OllyDbg

admin

Progress in OllyDbg 64 (05-Feb-2014)
- J1 F9 {  _( |3 N- VVERSION 2.01  (27-Sep-2013)
+ Disassembler v2.01, preliminary version (GPL v3)
! t4 T& E, A6 b. @
& W4 }3 r9 W. _

1 T" }" Z8 g' U7 l# q1 I0 {

Off-topic 1: PaperBack - backups on the paper (v1.10 22-Jul-2013)
* u- ~+ a: \5 ROff-topic 2: Jason - graphical interface to the Hercules S/370 emulator

/ T) o3 b$ e5 P) f! v/ {
3 z9 u9 Z" {0 c) W# p/ \

---

1 W: l/ h; T" a- y, d4 u' f8 y
OllyDbg is a 32-bit assembler level analysing debugger for Microsoft® Windows®. Emphasis on binary code analysis makes it particularly useful in cases where source is unavailable. OllyDbg is a shareware, but you can download and use it for free. Special highlights are:

• Intuitive user interface, no cryptical commands
• Code analysis - traces registers, recognizes procedures, loops, API calls, switches, tables, constants and strings
• Directly loads and debugs DLLs
  1 k3 E: v8 _/ y5 s, M
• Object file scanning - locates routines from object files and libraries
• Allows for user-defined labels, comments and function descriptions
• Understands debugging information in Borland® format
• Saves patches between sessions, writes them back to executable file and updates fixups
• Open architecture - many third-party plugins are available
    V4 W0 M$ d3 ]5 y: t8 a
• No installation - no trash in registry or system directories
  / l4 i# @  P3 x6 b' M6 ?2 Y. O

• Debugs multithread applications
• Attaches to running programs
• Configurable disassembler, supports both MASM and IDEAL formats
• MMX, 3DNow! and SSE data types and instructions, including Athlon extensions
• Full UNICODE support
• Dynamically recognizes ASCII and UNICODE strings - also in Delphi format!
• Recognizes complex code constructs, like call to jump to procedure
• Decodes calls to more than 1900 standard API and 400 C functions
• Gives context-sensitive help on API functions from external help file
• Sets conditional, logging, memory and hardware breakpoints
• Traces program execution, logs arguments of known functions
• Shows fixups
• Dynamically traces stack frames
• Searches for imprecise commands and masked binary sequences
• Searches whole allocated memory
• Finds references to constant or address range
• Examines and modifies memory, sets breakpoints and pauses program on-the-fly
• Assembles commands into the shortest binary form
• Starts from the floppy disk
  : K/ `5 C  o4 k. w; ~7 G

% u. S. n! H% n" s