From c1745b2b1b122536156f527d4962dde130212c79 Mon Sep 17 00:00:00 2001 From: mrexodia Date: Fri, 2 Sep 2016 19:14:39 +0200 Subject: [PATCH] update --- x64dbg.ts | 1446 ++++++++++++++++++++++++++++------------------------- 1 file changed, 769 insertions(+), 677 deletions(-) diff --git a/x64dbg.ts b/x64dbg.ts index 0f320b5..a71c5fc 100644 --- a/x64dbg.ts +++ b/x64dbg.ts @@ -1562,235 +1562,245 @@ - - Origin + + Create New Thread Here + Origin + + + + Previous - + Next - + Expression - + File Offset - + Start of Page - + End of Page - + Start of Function - + End of Function - + Go to - + xrefs... - - - - - C&ommand - - - &Constant + C&ommand - &String references + &Constant + &String references + + + + + + &Intermodular calls - + &Pattern - + Current Region - + Current Module - + All Modules - + &Search for - + &Selected Address(es) - + Find &references to - + Current address is not executable - + Setting software breakpoint here may result in crash. Do you really want to continue? - - + + Add label at - - - - - - - - + + + + + + + + Error! - - + + DbgSetLabelAt failed! - + Add comment at - + DbgSetCommentAt failed! - + DbgSetBookmarkAt failed! - + Assemble at %1 - + Failed to assemble instruction " %1 " (%2) - + Not inside a module... - + Goto File Offset in - + Enter Constant - + Find Pattern... - + Edit code at %1 - + Fill code at %1 - + Selection not in a module... - + Failed to assemble instruction " - - - - + + + + Failed to set trace record. - - - + + Argument for the new thread + + + + + + Size @@ -2463,276 +2473,276 @@ - + P&op DWORD - + P&op QWORD - + Align Stack Pointer - + B&inary - + &Edit - + &Fill... - - + + &Copy - + &Paste - + Paste (&Ignore Size) - + Brea&kpoint - + Hardware, Access - - - - &Byte - - - &Word + &Byte + &Word + + + + + &Dword - - + + &Qword - + Hardware, Write - + Remove &Hardware - + Memory, Access - + Memory, Write - - - - &Singleshoot - - + &Singleshoot + + + + + &Restore on hit - + Remove &Memory - + &Restore selection - - + + Modify - + Follow R&SP - + Follow R&BP - + Follow E&SP - + Follow E&BP - - + + Freeze the stack - + &Find Pattern... - + Go to &Expression - + Go to Previous - + Go to Next - + Go to Base of Stack Frame - + Follow DWORD in Dump - + Follow QWORD in Dump - + &Watch DWORD - + &Watch QWORD - + Push DWORD - + Push QWORD - + Go to Next Stack Frame - + Go to Previous Stack Frame - + &Follow in Disassembler - + Follow DWORD in &Dump - + Follow QWORD in &Dump - + Dump %1 - + Follow DWORD in &Stack - + Follow QWORD in &Stack - + