diff --git a/x64dbg.ts b/x64dbg.ts index a71c5fc..973d5a4 100644 --- a/x64dbg.ts +++ b/x64dbg.ts @@ -329,6 +329,7 @@ + Background @@ -365,13 +366,13 @@ - + RIP - + EIP @@ -731,52 +732,52 @@ - + Other: - + Current Thread - + Watch (When Watchdog is Triggered) - + Memory Map Breakpoint - + Memory Map %1 - + Memory Map Section Text - + Search Highlight Color - + NOT FOUND IN CONFIG! - + &Default Value - + &Current Setting @@ -913,175 +914,190 @@ BreakpointsView - + Software - - - - - Address - - - - - - - Name - - - Module/Label + Address - State + Name - Hit count + Module/Label - Log text + State - Condition + Hit count - Fast resume + Log text - Command on hit + Condition + Fast resume + + + + + + + Command on hit + + + + + + Comment - + Hardware - + Memory - - - - Inactive + + Software breakpoint + + + + + Hardware breakpoint + + + + + Memory breakpoint - Enabled + Inactive + Enabled + + + + + + Disabled - + &Edit - - - + + + Remove - - - + + + Remove All - - - - - - - - - + + + + + + + + + Enable - - - + + + Reset hit count - - - + + + Enable All - - - + + + Disable All - - - + + + Disable - - - + + + &Copy @@ -2433,24 +2449,24 @@ CPUSideBar - - + + Cannot fold selection. - + Breakpoint Enabled - + Breakpoint Disabled - + Breakpoint Not Set @@ -3021,853 +3037,853 @@ run Configuration - + File -> Open - + File -> Attach - + File -> Detach - + File -> Exit - + View -> CPU - + View -> Log - + View -> Breakpoints - + View -> Memory Map - + View -> Call Stack - + View -> Notes - + View -> SEH - + View -> Script - + View -> Symbol Info - + View -> Source - + View -> References - + View -> Threads - + View -> Patches - + View -> Comments - + View -> Labels - + View -> Bookmarks - + View -> Functions - + View -> Snowman - + View -> Handles - + View -> Graph - + Debug -> Run - + Debug -> Run until selection - + Debug -> Run until expression - + Debug -> Pause - + Debug -> Restart - + Debug -> Close - + Debug -> Step into - + Debug -> Step into (source) - + Debug -> Step over - + Debug -> Step over (source) - + Debug -> Execute till return - + Debug -> Run (pass exceptions) - + Debug -> Run (swallow exception) - + Debug -> Step into (pass execptions) - + Debug -> Step into (swallow exception) - + Debug -> Step over (pass execptions) - + Debug -> Step over (swallow exception) - + Debug -> Execute till return (pass exceptions) - + Debug -> Run to user code - + Debug -> Skip next instruction - + Debug -> Command - + Debug -> Trace Into Conditional - + Debug -> Trace Over Conditional - + Debug -> Trace Record -> Bit - + Debug -> Trace Record -> None - + Debug -> Undo instruction - + Plugins -> Scylla - + Favourites -> Manage Favourite Tools - + Options -> Preferences - + Options -> Appearance - + Options -> Shortcuts - + Options -> Topmost - + Options -> Reload style.css - + Help -> About - + Help -> Donate - + Help -> Check for Updates - + Help -> Calculator - + Help -> Report Bug - + Help -> Manual - + Help -> Generate Crash Dump - + Actions -> Find Strings - + Actions -> Find Intermodular Calls - + Actions -> Toggle Breakpoint - + Actions -> Toggle Bookmark - + Actions -> Delete Breakpoint - + Actions -> Enable/Disable Breakpoint - + Actions -> Binary Edit - + Actions -> Binary Fill - + Actions -> Binary Fill NOPs - + Actions -> Binary Copy - + Actions -> Binary Paste - + Actions -> Binary Paste (Ignore Size) - + Actions -> Undo Selection - + Actions -> Set Label - + Actions -> Set Comment - + Actions -> Toggle Function - + Actions -> Toggle Argument - + Actions -> Assemble - + Actions -> Yara - + Actions -> Set New Origin Here - + Actions -> Goto Origin - + Actions -> Goto Previous - + Actions -> Goto Next - + Actions -> Goto Expression - + Actions -> Goto Start of Page - + Actions -> Goto End of Page - + Actions -> Goto Start of Function - + Actions -> Goto End of Function - + Actions -> Goto File Offset - + Actions -> Find References to Selected Address - + Actions -> Find Pattern - + Actions -> Find References - + Actions -> xrefs... - + Actions -> Analyze Single Function - + Actions -> Analyze Module - + Actions -> Help on Mnemonic - + Actions -> Toggle Mnemonic Brief - + Actions -> Highlighting Mode - + Actions -> Enable/Disable Branch Destination Preview - + Actions -> Find - + Actions -> Decompile Function - + Actions -> Decompile Selection - + Actions -> Edit breakpoint - + Actions -> Enable/Disable Logging - + Actions -> Allocate Memory - + Actions -> Free Memory - + Actions -> Sync With Expression - + Actions -> Entropy - + Actions -> Copy All Registers - + Actions -> Mark As User Module - + Actions -> Mark As System Module - + Actions -> Mark As Party - + Actions -> Set Hardware Breakpoint (Execute) - + Actions -> Remove Hardware Breakpoint - + Actions -> Remove Analysis From Module - + Actions -> Remove Analysis From Selection - + Actions -> Treat Selection As Code - + Actions -> Treat Selection As Byte - + Actions -> Treat Selection As Word - + Actions -> Treat Selection As Dword - + Actions -> Treat Selection As Fword - + Actions -> Treat Selection As Qword - + Actions -> Treat Selection As Tbyte - + Actions -> Treat Selection As Oword - + Actions -> Treat Selection As Float - + Actions -> Treat Selection As Double - + Actions -> Treat Selection As LongDouble - + Actions -> Treat Selection As ASCII - + Actions -> Treat Selection As UNICODE - + Actions -> Treat Selection As MMWord - + Actions -> Treat Selection As XMMWord - + Actions -> Treat Selection As YMMWord - + Actions -> Increase Register - + Actions -> Decrease Register - + Actions -> Increase Register by - + Actions -> Decrease Register by - + Actions -> Zero Register - + Actions -> Set Register to One - + Actions -> Toggle Register Value - + Actions -> Copy - + Actions -> Copy Address - + Actions -> Copy Symbol - + Actions -> Load Script - + Actions -> Reload Script - + Actions -> Unload Script - + Actions -> Run Script - + Actions -> Toggle Script Breakpoint - + Actions -> Run Script to Cursor - + Actions -> Step Script - + Actions -> Abort Script - + Actions -> Execute Script Command - + Actions -> Refresh - + Actions -> Graph - + Actions -> Graph -> Toggle overview - + Actions -> Increment x87 Stack - + Actions -> Decrement x87 Stack - + Actions -> Push - + Actions -> Pop - + Actions -> Redirect Log - + Actions -> Browse in Explorer - + Actions -> Download Symbols for This Module - + Actions -> Download Symbols for All Modules - + Actions -> Create New Thread Here - - - - - - - - - - - - + + + + + + + + + + + + NOT FOUND IN CONFIG! @@ -4138,422 +4154,447 @@ Invalid database file (JSON)! - + + DLL Load + + + + + DLL Unload + + + + + DLL Load and unload + + + + + DLL Breakpoint %s(%s):Module %s + + + + + DLL Breakpoint(%s):Module %s + + + + Breakpoint reached not in list! - + User code reached at %s (%p)! - + Breakpoint %p has been disabled because the bytes don't match! Expected: %02X %02X, Found: %02X %02X - + Could not set breakpoint %p! (SetBPX) - + MemRead failed on breakpoint address%p! - + Could not set memory breakpoint %p! (SetMemoryBPXEx) - - - + + + You can only set 4 hardware breakpoints - + Could not set hardware breakpoint %p! (SetHardwareBreakPoint) - + Set hardware breakpoint on %p! - + Could not delete breakpoint %p! (DeleteBPX) - + Could not delete memory breakpoint %p! (RemoveMemoryBPX) - + Could not delete hardware breakpoint %p! (DeleteHardwareBreakPoint) - - + + Trace finished after %llu steps! - - + + Trace finished after %u steps! - + Bad tracing state. - - + + ??? (GetFileNameFromHandle failed) - + Process Started: %p %s - - + + TLS Callbacks: %d - - + + Failed to get TLS callback addresses! - + TLS Callback %d - - + + %d invalid TLS callback addresses... - - + + entry breakpoint - + Process stopped with exit code 0x%X - + Thread - + Thread %X created, Entry: %p - + No threads left to switch to (bug?) - + Thread %X exit - + Attach breakpoint reached! - + System breakpoint reached! - - + + Error: Cannot load global initialization script. - - + + Error: Cannot load debuggee initialization script. - - + + TLS Callback - + DLL Loaded: %p %s - + DLL Unloaded: %p %s - + DebugString: "%s" - - + + DetachDebuggerEx failed... - - + + Detached! - + paused! - + SetThreadName(%X, "%s") - + First chance exception on %p (%.8X, %s)! - + First chance exception on %p (%.8X)! - + Last chance exception on %p (%.8X, %s)! - + Last chance exception on %p (%.8X)! - + Delete breakpoint failed (BpDelete): %p - - - + + + Delete breakpoint failed (DeleteBPX): %p - - - + + + Could not enable