From 313316ade54519ee6ce052433c0dff4d60c38d9d Mon Sep 17 00:00:00 2001 From: mrexodia Date: Thu, 1 Sep 2016 02:45:31 +0200 Subject: [PATCH] updated --- x64dbg.ts | 2476 +++++++++++++++++++++++++++++------------------------ 1 file changed, 1350 insertions(+), 1126 deletions(-) diff --git a/x64dbg.ts b/x64dbg.ts index 059265a..0f320b5 100644 --- a/x64dbg.ts +++ b/x64dbg.ts @@ -1212,585 +1212,585 @@ CPUDisassembly - + &Selected Address - + &Address: - + &Constant: - + &Value: - + Address: - + Constant: - + &Edit - + &Fill... - + Fill with &NOPs - - + + &Copy - + &Paste - + Paste (&Ignore Size) - + &Binary - + &Selection - + Selection (&No Bytes) - + &Address - + &RVA - + Disassembly - + &Restore selection - + Toggle - + Edit - - + + Set Hardware on Execution - + Remove Hardware - + Replace Slot 0 (Free) - + Replace Slot 1 (Free) - + Replace Slot 2 (Free) - + Replace Slot 3 (Free) - + Breakpoint - - + + Replace Slot %1 (0x%2) - + &Follow in Dump - + &Follow in Disassembler - + Open Source File - + Selection - - + + Function - + Decompile - + Graph - + Help on Symbolic Name - + Help on mnemonic - + Show mnemonic brief - + Hide mnemonic brief - + &Highlighting mode - - + + Disable Branch Destination Preview - + Enable Branch Destination Preview - + Label Current Address - - - + + + Label - + Disable - + Bit - + Byte - + Word - + Trace record - + Comment - + Toggle Bookmark - + Analyze module - + Add function - + Delete function - + Argument - + Add argument - + Delete argument - + Analyze single function - + Remove analysis from module - + Remove analysis from selection - + Treat selection &head as - + Treat from &selection as - + Analysis - + Assemble - + Patches - + &Yara... - + Set New Origin Here - + Origin - + Previous - + Next - + Expression - + File Offset - + Start of Page - + End of Page - + Start of Function - + End of Function - + Go to - + xrefs... - - - + + + C&ommand - - - + + + &Constant - - - + + + &String references - - - + + + &Intermodular calls - + &Pattern - + Current Region - + Current Module - + All Modules - + &Search for - + &Selected Address(es) - + Find &references to - + Current address is not executable - + Setting software breakpoint here may result in crash. Do you really want to continue? - - + + Add label at - - - - - - - - + + + + + + + + Error! - - + + DbgSetLabelAt failed! - + Add comment at - + DbgSetCommentAt failed! - + DbgSetBookmarkAt failed! - + Assemble at %1 - + Failed to assemble instruction " %1 " (%2) - + Not inside a module... - + Goto File Offset in - + Enter Constant - + Find Pattern... - + Edit code at %1 - + Fill code at %1 - + Selection not in a module... - + Failed to assemble instruction " - - - - + + + + Failed to set trace record. - - - + + + Size @@ -2032,112 +2032,113 @@ - + &Hex - + &Extended ASCII - - + + &Codepage... - + &Text - + &ASCII - + &Integer - + &Float - + &Address - + &Disassembly - + Add label at - - - + + + Error! - + DbgSetLabelAt failed! - + Modify value - + Enter expression to follow in Dump... - + Not inside a module... - + Goto File Offset in %1 - - - + + + + Hex - - + + ASCII - - + + UNICODE - - + + Signed short (16-bit) @@ -2162,178 +2163,178 @@ - - + + Signed byte (8-bit) - - + + Signed long (32-bit) - - + + Signed long long (64-bit) - - + + Unsigned byte (8-bit) - - + + Unsigned short (16-bit) - - + + Unsigned long (32-bit) - - + + Unsigned long long (64-bit) - - + + Hex short (16-bit) - - + + Hex long (32-bit) - - + + Hex long long (64-bit) - + &Float (32-bit) - + &Double (64-bit) - + &Long double (80-bit) - + Float (32-bit) - + Double (64-bit) - + Long double (80-bit) - + Address - + Comments - + Not yet supported! - + Edit data at %1 - + Fill data at %1 - + Save to file - + All files (*.