OllyDbg

April, 2nd 2024 - 6.64 MB - Freeware

Latest Version

OllyDbg 2.01 LATEST
Review by

Daniel Leblanc
Operating System

Windows XP / Vista / Windows 7 / Windows 8 / Windows 10
User Rating

Click to vote
Author / Product

Oleh Yuschuk / External Link
Filename

odbg201.zip
MD5 Checksum

62ed2290a4c36b9bcb426c373aa74ce6

OllyDbg is a 32-bit assembler level analyzing debugger software for Microsoft® Windows®. Emphasis on binary code analysis makes it particularly useful in cases where the source is unavailable. Olly Dbg is a shareware, but you can download and use it for free.

OllyDbg is a powerful and popular debugger for Microsoft Windows. It is widely used by software developers and security researchers to analyze binary code, reverse engineer software, and debug programs. It provides a comprehensive set of features for both static and dynamic analysis of executable files, making it an essential tool in the arsenal of any software engineer or security enthusiast.

Full Features

An intuitive user interface, no cryptical commands
Code analysis - traces registers, recognizes procedures, loops, API calls, switches, tables, constants, and strings
Directly loads and debugs DLLs
Object file scanning - locates routines from object files and libraries
Allows for user-defined labels, comments and function descriptions
Understands debugging information in Borland® format
Saves patches between sessions, writes them back to executable file and updates fixups
Open architecture - many third-party plugins are available
No installation - no trash in registry or system directories
Debugs multithread applications
Attaches to running programs
The configurable disassembler supports both MASM and IDEAL formats
MMX, 3DNow! and SSE data types and instructions, including Athlon extensions
Full UNICODE support
Dynamically recognizes ASCII and UNICODE strings - also in Delphi format!
Recognizes complex code constructs, like a call to jump to procedure
Decodes call to more than 1900 standard API and 400 C functions
Gives context-sensitive help on API functions from the external help file
Sets conditional, logging, memory and hardware breakpoints
Traces program execution, logs arguments of known functions
Shows fixups
Dynamically traces stack frames
Searches for imprecise commands and masked binary sequences
Searches whole allocated memory
Finds references to constant or address range
Examines and modifies memory, sets breakpoints and pauses program on-the-fly
Assembles commands into the shortest binary form
Starts from the floppy disk

Key Features

Disassembly of executable files: It allows users to view the assembly code of executable files, making it easy to analyze the inner workings of a program.
Dynamic debugging: Users can debug running processes, set breakpoints, step through code, and inspect memory and registers in real-time.
Plugin support: It supports plugins, allowing users to extend its functionality with additional features and tools.
Scripting support: Users can automate tasks and create custom analysis tools using OllyDbg's built-in scripting language.
Multi-threaded debugging: It supports debugging of multi-threaded applications, making it suitable for analyzing complex software systems.

User Interface

It features a user-friendly interface with a disassembly view, memory view, registers view, and stack view. The interface is highly customizable, allowing users to rearrange and resize windows to suit their workflow preferences.

Installation and Setup

Installing this program is straightforward; users can download the installer from the official website or FileHorse and follow the on-screen instructions. Once installed, users can launch the app and start debugging immediately.

How to Use

Open the tool and load the executable file you want to analyze.
Set breakpoints at the desired locations in the code.
Run the program and debug it in real-time, pausing execution at breakpoints to inspect memory and registers.
Use OllyDbg's features such as disassembly, memory view, and stack view to analyze the program's behavior.
Save your analysis and findings for future reference.

FAQ

Can OllyDbg be used to analyze malware?
Yes, the program is commonly used by security researchers to analyze malware and understand its behavior.

Does OllyDbg support 64-bit executables?
It primarily focuses on 32-bit executables, but there are unofficial patches and plugins available to add limited support for 64-bit executables.

Can I use OllyDbg to debug packed or obfuscated executables?
It can be used to debug packed or obfuscated executables, but additional tools and techniques may be required to unpack or deobfuscate the code.

Is OllyDbg free to use?
Yes, OllyDbg is free and open-source software released under the GNU General Public License (GPL).

Does OllyDbg support remote debugging?
No, it does not support remote debugging out of the box, but there are third-party plugins available that add this functionality.

System Requirements

Operating System: Windows XP, 7, 8, 10 or 11
Processor: Intel Pentium or compatible
RAM: 512 MB or higher
Disk Space: 50 MB of free disk space

PROS