com

OlIyDbg - notepad.exe

Add

010

010

010

010

010

010

010

010

View Debug Plugins	Options \
Log	Alt+L
Executable modules	Alt+E
Memory	Alt+M
Heap
Threads
Windows
Handles
CPU	Alt+C
SEH chain
Patches	Ctrl+P
Cali stack	Alt+K
Breakpoints	Alt+B
Watches
References
Run tracę
Source
Source files
File
Text file

Window Help

DWORD PTR SS: CESP+4]

.DWORD PTR SS:CEBP-13] .DWORD PTR SS:CEBP-2S0]

1BE83)

E	M	li	|w|	JU	3	3.	K|.

a Reg ister-s (FPU)

EAX	00000000
ECX	00000101
EOX	FFFFFFFF
EBX	00000000
ESP	0076FFA3
EBP	8076FFB4
ESI	00000000
EOI	00000200
EIP	77F9F9E0	ntdll.	7
C 0	ES 0023	32bit	c
P 1	CS 001B	32b Lt	«
A 0	SS 0023	32b Lt	«
2 0	OS 0023	32blt	(
S 1	FS 0033	32bit	7
T 0	GS 0000	NULL
D 0
0 0	LastErr	ERRORj:
EFL	00000236	CNO,NB,
sia.

3

d...9..

N.o.t.e p.a.d.. xc* . £d* • ne*

0i0yyy4y	irr	bb	W	■w	T!T	bb	W		Uf•	.ae
01003043	cc	66	07	00	E4	66	07	00	Iff '	• of
01008050	73	67	07	00	2A	63	07	00	xg*	. *h
01003053	94	69	07	00	02	6A	07	00	0 l*	• EJ

ASCII

		77EABE33	RETURN to KERNEL:
	0076FFAC	013EFCBC	j
	0076FFB0	FFFFFFFF
	0076FFB4	0076FFEC
	0076FFB3	77E92CA3	RETURN to KERNEL:
	0076FFBC	00000000
	0076FFC0	00000200
	0076FFC4	013EFCBC
	0076FFC8	00000000
	0076FFCC	7FFDD000
	0076FFD0	FFFFFFFF
	0076FFD4	0076FFC0
	0076FFDS	FFFFFFFF
▼		FFFFFFFF	End of SEH chain.

Attached process paused at ntdll.DbgBreakPoint Paused