From beaf43960f58ebfbd4f7179aefb734cb026b9d45 Mon Sep 17 00:00:00 2001 From: mrexodia Date: Sat, 27 Aug 2016 21:59:09 +0200 Subject: [PATCH] updated --- x64dbg.ts | 593 ++++++++++++++++++++++++++++++++++-------------------- 1 file changed, 375 insertions(+), 218 deletions(-) diff --git a/x64dbg.ts b/x64dbg.ts index 3ce87d5..059265a 100644 --- a/x64dbg.ts +++ b/x64dbg.ts @@ -2060,84 +2060,84 @@ - + &Integer - + &Float - + &Address - + &Disassembly - + Add label at - - - + + + Error! - + DbgSetLabelAt failed! - + Modify value - + Enter expression to follow in Dump... - + Not inside a module... - + Goto File Offset in %1 - - - + + + Hex - - + + ASCII - - + + UNICODE - - + + Signed short (16-bit) @@ -2162,166 +2162,178 @@ - - - Signed long (32-bit) + + + Signed byte (8-bit) - - Signed long long (64-bit) + + Signed long (32-bit) - - Unsigned short (16-bit) + + Signed long long (64-bit) - - Unsigned long (32-bit) + + Unsigned byte (8-bit) - - Unsigned long long (64-bit) + + Unsigned short (16-bit) - - Hex short (16-bit) + + Unsigned long (32-bit) - - Hex long (32-bit) + + Unsigned long long (64-bit) - + + Hex short (16-bit) + + + + + + Hex long (32-bit) + + + + + Hex long long (64-bit) - + &Float (32-bit) - + &Double (64-bit) - + &Long double (80-bit) - + Float (32-bit) - + Double (64-bit) - + Long double (80-bit) - + Address - + Comments - + Not yet supported! - + Edit data at %1 - + Fill data at %1 - + Save to file - + All files (*.*) - + Find Pattern... - + Dump - + Entropy (Address: %1, Size: %2) - + Enter expression to sync with... - + Size - + Warning - + You're trying to allocate a zero-sized buffer just now. - - + + Error - + The size of buffer you're trying to allocate exceeds 1GB. Please check your expression to ensure nothing is wrong. - + Memory allocation failed! @@ -2440,286 +2452,286 @@ - + P&ush DWORD... - + P&ush QWORD... - + P&op DWORD - + P&op QWORD - + Align Stack Pointer - + B&inary - + &Edit - + &Fill... - - + + &Copy - + &Paste - + Paste (&Ignore Size) - + Brea&kpoint - + Hardware, Access - - + + &Byte - - + + &Word - - + + &Dword - - + + &Qword - + Hardware, Write - + Remove &Hardware - + Memory, Access - + Memory, Write - - + + &Singleshoot - - + + &Restore on hit - + Remove &Memory - + &Restore selection - - + + Modify - + Follow R&SP - + Follow R&BP - + Follow E&SP - + Follow E&BP - - + + Freeze the stack - + &Find Pattern... - + Go to &Expression - + Go to Previous - + Go to Next - + Go to Base of Stack Frame - + Follow DWORD in Dump - + Follow QWORD in Dump - + &Watch DWORD - + &Watch QWORD - + Push DWORD - + Push QWORD - + Go to Next Stack Frame - + Go to Previous Stack Frame - + &Follow in Disassembler - + Follow DWORD in &Dump - + Follow QWORD in &Dump - + Dump %1 - + Follow DWORD in &Stack - + Follow QWORD in &Stack - + Unfreeze the stack - + Enter expression to follow in Stack... - + Edit data at %1 - + Fill data at %1 - + Find Pattern... @@ -6465,6 +6477,146 @@ Invalid database file (JSON)! + + + Image information for %s + + + + + + Characteristics (0x%X): + + + + + + + None + + + + + + IMAGE_FILE_RELOCS_STRIPPED: Relocation info stripped from file. + + + + + IMAGE_FILE_EXECUTABLE_IMAGE: File is executable (i.e. no unresolved externel references). + + + + + IMAGE_FILE_LINE_NUMS_STRIPPED: Line nunbers stripped from file. + + + + + IMAGE_FILE_LOCAL_SYMS_STRIPPED: Local symbols stripped from file. + + + + + IMAGE_FILE_AGGRESIVE_WS_TRIM: Agressively trim working set + + + + + IMAGE_FILE_LARGE_ADDRESS_AWARE: App can handle >2gb addresses + + + + + IMAGE_FILE_BYTES_REVERSED_LO: Bytes of machine word are reversed. + + + + + IMAGE_FILE_32BIT_MACHINE: 32 bit word machine. + + + + + IMAGE_FILE_DEBUG_STRIPPED: Debugging info stripped from file in .DBG file + + + + + IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP: If Image is on removable media, copy and run from the swap