*) - + Find Pattern... - + Dump - + Entropy (Address: %1, Size: %2) - + Enter expression to sync with... - + Size - + Warning - + You're trying to allocate a zero-sized buffer just now. - - + + Error - + The size of buffer you're trying to allocate exceeds 1GB. Please check your expression to ensure nothing is wrong. - + Memory allocation failed! @@ -2585,7 +2586,7 @@ - + Modify @@ -2661,12 +2662,12 @@ - + Push DWORD - + Push QWORD @@ -2721,17 +2722,17 @@ - + Edit data at %1 - + Fill data at %1 - + Find Pattern... @@ -3838,52 +3839,52 @@ run - + Saving database... - + Failed to write database file! - + Loading commandline... - + Loading database... - + Invalid database file! - + Failed to read database file! - + Invalid database file (JSON)! - + Warning: Failed to create database folder '%s'. Path may be read only. - + Database file: %s @@ -3944,1600 +3945,1644 @@ Invalid database file (JSON)! - + Thread switched from %X to %X ! - + Module: %s - - + (switched from %X) - + File: %s - PID: %X - %sThread: %X%s - + %s breakpoint "%s" at %s (%p)! - + %s breakpoint at %s (%p)! - + %s breakpoint "%s" at %p! - + %s breakpoint at %p! - + execute - + read/write - + write - + Hardware breakpoint (%s%s) "%s" at %s (%p)! - + Hardware breakpoint (%s%s) at %s (%p)! - + Hardware breakpoint (%s%s) "%s" at %p! - + Hardware breakpoint (%s%s) at %p! - + + (read) + + + + + (write) + + + + + (execute) + + + + + (read/write/execute) + + + + Memory breakpoint%s "%s" at %s (%p, %p)! - + Memory breakpoint%s at %s (%p, %p)! - + Memory breakpoint%s "%s" at %p (%p)! - + Memory breakpoint%s at %p (%p)! - + Breakpoint reached not in list! - + User code reached at %s (%p)! - + Breakpoint %p has been disabled because the bytes don't match! Expected: %02X %02X, Found: %02X %02X - + Could not set breakpoint %p! (SetBPX) - + MemRead failed on breakpoint address%p! - + Could not set memory breakpoint %p! (SetMemoryBPXEx) - - - + + + You can only set 4 hardware breakpoints - + Could not set hardware breakpoint %p! (SetHardwareBreakPoint) - + Set hardware breakpoint on %p! - + Could not delete breakpoint %p! (DeleteBPX) - + Could not delete memory breakpoint %p! (RemoveMemoryBPX) - + Could not delete hardware breakpoint %p! (DeleteHardwareBreakPoint) - - + + Trace finished after %llu steps! - - + + Trace finished after %u steps! - + Bad tracing state. - + + ??? (GetFileNameFromHandle failed) - + Process Started: %p %s - - + + TLS Callbacks: %d - - + + Failed to get TLS callback addresses! - + TLS Callback %d - - + + %d invalid TLS callback addresses... - - + + entry breakpoint - + Process stopped with exit code 0x%X - + Thread - + Thread %X created, Entry: %p - + No threads left to switch to (bug?) - + Thread %X exit - + Attach breakpoint reached! - + System breakpoint reached! - - + + + Error: Cannot load global initialization script. + + + + + + Error: Cannot load debuggee initialization script. + + + + + TLS Callback - + DLL Loaded: %p %s - + DLL Unloaded: %p %s - + DebugString: "%s" - - + + DetachDebuggerEx failed... - - + + Detached! - + paused! - + SetThreadName(%X, "%s") - + First chance exception on %p (%.8X, %s)! - + First chance exception on %p (%.8X)! - + Last chance exception on %p (%.8X, %s)! - + Last chance exception on %p (%.8X)! - + Delete breakpoint failed (BpDelete): %p - - - + + + Delete breakpoint failed (DeleteBPX): %p - - - + + + Could not enable breakpoint %p (SetBPX) - - - + + + Could not enable breakpoint %p (BpEnable) - - - + + + Could not disable breakpoint %p (BpEnable) - - - + + + Could not disable breakpoint %p (DeleteBPX) - + Did not enable hardware breakpoint %p (all slots full) - - + + Could not enable hardware breakpoint %p (BpEnable) - + Could not enable hardware breakpoint %p (SetHardwareBreakPoint) - - + + Could not disable hardware breakpoint %p (BpEnable) - + Could not disable hardware breakpoint %p (DeleteHardwareBreakPoint) - - + + Could not enable memory breakpoint %p (BpEnable) - - + + Could not enable memory breakpoint %p (SetMemoryBPXEx) - - + + Could not disable memory breakpoint %p (BpEnable) - - + + Could not disable