=3Dvbmenu_control><A=20
      =
href=3D"http://bbs.pediy.com/memberlist.php">=E4=BC=9A=E5=91=98=E5=88=97=E8=
=A1=A8</A></TD><!-- =E4=BF=AE=E6=94=B9=E8=8F=9C=E5=8D=95 --><!-- =
/=E4=BF=AE=E6=94=B9=E8=8F=9C=E5=8D=95 -->
    <TD class=3Dvbmenu_control><A=20
      =
href=3D"http://bbs.pediy.com/calendar.php">=E6=97=A5=E5=8E=86=E4=BA=8B=E4=
=BB=B6</A></TD>
    <TD class=3Dvbmenu_control><A onclick=3D"return log_out()"=20
      =
href=3D"http://bbs.pediy.com/login.php?do=3Dlogout&amp;logouthash=3D">=E9=
=80=80=E5=87=BA=E8=AE=BA=E5=9D=9B</A></TD></IF></TR></TBODY></TABLE></DIV=
><!-- breadcrumb, login, pm info -->
<TABLE class=3Dtborder cellSpacing=3D1 cellPadding=3D5 width=3D"100%" =
align=3Dcenter=20
border=3D0>
  <TBODY>
  <TR>
    <TD class=3Dalt1 width=3D"100%">
      <TABLE cellSpacing=3D0 cellPadding=3D0 border=3D0>
        <TBODY>
        <TR vAlign=3Dbottom>
          <TD><A onclick=3D"history.back(1); return false;"=20
            href=3D"http://bbs.pediy.com/showthread.php?t=3D21532#"><IMG =
alt=3D=E8=BF=94=E5=9B=9E=20
            =
src=3D"http://bbs.pediy.com/images/pediy_style/misc/navbits_start.gif"=20
            border=3D0></A></TD>
          <TD>&nbsp;</TD>
          <TD width=3D"100%"><SPAN class=3Dnavbar><A accessKey=3D1=20
            =
href=3D"http://bbs.pediy.com/index.php">=E7=9C=8B=E9=9B=AA=E8=BD=AF=E4=BB=
=B6=E5=AE=89=E5=85=A8=E8=AE=BA=E5=9D=9B</A></SPAN> <SPAN=20
            class=3Dnavbar>&gt; <A=20
            =
href=3D"http://bbs.pediy.com/forumdisplay.php?f=3D115"><B>=E5=88=9D=E5=AD=
=A6=E8=80=85=E5=9B=AD=E5=9C=B0=20
            </B></A></SPAN><SPAN class=3Dnavbar>&gt; <A=20
            =
href=3D"http://bbs.pediy.com/forumdisplay.php?f=3D89">=E3=80=8E=E5=9F=BA=E7=
=A1=80=E8=B5=84=E6=96=99=E5=8C=BA=E3=80=8F</A></SPAN>=20
          </TD></TR>
        <TR>
          <TD class=3Dnavbar style=3D"PADDING-TOP: 1px" colSpan=3D3><A=20
            href=3D"http://bbs.pediy.com/showthread.php?t=3D21532"><IMG=20
            class=3Dinlineimg alt=3D=E5=88=B7=E6=96=B0=E6=9C=AC=E9=A1=B5 =

            =
src=3D"http://bbs.pediy.com/images/pediy_style/misc/navbits_finallink.gif=
"=20
            border=3D0></A> =
<STRONG>=E3=80=90=E5=8E=9F=E5=88=9B=E3=80=91OllyDBG =
=E5=85=A5=E9=97=A8=E7=B3=BB=E5=88=97=EF=BC=88=E4=BA=94=EF=BC=89=EF=BC=8D=E6=
=B6=88=E6=81=AF=E6=96=AD=E7=82=B9=E5=8F=8A RUN =E8=B7=9F=E8=B8=AA=20
        </STRONG></TD></TR></TBODY></TABLE></TD>
    <TD class=3Dalt2=20
    style=3D"PADDING-RIGHT: 0px; PADDING-LEFT: 0px; PADDING-BOTTOM: 0px; =
PADDING-TOP: 0px"=20
    noWrap><!-- login form -->
      <FORM=20
      onsubmit=3D"md5hash(vb_login_password, vb_login_md5password, =
vb_login_md5password_utf, 0)"=20
      action=3Dlogin.php?do=3Dlogin method=3Dpost>
      <SCRIPT =
src=3D"http://bbs.pediy.com/clientscript/vbulletin_md5.js?v=3D364"=20
      type=3Dtext/javascript></SCRIPT>

      <TABLE cellSpacing=3D3 cellPadding=3D0 border=3D0>
        <TBODY>
        <TR>
          <TD class=3Dsmallfont noWrap><LABEL =
for=3Dnavbar_username>=E7=94=A8=E6=88=B7=E5=90=8D</LABEL></TD>
          <TD><INPUT class=3Dbginput id=3Dnavbar_username=20
            onfocus=3D"if (this.value =3D=3D =
'=E7=94=A8=E6=88=B7=E5=90=8D') this.value =3D '';" accessKey=3Du=20
            tabIndex=3D101 size=3D10 value=3D=E7=94=A8=E6=88=B7=E5=90=8D =
name=3Dvb_login_username></TD>
          <TD class=3Dsmallfont noWrap colSpan=3D2><LABEL=20
            for=3Dcb_cookieuser_navbar><INPUT id=3Dcb_cookieuser_navbar =
accessKey=3Dc=20
            tabIndex=3D103 type=3Dcheckbox CHECKED value=3D1=20
            =
name=3Dcookieuser>=E8=AE=B0=E4=BD=8F=E4=BF=A1=E6=81=AF</LABEL></TD></TR>
        <TR>
          <TD class=3Dsmallfont noWrap><LABEL =
for=3Dnavbar_password>=E5=AF=86=E7=A0=81</LABEL></TD>
          <TD><INPUT class=3Dbginput id=3Dnavbar_password tabIndex=3D102 =

            type=3Dpassword size=3D10 name=3Dvb_login_password></TD>
          <TD><INPUT class=3Dbutton =
title=3D=E5=9C=A8=E7=99=BB=E5=BD=95=E6=A1=86=E4=B8=AD=E8=BE=93=E5=85=A5=E6=
=82=A8=E7=9A=84=E7=94=A8=E6=88=B7=E5=90=8D=E5=92=8C=E5=AF=86=E7=A0=81=E7=99=
=BB=E5=BD=95=EF=BC=8C=E6=88=96=E8=80=85=E7=82=B9=E5=87=BB=E2=80=9C=E6=B3=A8=
=E5=86=8C=E2=80=9D=E6=8C=89=E9=92=AE=E6=B3=A8=E5=86=8C=E4=B8=80=E4=B8=AA=E6=
=96=B0=E8=B4=A6=E5=8F=B7=E3=80=82 accessKey=3Ds tabIndex=3D104 =
type=3Dsubmit =
value=3D=E7=99=BB=E5=BD=95=E8=AE=BA=E5=9D=9B></TD></TR></TBODY></TABLE><I=
NPUT=20
      type=3Dhidden name=3Ds> <INPUT type=3Dhidden value=3Dlogin =
name=3Ddo> <INPUT=20
      type=3Dhidden name=3Dvb_login_md5password> <INPUT type=3Dhidden=20
      name=3Dvb_login_md5password_utf>=20
</FORM><!-- / login form --></TD></TR></TBODY></TABLE><!-- / breadcrumb, =
login, pm info --><!-- / nav buttons bar -->
<DIV class=3Dsmallfont=20
style=3D"PADDING-RIGHT: 0px; PADDING-LEFT: 0px; PADDING-BOTTOM: 0px; =
PADDING-TOP: 5px"></DIV><!-- NAVBAR POPUP MENUS --><!-- / NAVBAR POPUP =
MENUS --><!-- PAGENAV POPUP -->
<DIV class=3Dvbmenu_popup id=3Dpagenav_menu style=3D"DISPLAY: none">
<TABLE cellSpacing=3D1 cellPadding=3D4 border=3D0>
  <TBODY>
  <TR>
    <TD class=3Dthead =
noWrap>=E8=BD=AC=E5=88=B0=E9=A1=B5=E9=9D=A2...</TD></TR>
  <TR>
    <TD class=3Dvbmenu_option title=3Dnohilite>
      <FORM id=3Dpagenav_form onsubmit=3D"return this.gotopage()" =
action=3Dindex.php=20
      method=3Dget><INPUT class=3Dbginput id=3Dpagenav_itxt size=3D4> =
<INPUT class=3Dbutton id=3Dpagenav_ibtn type=3Dbutton =
value=3D=E6=89=A7=E8=A1=8C>=20
  </FORM></TD></TR></TBODY></TABLE></DIV><!-- / PAGENAV POPUP --><!-- =
=E4=BF=AE=E6=94=B9 : =E6=BB=9A=E5=8A=A8=E5=85=AC=E5=91=8A --><A=20