file. + + + + + IMAGE_FILE_NET_RUN_FROM_SWAP: If Image is on Net, copy and run from the swap file. + + + + + IMAGE_FILE_SYSTEM: System File. + + + + + IMAGE_FILE_DLL: File is a DLL. + + + + + IMAGE_FILE_UP_SYSTEM_ONLY: File should only be run on a UP machine + + + + + IMAGE_FILE_BYTES_REVERSED_HI: Bytes of machine word are reversed. + + + + + DLL Characteristics (0x%X): + + + + + + IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE: DLL can move. + + + + + IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY: Code Integrity Image + + + + + IMAGE_DLLCHARACTERISTICS_NX_COMPAT: Image is NX compatible + + + + + IMAGE_DLLCHARACTERISTICS_NO_ISOLATION: Image understands isolation and doesn't want it + + + + + IMAGE_DLLCHARACTERISTICS_NO_SEH: Image does not use SEH. No SE handler may reside in this image + + + + + IMAGE_DLLCHARACTERISTICS_NO_BIND: Do not bind this image. + + + + + IMAGE_DLLCHARACTERISTICS_WDM_DRIVER: Driver uses WDM model. + + + + + IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE: Remote Desktop Services aware. + + Reserved (%p) @@ -6783,296 +6935,296 @@ Invalid database file (JSON)! - + command cut at ~%d characters - + [Script DLL] Calling export "AsyncStart"... - + [Script DLL] "AsyncStart" returned! - - + + [Script DLL] Calling FreeLibrary... - - + + success! - - + + failure (%08X)... - + [Script DLL] Loading Script DLL "%s"... - + [Script DLL] DLL loaded on 0x%p! - + [Script DLL] Creating thread to call the export "AsyncStart"... - + [Script DLL] Calling export "Start"... - + [Script DLL] "Start" returned! - + [Script DLL] Failed to find the exports "AsyncStart" or "Start" (%08X)! - + [Script DLL] LoadLibary failed (%08X)! - + Initializing wait objects... - + Initializing debugger... - + Initializing debugger functions... - + Setting JSON memory management functions... - + Initializing capstone... - + Initializing Yara... - + Getting directory information... - + Mnemonic help database loaded! - + Failed to load mnemonic help database... - + Failed to read mnemonic help database... - + Error codes database loaded! - + Failed to load error codes... - + Exception codes database loaded! - + Failed to load exception codes... - + It is strongly discouraged to use symbol servers in your path directly (use the store option instead). Do you want me to fix this? - + Symbol Path: %s - + Allocating message stack... - + Initializing global script variables... - + Registering debugger commands... - + Registering GUI command handler... - + Registering expression functions... - + Default - + Registering Script DLL command handler... - + Script DLL - + Starting command loop... - + Loading plugins... - + Handling command line... - + Reading notes file... - + Initialization successful! - + Stopping running debuggee... - + The debuggee does not close after 10 seconds. Probably the debugger state has been corrupted. - + Aborting scripts... - + Waiting for the debuggee to be stopped... - + Unloading plugins... - + Stopping command thread... - + Cleaning up allocated data... - + Checking for mem leaks... - + %d memory leak(s) found! - + Cleaning up wait objects... - + Cleaning up debugger threads... - + Saving notes... - + Exit signal processed successfully! @@ -9243,152 +9395,157 @@ Do you want to apply these patches anyway? RegistersView - + Increment - + Decrement - + Zero - + Set to 1 - + Modify value - + Toggle - + Copy value to clipboard - + Copy Symbol Value to Clipboard - + Copy all registers - + Follow in Disassembler - + Follow in Dump - + Follow in Stack - + Increment x87 Stack - + Decrement x87 Stack - + Change view - + Increase 4 - + Increase 8 - + Decrease 4 - + Decrease 8 - + Push - + Pop - + + Highlight + + + + Hide FPU - + Show FPU - + Edit YMM register - + Edit XMM register - + Edit FPU register - + ERROR CONVERTING TO HEX - - - - - - + + + + + + Edit - + Set Hardware Breakpoint on %1