breakpoint %p (SetBPX) - - - + + + Could not enable breakpoint %p (BpEnable) - - - + + + Could not disable breakpoint %p (BpEnable) - - - + + + Could not disable breakpoint %p (DeleteBPX) - + Did not enable hardware breakpoint %p (all slots full) - - + + Could not enable hardware breakpoint %p (BpEnable) - + Could not enable hardware breakpoint %p (SetHardwareBreakPoint) - - + + Could not disable hardware breakpoint %p (BpEnable) - + Could not disable hardware breakpoint %p (DeleteHardwareBreakPoint) - - + + Could not enable memory breakpoint %p (BpEnable) - - + + Could not enable memory breakpoint %p (SetMemoryBPXEx) - - + + Could not disable memory breakpoint %p (BpEnable) - - + + Could not disable memory breakpoint %p (RemoveMemoryBPX) - + Delete memory breakpoint failed (BpDelete): %p - + Delete memory breakpoint failed (RemoveMemoryBPX): %p - + Delete hardware breakpoint failed (BpDelete): %p - + Delete hardware breakpoint failed (DeleteHardwareBreakPoint): %p - + Error starting process (CreateProcess, %s)! - - + + IsWow64Process failed! - - + + Use x32dbg to debug this process! - - + + Use x64dbg to debug this process! - + Debugging stopped! + - @@ -4594,521 +4635,525 @@ Invalid database file (JSON)! - + The debuggee does not stop after 10 seconds. The debugger state may be corrupted. - - - - - - - - - + + + + + + + + + Not enough arguments! - + Invalid type specified! - + Default breakpoint type set to: %s - + Invalid addr: "%s" - + Breakpoint already set! - + Error setting breakpoint at %p! (IsBPXEnabled) - + Error setting breakpoint at %p! (memread) - + Error setting breakpoint at %p! (bpnew) - - + + Error setting breakpoint at %p! (SetBPX) - + Breakpoint at %p set! - + No breakpoints to delete! - + All breakpoints deleted! - - + + Delete breakpoint failed (bpdel): %p - - - - - - - - - + + + + + + + + + No such breakpoint "%s" - + Breakpoint deleted! - + No breakpoints to enable! - + All breakpoints enabled! - + Breakpoint already enabled! - + Breakpoint enabled! - + No breakpoints to disable! - + All breakpoints disabled! - + Breakpoint already disabled! - + Breakpoint disabled! - - - - - - + + + + + + not enough arguments! - + Can't set %s on breakpoint "%s" - + breakpoint name - + break condition - + logging text - + logging condition - + command on hit - + command condition - + Can't set hit count on breakpoint "%s" - - + Can't set fast resume on breakpoint "%1" - + Can't set singleshoot on breakpoint "%1" - + + Can't set silent on breakpoint "%1" + + + + argument count mismatch! - + Invalid type, assuming 'x' - + Invalid size, using 1 - + Address not aligned to %d - + Hardware breakpoint already set! - + Error setting hardware breakpoint (bpnew)! - + Error setting hardware breakpoint (TitanEngine)! - + Hardware breakpoint at %p set! - + No hardware breakpoints to delete! - + All hardware breakpoints deleted! - - + + Delete hardware breakpoint failed: %p (BpDelete) - - + + Delete hardware breakpoint failed: %p (DeleteHardwareBreakPoint) - - - + + + No such hardware breakpoint "%s" - + Hardware breakpoint deleted! - + No hardware breakpoints to enable! - + All hardware breakpoints enabled! - + Hardware breakpoint already enabled! - + Could not enable hardware breakpoint %p (SetHardwareBreakpoint) - + Hardware breakpoint enabled! - + No hardware breakpoints to disable! - + All hardware breakpoints disabled! - + Hardware breakpoint already disabled! - + Could not disable hardware breakpoint %p (DeleteHardwareBreakpoint) - + Hardware breakpoint disabled! - + Invalid type (argument ignored) - + Memory breakpoint already set! - + Error setting memory breakpoint! (BpNew) - + Error setting memory breakpoint! (SetMemoryBPXEx) - + Memory breakpoint at %p set! - + no memory breakpoints to delete! - + All memory breakpoints deleted! - - + + Delete memory breakpoint failed: %p (BpDelete) - - + + Delete memory breakpoint failed: %p (RemoveMemoryBPX) - - - + + + No such memory breakpoint "%s" - + Memory breakpoint deleted! - + No memory breakpoints to enable! - + All memory breakpoints enabled! - + Memory memory already enabled! - + Memory breakpoint enabled! - + No memory breakpoints to disable! - + All memory breakpoints disabled! - + Memory breakpoint already disabled! - + Memory