id=3Dpoststop name=3Dpoststop></A><!-- controls above postbits -->
<TABLE style=3D"MARGIN-BOTTOM: 3px" cellSpacing=3D0 cellPadding=3D0 =
width=3D"100%"=20
border=3D0>
  <TBODY>
  <TR vAlign=3Dbottom>
    <TD class=3Dsmallfont><!-- =
=E4=BF=AE=E6=94=B9=E6=96=B0=E8=B4=B4=E6=8C=89=E9=92=AE  --><!-- =
/=E4=BF=AE=E6=94=B9=E6=96=B0=E8=B4=B4=E6=8C=89=E9=92=AE --><A=20
      =
href=3D"http://bbs.pediy.com/newreply.php?do=3Dnewreply&amp;noquote=3D1&a=
mp;p=3D146358"=20
      rel=3Dnofollow><IMG alt=3D=E5=9B=9E=E5=A4=8D=20
      src=3D"http://bbs.pediy.com/images/pediy_style/buttons/reply.gif"=20
      border=3D0></A></TD>
    <TD align=3Dright>
      <DIV class=3Dpagenav align=3Dright>
      <TABLE class=3Dtborder cellSpacing=3D1 cellPadding=3D3 border=3D0>
        <TBODY>
        <TR>
          <TD class=3Dvbmenu_control style=3D"FONT-WEIGHT: =
normal">=E7=AC=AC1=E9=A1=B5=EF=BC=8C=E5=85=B123=E9=A1=B5</TD>
          <TD class=3Dalt2><SPAN class=3Dsmallfont=20
            title=3D"=E6=98=BE=E7=A4=BA=E7=BB=93=E6=9E=9C=E4=BB=8E 1 =
=E5=88=B0 15 =E5=85=B1=E8=AE=A1 338 =
=E6=9D=A1"><STRONG>1</STRONG></SPAN></TD>
          <TD class=3Dalt1><A class=3Dsmallfont =
title=3D"=E6=98=BE=E7=A4=BA=E7=BB=93=E6=9E=9C=E4=BB=8E 16 =E5=88=B0 30 =
=E5=85=B1=E8=AE=A1 338 =E6=9D=A1"=20
            =
href=3D"http://bbs.pediy.com/showthread.php?t=3D21532&amp;page=3D2">2</A>=
</TD>
          <TD class=3Dalt1><A class=3Dsmallfont =
title=3D"=E6=98=BE=E7=A4=BA=E7=BB=93=E6=9E=9C=E4=BB=8E 31 =E5=88=B0 45 =
=E5=85=B1=E8=AE=A1 338 =E6=9D=A1"=20
            =
href=3D"http://bbs.pediy.com/showthread.php?t=3D21532&amp;page=3D3">3</A>=
</TD>
          <TD class=3Dalt1><A class=3Dsmallfont =
title=3D"=E6=98=BE=E7=A4=BA=E7=BB=93=E6=9E=9C=E4=BB=8E 46 =E5=88=B0 60 =
=E5=85=B1=E8=AE=A1 338 =E6=9D=A1"=20
            =
href=3D"http://bbs.pediy.com/showthread.php?t=3D21532&amp;page=3D4">4</A>=
</TD>
          <TD class=3Dalt1><A class=3Dsmallfont =
title=3D"=E6=98=BE=E7=A4=BA=E7=BB=93=E6=9E=9C=E4=BB=8E 61 =E5=88=B0 75 =
=E5=85=B1=E8=AE=A1 338 =E6=9D=A1"=20
            =
href=3D"http://bbs.pediy.com/showthread.php?t=3D21532&amp;page=3D5">5</A>=
</TD>
          <TD class=3Dalt1><A class=3Dsmallfont =
title=3D"=E6=98=BE=E7=A4=BA=E7=BB=93=E6=9E=9C=E4=BB=8E 76 =E5=88=B0 90 =
=E5=85=B1=E8=AE=A1 338 =E6=9D=A1"=20
            =
href=3D"http://bbs.pediy.com/showthread.php?t=3D21532&amp;page=3D6">6</A>=
</TD>
          <TD class=3Dalt1><A class=3Dsmallfont =
title=3D"=E6=98=BE=E7=A4=BA=E7=BB=93=E6=9E=9C=E4=BB=8E 91 =E5=88=B0 105 =
=E5=85=B1=E8=AE=A1 338 =E6=9D=A1"=20
            =
href=3D"http://bbs.pediy.com/showthread.php?t=3D21532&amp;page=3D7">7</A>=
</TD>
          <TD class=3Dalt1><A class=3Dsmallfont =
title=3D"=E6=98=BE=E7=A4=BA=E7=BB=93=E6=9E=9C=E4=BB=8E 106 =E5=88=B0 120 =
