• Help on 77 pages. Please read it first - most of new features are described there
• Multilanguage GUI (experimental, as yet no translation files - please do it by yourself)
• Support for AVS instuctions (as yet no AVS2 and high 16 bytes of YMM registers are not displayed)
• Call stack window (similar to the version 1.10)
• Handles window (similar to the version 1.10)
• SEH and VEH chains. To decode addresses of VEH handlers, OllyDbg hacks NTDLL.RtlAddVectoredExceptionHandler(), therefore process must be started from the OllyDbg
• Multibyte character dumps
• .udl image libraries, replace scan of object files from v1.10
• Search for integers and floats in dump
• Search for procedures (entry points)
• Limited support for NTFS streams
• Drive dump
• Software breakpoints that use INT1, HLT, CLI, STI or INSB instead of INT3
• Multiple watches in one line, support for repeat count
• Dump of arrays of structures
• Micro-analysers
• Accelerated search
• Assembling of immediate data statements (DB xx etc.)
• Highlighting in run trace
• Up to 2 ordinals per address
• Limited support for Win95 via Microsoft Layer for UNICODE
• More tricky code sequences
• Show free memory, or was it the previous version?
• Multiple bugfixes

• Start thread - start new thread that increases counter each 100 milliseconds;
• Suspend last - suspends last created thread. There is no corresponding "Resume" button, use OllyDbg;
• New process - starts new instance of itself;
• New suspended - starts new instance of itself in suspended state;
• FatalExit() - calls FatalExit(), what else?
• Current Dir - displays current directory;
• Load ws2_32 - loads ws2_32.dll (must be present on all systems);
• Unload ws2_32 - unloads ws2_32.dll;
• Set filter - calls SetUnhandledExceptionFilter(). The handler only displays the error. Note: it won't work on stack overflow;
• Sedt VEH - calls AddVectoredExceptionHandler(), same note as above;
• Read [00000000] - attempts to read memory at zero address;
• 0 : 0 - integer division by zero;
• INT3 - executes INT3;
• INT ff - executes INT FF;
• JMP 123456 - jumps to (most probably) non-existing memory;
• Stack overflow - calls function that recursively calls itself;
• 1.0 : 0.0 - floating-point division by zero. Note where this exception is reported!
• Set Trap - sets bit T (single-step trap);
• POP SS/PUSHF - executes POP SS, PUSHF, POP EAX and displays the contents of EAX (and especially bit T);
• MOV SS/PUSHF - executes MOV AX,SS; MOV SS,AX, PUSHF, POP EAX and displays the contents of EAX (and especially bit T);
• INT 2D - executes INT 2D, has special meaning under Windows;
• String A - executes OutputDebugStringA() (ASCII version);
• String W - executes OutputDebugStringW() (UNICODE version);
• ZwAlloc(0) - allocates memory block at address 00000000. Try Read [00000000] afterwards and be astonished!

I'm sorry to have to inform you that your message could not be delivered to one or more recipients. It's attached below.
Diagnostic-Code: smtp; 550-5.7.1 {mx051} The recipient does not accept mails
    from 't-online.de' over foreign mailservers 550 5.7.1 ( http://portal.gmx.net/serverrules ) (in reply to RCPT TO
    command)

• precompiled table of known functions as resource;
• recognition of functions that play with return address on the stack (like allocation of huge local data) - important, because a lot of sensible analysis depends on it;
• comment operands of assembler commands - currently it's just a stub without intellect;
  
• save data to .udd file;
• on-line analysis of stack data;
• copy modifications to executable file;