Analyzes executable and Dynamic Link Library files and debugs them by disassembling the memory and their addresses. Supports only 32bit files. Traces registers, recognizes procedures, loops, API calls, switches, tables, constants and strings and much more.
OllyDbg is a 32-bit assembler level analyzing debugger for Microsoft Windows that emphasis on binary code analysis, making it particularly useful in cases where source is unavailable. The program traces registers, recognizes procedures, loops, API calls, switches, tables, constants and strings, directly loads and debugs DLLs.
v2.0 [Nov 29, 2008]
- Multilanguage GUI (experimental, as yet no translation files - please do it by yourself)
- Support for AVS instuctions (as yet no AVS2 and high 16 bytes of YMM registers are not displayed)
- Call stack window (similar to the version 1.10)
- Handles window (similar to the version 1.10)
- SEH and VEH chains. To decode addresses of VEH handlers, OllyDbg hacks NTDLL.RtlAddVectoredExceptionHandler(), therefore process must be started from the OllyDbg
- Multibyte character dumps
- UDL image libraries, replace scan of object files from v1.10
- Search for integers and floats in dump
- Search for procedures (entry points)
- Limited support for NTFS streams
- Drive dump
- Software breakpoints that use INT1, HLT, CLI, STI or INSB instead of INT3
- Multiple watches in one line, support for repeat count
- Dump of arrays of structures
- Micro-analysers
- Accelerated search
- Assembling of immediate data statements (DB xx etc.)
- Highlighting in run trace
- Up to 2 ordinals per address
- Limited support for Win95 via Microsoft Layer for UNICODE
- More tricky code sequences
- Multiple bugfixes
The Remote Debugger Installation is intended for computers without Visual Studio