=E5=85=B1=E8=AE=A1 338 =E6=9D=A1"=20
            =
href=3D"http://bbs.pediy.com/showthread.php?t=3D21532&amp;page=3D8">8</A>=
</TD>
          <TD class=3Dalt1><A class=3Dsmallfont =
title=3D"=E6=98=BE=E7=A4=BA=E7=BB=93=E6=9E=9C=E4=BB=8E 121 =E5=88=B0 135 =
=E5=85=B1=E8=AE=A1 338 =E6=9D=A1"=20
            =
href=3D"http://bbs.pediy.com/showthread.php?t=3D21532&amp;page=3D9">9</A>=
</TD>
          <TD class=3Dalt1><A class=3Dsmallfont =
title=3D"=E6=98=BE=E7=A4=BA=E7=BB=93=E6=9E=9C=E4=BB=8E 136 =E5=88=B0 150 =
=E5=85=B1=E8=AE=A1 338 =E6=9D=A1"=20
            =
href=3D"http://bbs.pediy.com/showthread.php?t=3D21532&amp;page=3D10">10</=
A></TD>
          <TD class=3Dalt1><A class=3Dsmallfont =
title=3D"=E6=98=BE=E7=A4=BA=E7=BB=93=E6=9E=9C=E4=BB=8E 151 =E5=88=B0 165 =
=E5=85=B1=E8=AE=A1 338 =E6=9D=A1"=20
            =
href=3D"http://bbs.pediy.com/showthread.php?t=3D21532&amp;page=3D11"><!--=
+10-->11</A></TD>
          <TD class=3Dalt1><A class=3Dsmallfont =
title=3D"=E4=B8=8B=E4=B8=80=E9=A1=B5 - =E7=BB=93=E6=9E=9C=E4=BB=8E 16 =
=E5=88=B0 30 =E5=85=B1=E8=AE=A1 338"=20
            =
href=3D"http://bbs.pediy.com/showthread.php?t=3D21532&amp;page=3D2">&gt;<=
/A></TD>
          <TD class=3Dalt1 noWrap><A class=3Dsmallfont=20
            title=3D"=E6=9C=80=E5=90=8E=E4=B8=80=E9=A1=B5 - =
=E7=BB=93=E6=9E=9C=E4=BB=8E 331 =E5=88=B0 338 =E5=85=B1=E8=AE=A1 338"=20
            =
href=3D"http://bbs.pediy.com/showthread.php?t=3D21532&amp;page=3D23">=E6=9C=
=80=E5=90=8E=20
            <STRONG>=C2=BB</STRONG></A></TD>
          <TD class=3Dvbmenu_control title=3Dshowthread.php?t=3D21532><A =

            =
name=3DPageNav></A></TD></TR></TBODY></TABLE></DIV></TD></TR></TBODY></TA=
BLE><!-- / controls above postbits --><!-- toolbar -->
<TABLE class=3Dtborder style=3D"BORDER-BOTTOM-WIDTH: 0px" =
cellSpacing=3D1=20
cellPadding=3D5 width=3D"100%" align=3Dcenter border=3D0>
  <TBODY>
  <TR>
    <TD class=3Dtcat width=3D"100%">
      <DIV class=3Dsmallfont><!-- =E4=BF=AE=E6=94=B9=E7=B2=BE=E5=8D=8E =
--><IMG class=3Dinlineimg alt=3D=E7=B2=BE=E5=8D=8E=20
      src=3D"http://bbs.pediy.com/images/pediy_style/misc/jhinfo.gif"> =
<!-- /=E4=BF=AE=E6=94=B9=E7=B2=BE=E5=8D=8E --></DIV></TD>
    <TD class=3Dvbmenu_control id=3Dthreadtools noWrap><A accessKey=3D3=20
      =
href=3D"http://bbs.pediy.com/showthread.php?t=3D21532&amp;nojs=3D1#goto_t=
hreadtools">=E4=B8=BB=E9=A2=98=E5=B7=A5=E5=85=B7</A>
      <SCRIPT type=3Dtext/javascript> vbmenu_register("threadtools"); =
</SCRIPT>
       </TD>
    <TD class=3Dvbmenu_control id=3Ddisplaymodes noWrap><A=20
      =
href=3D"http://bbs.pediy.com/showthread.php?t=3D21532&amp;nojs=3D1#goto_d=
isplaymodes">=E6=98=BE=E7=A4=BA=E6=A8=A1=E5=BC=8F</A>
      <SCRIPT type=3Dtext/javascript> vbmenu_register("displaymodes"); =