memory breakpoint %p (RemoveMemoryBPX) - + Delete memory breakpoint failed (BpDelete): %p - + Delete memory breakpoint failed (RemoveMemoryBPX): %p - + Delete hardware breakpoint failed (BpDelete): %p - + Delete hardware breakpoint failed (DeleteHardwareBreakPoint): %p - + Error starting process (CreateProcess, %s)! - - + + IsWow64Process failed! - - + + Use x32dbg to debug this process! - - + + Use x64dbg to debug this process! - + Debugging stopped! - - - + + + + + not enough arguments! - + Resolved shortcut "%s"->"%s" - + File does not exist! - + Could not open file! - + Invalid PE file! - + Use x32dbg to debug this file! - + Use x64dbg to debug this file! - + The debuggee does not stop after 10 seconds. The debugger state may be corrupted. - - - - - - - - - + + + + + + + + + Not enough arguments! - + Invalid type specified! - + Default breakpoint type set to: %s - + Invalid addr: "%s" - + Breakpoint already set! - + Error setting breakpoint at %p! (IsBPXEnabled) - + Error setting breakpoint at %p! (memread) - + Error setting breakpoint at %p! (bpnew) - - + + Error setting breakpoint at %p! (SetBPX) - + Breakpoint at %p set! - + No breakpoints to delete! - + All breakpoints deleted! - - + + Delete breakpoint failed (bpdel): %p - - - - - - - - + + + + + + + + + No such breakpoint "%s" - + Breakpoint deleted! - + No breakpoints to enable! - + All breakpoints enabled! - + Breakpoint already enabled! - + Breakpoint enabled! - + No breakpoints to disable! - + All breakpoints disabled! - + Breakpoint already disabled! - + Breakpoint disabled! - - - - - + + + + + + not enough arguments! - + Can't set %s on breakpoint "%s" - + breakpoint name - + break condition - + logging text - + logging condition - + command on hit - + command condition - + Can't set hit count on breakpoint "%s" - - + + Can't set fast resume on breakpoint "%1" - + + Can't set singleshoot on breakpoint "%1" + + + + argument count mismatch! - + Invalid type, assuming 'x' - + Invalid size, using 1 - + Address not aligned to %d - + Hardware breakpoint already set! - + Error setting hardware breakpoint (bpnew)! - + Error setting hardware breakpoint (TitanEngine)! - + Hardware breakpoint at %p set! - + No hardware breakpoints to delete! - + All hardware breakpoints deleted! - - + + Delete hardware breakpoint failed: %p (BpDelete) - - + + Delete hardware breakpoint failed: %p (DeleteHardwareBreakPoint) - - - + + + No such hardware breakpoint "%s" - + Hardware breakpoint deleted! - + No hardware breakpoints to enable! - + All hardware breakpoints enabled! - + Hardware breakpoint already enabled! - + Could not enable hardware breakpoint %p (SetHardwareBreakpoint) - + Hardware breakpoint enabled! - + No hardware breakpoints to disable! - + All hardware breakpoints disabled! - + Hardware breakpoint already disabled! - + Could not disable hardware breakpoint %p (DeleteHardwareBreakpoint) - + Hardware breakpoint disabled! - + Invalid type (argument ignored) - + Memory breakpoint already set! - + Error setting memory breakpoint! (BpNew) - + Error setting memory breakpoint! (SetMemoryBPXEx) - + Memory breakpoint at %p set! - + no memory breakpoints to delete! - + All memory breakpoints deleted! - - + + Delete memory breakpoint failed: %p (BpDelete) - - + + Delete memory breakpoint failed: %p (RemoveMemoryBPX) - - - + + + No such memory breakpoint "%s" - + Memory breakpoint deleted! - + No memory breakpoints to enable! - + All memory breakpoints enabled! - + Memory memory already enabled! - + Memory breakpoint enabled! - + No memory breakpoints to disable! - + All memory breakpoints disabled! - + Memory breakpoint already disabled! - + Memory breakpoint disabled! - + Something went wrong... - + Skipped INT3! - + Debugger hidden - + Something went wrong - + Run to party is busy. - - - + + + Not enough arguments - + Trace already active - + Invalid expression "%s" - + VirtualAllocEx failed - + $lastalloc is zero, provide a page address - + VirtualFreeEx failed - + Invalid address specified - + Memset failed - + Memory %p (size: %.8X) set to %.2X - + + + %ums - + Program is not running - - + + Error suspending thread - - - + + + Error resuming thread - + Error loading Scylla.dll! - + Could not find export 'ScyllaStartGui' inside Scylla.dll - + Scylla is already loaded - + Could not open process %X! - + Could not get module filename %X! - - - + + + Invalid address "%s"! - + Invalid stack address! - + Exception will be swallowed - + Exception will be thrown in the program - + Dll breakpoint set on "%s"! - + Failed to remove DLL breakpoint... - + DLL breakpoint removed! - - - - - - + + + + + + Invalid thread %X - + Thread switched! - + Thread suspended - + Thread resumed! - + Thread terminated - + Error terminating thread! - + %d/%d thread(s) suspended - + %d/%d thread(s) resumed - - + + Unknown priority value, read the help! - + Error setting thread priority - + Thread priority changed! - + Failed to change the name for thread %X - + Thread name set to "%s"! - + Thread name changed from "%s" to "%s"! - + This may take very long, depending on your network connection and data in the debug directory... - - + + Done! See symbol log for more information - + Invalid module "%s"! - + GetModuleFileNameExA failed! - + SymGetSearchPath failed! - + SymSetSearchPath (1) failed! - + SymUnloadModule64 failed! - + SymLoadModuleEx failed! - + SymSetSearchPathW (2) failed! - - - + + + Error getting JIT auto %s - + Unknown JIT auto entry type. Use x64 or x32 as parameter. - - + + Error using x64 arg the debugger is not a WOW64 process - - + + Unknown JIT auto entry type. Use x64 or x32 as parameter - + JIT auto %s: %s - + Error run the debugger as Admin to setjitauto - + Error setting JIT Auto. Use ON:1 or OFF:0 arg or x64/x32, ON:1 or OFF:0. - + Error unknown parameters. Use ON:1 or OFF:0 - + Error setting JIT auto %s - + Error unknown parameters. Use x86 or x64 and ON:1 or OFF:0 - + Error unknown parameters use x86 or x64, ON/1 or OFF/0 - + New JIT auto %s: %s - + Error run the debugger as Admin to setjit - - - - - + + + + + Error setting JIT %s - - + + Error there is no old JIT entry stored. - + New OLD JIT stored: %s - - + + Unknown JIT entry type. Use OLD, x64 or x32 as parameter. - - + + Error using x64 arg. The debugger is not a WOW64 process - + Error unknown parameters. Use old, oldsave, restore, x86 or x64 as parameter. - + New JIT %s: %s - - + + Error getting JIT %s - + Error: there is not an OLD JIT entry stored yet. - + OLD JIT entry stored: %s - + JIT %s: %s - + Error: using an address as arg1 - - + + Error getting rights of page: %s - + Page: %p, Rights: %s - + Error: Using an address as arg1 and as arg2: Execute, ExecuteRead, ExecuteReadWrite, ExecuteWriteCopy, NoAccess, ReadOnly, ReadWrite, WriteCopy. You can add a G at first for add PAGE GUARD, example: GReadOnly - + Error: Set rights of %p with Rights: %s - + New rights of %p: %s - + Error: you must specify the name of the DLL to load - + Error: couldn't allocate memory in debuggee - + Error: couldn't write process memory - + Error: couldn't get kernel32:LoadLibraryA - + Error allocating memory for cmdline - + Error converting UNICODE cmdline - + Error reading PEB base addres - + Error reading PEB -> ProcessParameters -> CommandLine UNICODE_STRING - + Error reading PEB -> ProcessParameters pointer address - + Error Getting remote PEB address - + Error Getting command line base address - + Error checking the pattern of the commandline stored - + Error writing the new command line stored - + Error getting getcommandline - + Error allocating the page with UNICODE and ANSI command lines - + Error writing the ANSI command line in the page - + Error writing the UNICODE command line in the page - + Error writing command line UNICODE in PEB - + Error getting cmdline - + (Address: %p) - + Command