breakpoint disabled! - + Something went wrong... - + Skipped INT3! - + Debugger hidden - + Something went wrong - + Run to party is busy. - - - + + + Not enough arguments - + Trace already active - + Invalid expression "%s" - + VirtualAllocEx failed - + $lastalloc is zero, provide a page address - + VirtualFreeEx failed - + Invalid address specified - + Memset failed - + Memory %p (size: %.8X) set to %.2X @@ -5116,569 +5161,582 @@ Invalid database file (JSON)! - + %ums - + Program is not running - - + + Error suspending thread - - - + + + Error resuming thread - + Error loading Scylla.dll! - + Could not find export 'ScyllaStartGui' inside Scylla.dll - + Scylla is already loaded - + Could not open process %X! - + Could not get module filename %X! - - - + + + Invalid address "%s"! - + Invalid stack address! - + Exception will be swallowed - + Exception will be thrown in the program - + Dll breakpoint set on "%s"! - + Failed to remove DLL breakpoint... - + DLL breakpoint removed! - - - - - - + + + + + + Invalid thread %X - + Thread switched! - + Thread suspended - + Thread resumed! - + Thread terminated - + Error terminating thread! - + Create thread failed! - + Thread %X created at %s %p(Argument=%llX) - + Thread %X created at %s %p(Argument=%X) - + %d/%d thread(s) suspended - + %d/%d thread(s) resumed - - + + Unknown priority value, read the help! - + Error setting thread priority - + Thread priority changed! - + Failed to change the name for thread %X - + Thread name set to "%s"! - + Thread name changed from "%s" to "%s"! - + This may take very long, depending on your network connection and data in the debug directory... - - + + Done! See symbol log for more information - + Invalid module "%s"! - + GetModuleFileNameExA failed! - + SymGetSearchPath failed! - + SymSetSearchPath (1) failed! - + SymUnloadModule64 failed! - + SymLoadModuleEx failed! - + SymSetSearchPathW (2) failed! - - - + + Error getting JIT auto %s - + Unknown JIT auto entry type. Use x64 or x32 as parameter. - - + + Error using x64 arg the debugger is not a WOW64 process - - + + Unknown JIT auto entry type. Use x64 or x32 as parameter - + JIT auto %s: %s - + Error run the debugger as Admin to setjitauto - + Error setting JIT Auto. Use ON:1 or OFF:0 arg or x64/x32, ON:1 or OFF:0. - + Error unknown parameters. Use ON:1 or OFF:0 - - Error setting JIT auto %s - + + Error setting JIT auto x64 - + + Error setting JIT auto x32 + + + + Error unknown parameters. Use x86 or x64 and ON:1 or OFF:0 - + + Error getting JIT auto x64 + + + + + Error getting JIT auto x32 + + + + Error unknown parameters use x86 or x64, ON/1 or OFF/0 - + New JIT auto %s: %s - + Error run the debugger as Admin to setjit - - - - - - + + + + + + Error setting JIT %s - - + + Error there is no old JIT entry stored. - + New OLD JIT stored: %s - - + + Unknown JIT entry type. Use OLD, x64 or x32 as parameter. - - + + Error using x64 arg. The debugger is not a WOW64 process - + Error unknown parameters. Use old, oldsave, restore, x86 or x64 as parameter. - + New JIT %s: %s - - + + Error getting JIT %s - + Error: there is not an OLD JIT entry stored yet. - + OLD JIT entry stored: %s - + JIT %s: %s - + Error: using an address as arg1 - - + + Error getting rights of page: %s - + Page: %p, Rights: %s - + Error: Using an address as arg1 and as arg2: Execute, ExecuteRead, ExecuteReadWrite, ExecuteWriteCopy, NoAccess, ReadOnly, ReadWrite, WriteCopy. You can add a G at first for add PAGE GUARD, example: GReadOnly - + Error: Set rights of %p with Rights: %s - + New rights of %p: %s - + Error: you must specify the name of the DLL to load - + Error: couldn't allocate memory in debuggee - + Error: couldn't write process memory - + Error: couldn't get kernel32:LoadLibraryA - + Error allocating memory for cmdline - + Error converting UNICODE cmdline - + Error reading PEB base addres - + Error reading PEB -> ProcessParameters -> CommandLine UNICODE_STRING - + Error reading PEB -> ProcessParameters pointer address - + Error Getting remote PEB address - + Error Getting command line base address - + Error checking the pattern of the commandline stored - + Error writing the new command line stored - + Error getting getcommandline - + Error allocating the page with UNICODE