Tools & Utilities

Improved LoadDLL for use with OllyDbg. It uses LoadLibraryEx with DONT_RESOLVE_DLL_REFERENCES to load the dll without calling DllMain.

A more advanced loaddll.exe that allows you to load DLL's in to different memory locations, so you can rebuild relocations in an easy way.

I translated OllyDbg 2.01 to the following Languages (OllyDbg.lng); Irish, French and German.

This is a simple program that can be used to convert Olly dump data to ASM/Delphi/C++/VB tables. This can help you make keygenerators!

This package includes source code of 32-bit Disassembler and 32-bit single line Assembler for 80x86-compatible processors. The source is a slightly stripped version of code used in OllyDbg v1.04 and is well proven by its numerous users. (If you haven't heard before, OllyDbg is a 32-bit Assembler level debugger with powerful analyzing capabilities that makes binary machine code understandable).

Note: this is a fixed and improved version of disasm.dll by CondZero.

This little tool has 2 buttons.

1. The first, "Hide", hooks th IsDebuggerPresent API and makes it unuseful against debuggers. The Armadillo software protection system is owned by this trick ! After having hidden your debuggers, you can restore the first verion of the API by re-clicking the button, which caption had changed to "Un-Hide".

2. The second button enables you to activate breakpoints on Windows APIs in OllyDbg under 9x systems, thing which was impossible. Caution, it makes your Kernel32 in memory WRITEABLE, so a simple line of code can kill your most basic Windows functions, until next reboot.
After having set breakpoints with OllyDBG, if you are not sure your Kernel is clean, you can fix all the APIs's first byte by clicking "Fix". After that a messagebox appears, asking you if you want to COMPLETELY clean you Kernel. If you answer YES, you will be able to execute ALL applications, the no-imports ones too.
If you answer NO, you will be able to re-fix your Kernel as you want, when you want, until you click YES.

All these tricks work, even if you close OllyGHOST. It detects if you have the bps enabled or IsDebuggerPresent hooked, and inits itself, following the different cases.

The Win32.hlp file for OllyDbg "Help on symbolic name" containing information on some Win32 API's. Archive includes OpCodes.hlp for a list of some x86 hex opcodes and mnemonics with descriptions.

Converts text files generated with the "Copy->File" function to HTML.

DLL Load for use loading DLL's with debuggers such as OllyDbg.

For those that care, I ported Lena151's syntax highlighting to Olly2. I found it much easier on the eyes than the default config.

There is no big deal, it's just an utility to convert our OllyDbg plugins to use them on any modified version thereof.
Features:
Automatic plugin conversion Supported versions: OllyDbg, Defixed, SND, RAMODBG, diablo2oo2, Shadow, ICE, CiM. Advanced plugin conversion Change imports and exports names manually Integrated hexa-editor Enjoy!