Reputation: 443
I have assembled the following code using NASM:
global _start
section .data
var1 DD 0xA1A2A3A4 ; 4 bytes
var2 DD 0xB1B2B3B4 ; 4 bytes
section .bss
var3: RESD 1 ; 4 bytes
section .text
_start:
mov DWORD [var3], 0xC1C2C3C4
I opened the file in OllyDbg and made it execute the instruction: mov DWORD [var3], 0xC1C2C3C4
.
This is the state of the lower left pane in OllyDbg after executing this instruction:
What I want to know is what does the lower left pane displays? does it display the data section and the bss section of a process?
If so, then is the size of the data section of a process depends on how many bytes allocated in the data section (in this case 8 bytes)?
Upvotes: 2
Views: 278
Reputation: 4163
The lower section display Memory
so you can ask it do display whatever portion you want. By default it focuses on data section. You can check that by opening Memory Map
window in Olly and checking the addresses.
But, as I said, you can use 'Go to' command and ask this to show you any mapped part. As for the minimum size I would say that the probably the default minimum is 1000h
even if you have less.
Upvotes: 1