and ANSI command lines - + Error writing the ANSI command line in the page - + Error writing the UNICODE command line in the page - + Error writing command line UNICODE in PEB - + Error getting cmdline - + (Address: %p) - + Command line: %s - + Error: write the arg1 with the new command line of the process debugged - + New command line: %s - + Stack is now freezed - + Stack is now unfreezed - + Invalid line: "%s" - + Failed to convert number "%s" @@ -5920,6 +5978,12 @@ Invalid database file (JSON)! Variable size not supported. + + + invalid hex string "%s" (length not divisible by 2) + + + Script @@ -6471,6 +6535,7 @@ Invalid database file (JSON)! + invalid argument @@ -7083,296 +7148,306 @@ Invalid database file (JSON)! - + command cut at ~%d characters - + [Script DLL] Calling export "AsyncStart"... - + [Script DLL] "AsyncStart" returned! - - + + [Script DLL] Calling FreeLibrary... - - + + success! - - + + failure (%08X)... - + [Script DLL] Loading Script DLL "%s"... - + [Script DLL] DLL loaded on 0x%p! - + [Script DLL] Creating thread to call the export "AsyncStart"... - + [Script DLL] Calling export "Start"... - + [Script DLL] "Start" returned! - + [Script DLL] Failed to find the exports "AsyncStart" or "Start" (%08X)! - + [Script DLL] LoadLibary failed (%08X)! - + Initializing wait objects... - + Initializing debugger... - + Initializing debugger functions... - + Setting JSON memory management functions... - + Initializing capstone... - + Initializing Yara... - + Getting directory information... - + Mnemonic help database loaded! - + Failed to load mnemonic help database... - + Failed to read mnemonic help database... - + Error codes database loaded! - + Failed to load error codes... - + Exception codes database loaded! - + Failed to load exception codes... - + + NTSTATUS codes database loaded! + + + + + Failed to load NTSTATUS codes... + + + + It is strongly discouraged to use symbol servers in your path directly (use the store option instead). Do you want me to fix this? - + Symbol Path: %s - + Allocating message stack... - + Initializing global script variables... - + Registering debugger commands... - + Registering GUI command handler... - + Registering expression functions... - + Default - + Registering Script DLL command handler... - + Script DLL - + Starting command loop... - + Loading plugins... - + Handling command line... - + Reading notes file... - + Initialization successful! - + Stopping running debuggee... - + The debuggee does not close after 10 seconds. Probably the debugger state has been corrupted. - + Aborting scripts... - + Waiting for the debuggee to be stopped... - + Unloading plugins... - + Stopping command thread... - + Cleaning up allocated data... - + Checking for mem leaks... - + %d memory leak(s) found! - + Cleaning up wait objects... - + Cleaning up debugger threads... - + Saving notes... - + Exit signal processed successfully! @@ -8064,65 +8139,80 @@ Do you want me to fix this? - + + Handles + + + + + TCP Connections + + + + + Privileges + + + + &Refresh - + Close handle - - + + Disable Privilege: - - + + Enable Privilege: - + Disable all privileges - + Enable all privileges - + TCP Connection enumeration is only available on Windows Vista or greater. - - - + + + &Copy - - - - + + + + Unknown - - + + Enabled - + Disabled @@ -10281,37 +10371,42 @@ Do you want to apply these patches anyway? - + + Show Watch Labels in Side Bar + + + + Misc - + Symbol Store: - + Symbol Path: - + Set x64dbg as Just In Time Debugger - + JIT: - + Confirm before attaching - + <font color="red">DIE SCUM!</font> @@ -10321,47 +10416,47 @@ Do you want to apply these patches anyway? - + Search Engine URL - + Save - + Cancel - + <font color="red"><b>Warning</b></font>: Run the debugger as Admin to enable JIT. - + Settings saved! - + ERROR NOT FOUND OLD JIT - + NOT FOUND OLD JIT ENTRY STORED, USE SETJIT COMMAND - + Question - + Are you sure you want to add %.8X? @@ -10993,31 +11088,31 @@ Do you want to apply these patches anyway? - + Disabled - + Changed - + Is true - + Is false - + Not changed @@ -11042,24 +11137,24 @@ Do you want to apply these patches anyway? - + Watchdog - - + + Enter the expression to watch - - + + Example: [EAX] - + Enter the name of the watch variable