line: %s - + Error: write the arg1 with the new command line of the process debugged - + New command line: %s - + Stack is now freezed - + Stack is now unfreezed @@ -5557,8 +5602,8 @@ Invalid database file (JSON)! - - + + invalid dest "%s" @@ -5574,1046 +5619,1032 @@ Invalid database file (JSON)! - + unknown command/expression: "%s" - + Not enough arguments! At least %d arguments must be specified. - + invalid variable name "%s" - + invalid value "%s" - + error creating variable "%s" - + could not delete variable "%s" - + deleted variable "%s" - + invalid hex string "%s" (contains invalid characters) - + invalid destination "%s" - + invalid hex byte "%s" - + failed to write to %p - + invalid src "%s" - + no variables! - + error listing variables! - + directory doesn't exist - + current directory changed! - + error setting comment - + error deleting comment - + error setting label - + error deleting label - + failed to set bookmark! - + bookmark set! - + failed to delete bookmark! - + bookmark deleted! - + invalid expression: "%s"! - + invalid address: %p! - + failed to assemble "%s" (%s) - + failed to add function - + function added! - + failed to delete function - + function deleted! - + all functions deleted! - + failed to add argument - + argument added! - + failed to delete argument - + argument deleted! - + all arguments deleted! - - + + invalid variable "%s" - - - - - - - - - - - - - Cannot evaluate expression: "%s" - - - - + invalid argument "%s"! - + + + Variable size not supported. - + Script - - - - - - - - - - - + + + + + + + + + + + Address - - + + Data - - - - - - - - - + + + + + + + + + Disassembly - + Constant: %p - + Range: %p-%p - + %u reference(s) in %ums - + String - + Strings - + %u string(s) in %ums - - - + + + no such variable "%s"! - + failed to set variable "%s"! - - + + variable "%s" is not a string! - - + + failed to get variable size "%s"! - - + + failed to get variable data "%s"! - + invalid address "%s"! - + memwrite failed! - + string written! - - + + invalid memory address %p! - - + + failed to read memory! - - + + Pattern: %s - - + + &Data& - - + + failed to transform pattern! - - + + [Error disassembling] - - + + %d occurrences found in %ums - + MemFindInMap failed! - + Destination - + Calls - + %u call(s) in %ums - + Comments - + Comment - + no comments - + %d comment(s) listed in Reference View - + Labels - + Label - + no labels - + %d label(s) listed in Reference View - + Bookmarks - + No bookmarks found - + %d bookmark(s) listed - + Functions - - - + + + Start - - - + + + End - - - + + + Disassembly (Start) - - - + + + Label/Comment - + No functions - + %d function(s) listed - + Arguments - + No arguments - + %d argument(s) listed - + Loops - + no loops - + %d loop(s) listed - + failed to assemble "%s" (%s)! - + Command: "%s" - + %u result(s) in %ums - + [YARA ERROR] - + [YARA WARNING] - + File: "%s", Line: %d, Message: "%s" - + [YARA] Global rule "%s' matched! - + [YARA] Rule "%s" matched: - + [YARA] String "%s" : %s on %p - + [YARA] Rule "%s" did not match! - + [YARA] Scan finished! - + [YARA] Imported module "%s"! - + invalid value "%s"! - + failed to get module path for %p! - + failed to read file "%s"! - + failed to read memory page %p[%X]! - + Failed to read the rules file "%s" - + Rule - + [YARA] Scan started... - + %u scan results in %ums... - + too many matches! - + error while scanning memory! - + error while getting the rules! - + errors in the rules file! - + yr_compiler_create failed! - + invalid module "%s"! - + invalid address "%s" - + could not read memory at %p - + failed to disassemble! - + size: %d, id: %d, opcount: %d - + operand "%s" %d, - + register: %s - + immediate: 0x%p - + memory segment: %s, base: %s, index: %s, scale: %d, displacement: 0x%p - + Invalid parameter [base]! - + Invalid memory address! - + Invalid parameter [size] - + Failed to load module (ModLoad)... - + Virtual module "%s" loaded on %p[%p]! - + invalid arguments! - + usage: meminfo a/r, addr - + invalid argument - + ReadProcessMemory failed! - + data: %02X - + memory map updated! - + Invalid expression: "%s" - + Failed to read memory... - + Failed to write file... - + %p[% llX] written to "%s" ! - + %p[% X] written to "%s" ! - + no description or empty description - - + + Could not find the specified privilege: %s - + DuplicateHandle failed: %s - + Handle %llX closed! - + Handle %X closed! - + Failed to get SEH (disabled?) - + Failed to get VEH (loaded symbols for ntdll.dll?) - + Failed to get VCH (loaded symbols for ntdll.dll?) - + Failed to get UnhandledExceptionFilter (loaded symbols for kernelbase.dll?) - + Invalid memory address %p! - + No graph generated... - + Invalid argument 1 : %s - + Invalid argument 2 : %s - + Image information for %s - + Characteristics (0x%X): - - + + None - + IMAGE_FILE_RELOCS_STRIPPED: Relocation info stripped from file. - + IMAGE_FILE_EXECUTABLE_IMAGE: File is executable (i.e. no unresolved externel references). - + IMAGE_FILE_LINE_NUMS_STRIPPED: Line nunbers stripped from file. - + IMAGE_FILE_LOCAL_SYMS_STRIPPED: Local symbols stripped from file. - + IMAGE_FILE_AGGRESIVE_WS_TRIM: Agressively trim working set - + IMAGE_FILE_LARGE_ADDRESS_AWARE: App can handle >2gb addresses - + IMAGE_FILE_BYTES_REVERSED_LO: Bytes of machine word are reversed. - + IMAGE_FILE_32BIT_MACHINE: 32 bit word machine. - + IMAGE_FILE_DEBUG_STRIPPED: Debugging info stripped from file in .DBG file - + IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP: If Image is on removable media, copy and run from the swap file. - + IMAGE_FILE_NET_RUN_FROM_SWAP: If Image is on Net, copy and run from the swap file. - + IMAGE_FILE_SYSTEM: System File. - + IMAGE_FILE_DLL: File is a DLL. - + IMAGE_FILE_UP_SYSTEM_ONLY: File should only be run on a UP machine - + IMAGE_FILE_BYTES_REVERSED_HI: Bytes of machine word are reversed. - + DLL Characteristics (0x%X): - + IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE: DLL can move. - + IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY: Code Integrity Image - + IMAGE_DLLCHARACTERISTICS_NX_COMPAT: Image is NX compatible - + IMAGE_DLLCHARACTERISTICS_NO_ISOLATION: Image understands isolation and doesn't want it - + IMAGE_DLLCHARACTERISTICS_NO_SEH: Image does not use SEH. No SE handler may reside in this image - + IMAGE_DLLCHARACTERISTICS_NO_BIND: Do not bind this image. - + IMAGE_DLLCHARACTERISTICS_WDM_DRIVER: Driver uses WDM model. - + IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE: Remote Desktop Services aware. @@ -6751,11 +6782,46 @@ Invalid database file (JSON)! FileHelper::ReadAllText failed... + + + Empty label detected on line %d! + + + + + Duplicate label "%s" detected on lines %d and %d! + + + + + Invalid branch label "%s" detected on line %d! + + Script finished! + + + Error executing command! + + + + + The script is too busy. Would you like to terminate it now? + + + + + Script is terminated by user. + + + + + Debugger must be paused to run a script! + + Pointer to SEH_Record[%d] @@ -6935,296 +7001,296 @@ Invalid database file (JSON)! - + command cut at ~%d characters - + [Script DLL] Calling export "AsyncStart"... - + [Script DLL] "AsyncStart" returned! - - + + [Script DLL] Calling FreeLibrary... - - + + success! - - + + failure (%08X)... - + [Script DLL] Loading Script DLL "%s"... - + [Script DLL] DLL loaded on 0x%p! - + [Script DLL] Creating thread to call the export "AsyncStart"... - + [Script DLL] Calling export "Start"... - + [Script DLL] "Start" returned! - + [Script DLL] Failed to find the exports "AsyncStart" or "Start" (%08X)! - + [Script DLL] LoadLibary failed (%08X)! - + Initializing wait objects... - + Initializing debugger... - + Initializing debugger functions... - + Setting JSON memory management functions... - + Initializing capstone... - + Initializing Yara... - + Getting directory information... - + Mnemonic help database loaded! - + Failed to load mnemonic help database... - + Failed to read mnemonic help database... - + Error codes database loaded! - + Failed to load error codes... - + Exception codes database loaded! - + Failed to load exception codes... - + It is strongly discouraged to use symbol servers in your path directly (use the store option instead). Do you want me to fix this? - + Symbol Path: %s - + Allocating message stack... - + Initializing global script variables... - + Registering debugger commands... - + Registering GUI command handler... - + Registering expression functions... - + Default - + Registering Script DLL command handler... - + Script DLL - + Starting command loop... - + Loading plugins... - + Handling command line... - + Reading notes file... - + Initialization successful! - + Stopping running debuggee... - + The debuggee does not close after 10 seconds. Probably the debugger state has been corrupted. - + Aborting scripts... - + Waiting for the debuggee to be stopped... - + Unloading plugins... - + Stopping command thread... - + Cleaning up allocated data... - + Checking for mem leaks... - + %d memory leak(s) found! - + Cleaning up wait objects... - + Cleaning up debugger threads... - + Saving notes... - + Exit signal processed successfully! @@ -7253,6 +7319,84 @@ Do you want me to fix this? Error while writing process memory + + + [PLUGIN] Failed to load plugin: %s + + + + + + [PLUGIN] Export "pluginit" not found in plugin: %s + + + + + + [PLUGIN] pluginit failed for plugin: %s + + + + + + [PLUGIN] %s is incompatible with this SDK version + + + + + + [PLUGIN] %s v%d Loaded! + + + + + + [PLUGIN] GuiMenuAdd(GUI_PLUGIN_MENU) failed for plugin: %s + + + + + + [PLUGIN] GuiMenuAdd(GUI_DISASM_MENU) failed for plugin: %s + + + + + + [PLUGIN] GuiMenuAdd(GUI_DUMP_MENU) failed for plugin: %s + + + + + + [PLUGIN] GuiMenuAdd(GUI_STACK_MENU) failed for plugin: %s + + + + + + [PLUGIN] command "%s" registered! + + + + + + [PLUGIN] command "%s" unregistered! + + + + + + [PLUGIN] expression function "%s" registered! + + + + + + [PLUGIN] expression function "%s" unregistered! + + + DataCopyDialog @@ -7389,21 +7533,26 @@ Do you want me to fix this? - &Silent + Singlesho&ot - &Fast Resume + &Silent - &Save + &Fast Resume + &Save + + + + C&ancel @@ -7601,63 +7750,70 @@ Do you want me to fix this? - - + + &Add... - - - &Remove + + + &Edit - - De&scription... + + + &Remove - - - &Up + + De&scription... - - + + + &Up + + + + + + &Down - + Script - + Command - + Shortcut - + &OK - + &Cancel @@ -7672,34 +7828,46 @@ Do you want me to fix this? - - + + Enter the description - - + + This string will appear in the menu. - + + Select script - + + Script files (*.txt *.scr);;All files (*.*) - - Enter the command that you want to create a shortcut for : + + Enter the command you want to favourite - + + Example: bphws csp + + + + + Enter a new command + + + + Example: bphws ESP @@ -8129,670 +8297,716 @@ Do you want me to fix this? - + &Help - + &Plugins - + &Options - + Favour&ites - + toolBar - + &Open - + E&xit - + &Run - + &Pause - + Re&start - + &Close - + Step &into - + Step &over - + Co&mmand - + E&xecute till return - + &Memory Map - + &Log Window - + &About - + Scylla - + &Breakpoints - + Step into (pass exceptions) - + Step over (pass exceptions) - + Run (pass exceptions) - + Execute till return (pass exceptions) - + &Script - - + + Script - + Run &until selection - + Run until selection - + &CPU - - + + CPU - + Symbol &Info - + Symbol Info - + &References - - + + References - + &Threads - - + + Threads - + &Preferences - + Settings - + &Find Strings - + Find Strings - + &Appearance - - + + Find Intermodular Calls - - + + Patches - + Comments - + Labels - + Bookmarks - + Functions - + Check for &Updates - - - + + + Call Stack - + Shortcuts - + &Donate - - + + Donate - + Calculator - - + + Attach - - + + Detach - + Change Command &Line - - + + Skip next instruction - + Topmost - + Topmost Window - + &Report Bug - - + + Report Bug - + &Source - - + + Source - + &Manual - + &FAQ - + FAQ - + SEH Chain - - + + Hide debugger (PEB) - - + + Reload style.css - - + + Notes - - + + Snowman - - + + Handles - + Trace over until condition - + Trace into until condition - + Bit - + Byte - + Word - + Trace into beyond trace record - + Trace over beyond trace record - + Trace into into trace record - + Trace over into trace record - + None - + Run to &user code - + Run until e&xpression - + Undo last instruction - - + + Generate crash dump - - + + &Manage Favourite Tools... - + Step over (source) - + Step into (source) - + &Graph - + Step into (swallow exception) - + Step over (swallow exception) - + Run (swallow exception) - - + + Blog - + + Animate into + + + + + Animate over + + + + + Animate command... + + + + + Set Initialization Script + + + + Log - + Symbols - + Breakpoints - + Memory Map - + SEH - + Graph - + Command: - + Ready - - - - - - + + + + + + Languages - + Enter trace into finishing condition. - - + + Example: eax == 0 && ebx == 0 - + Enter trace over finishing condition. - + About x64dbg - + About x32dbg - + Open file - + Executables (*.exe *.dll);;All files (*.*) - + Enter expression to run to... - - + + Error! - + Patches cannot be shown when not debugging... - + All the money will go to x64dbg development. - + You will visit x64dbg's official blog. - + You will be taken to a website where you can report a bug. Make sure to fill in as much information as possible. - + This action will crash the debugger and generate a crash dump. You will LOSE ALL YOUR DATA. Do you really want to continue? - + Have fun debugging the debugger! - + Debugger detected! - + Change Command Line - + Cannot get remote command line, use the 'getcmdline' command for more information. - + Could not set command line! - + New command line: - + Error - + Manual cannot be opened. Please check if x64dbg.chm exists and ensure there is no other problems with your system. - + The translation is nearly empty. Do you still want to use this language? - + New language setting will take effect upon restart. + + + Animate command + + + + + Example: StepInto + + + + + Set Initialzation Script for Debuggee + + + + + + Script files (*.txt *.scr);;All files (*.*) + + + + + Set Global Initialzation Script + + MemoryMapView @@ -9895,162 +10109,172 @@ Do you want to apply these patches anyway? - + + No Script Timeout Warning + + + + Exceptions - + Ignored Exceptions: - + Add &Range - + &Delete Range - + Add &Last - + Disasm - + Argument Spaces - + Tab between mnemonic and arguments - + Memory Spaces - + Uppercase - + Autocomments only on CIP - + GUI - + Show FPU registers as little endian - + Save column order and width - + Don't show close dialog - + Show PID in HEX - + Misc - + Symbol Store: - + Symbol Path: - + Set x64dbg as Just In Time Debugger - + JIT: - + Confirm before attaching - + <font color="red">DIE SCUM!</font> - + Enable Load/Save Tab Order - + + Search Engine URL + + + + Save - + Cancel - + <font color="red"><b>Warning</b></font>: Run the debugger as Admin to enable JIT. - + Settings saved! - + ERROR NOT FOUND OLD JIT - + NOT FOUND OLD JIT ENTRY STORED, USE SETJIT COMMAND - + Question - + Are you sure you want to add %.8X? @@ -10118,22 +10342,22 @@ Do you want to apply these patches anyway? StatusLabel - + <font color='#00DD00'>Initialized</font> - + <font color='#ff0000'>Paused</font> - + Running - + <font color='#ff0000'>Terminated</font> @@ -10677,31 +10901,31 @@ Do you want to apply these patches anyway? - + Disabled - + Changed - + Is true - + Is false - + Not changed @@ -10716,34 +10940,34 @@ Do you want to apply these patches anyway? - + Rename - + &Edit... - + Watchdog - - + + Enter the expression to watch - - + + Example: [EAX] - + Enter the name of the watch variable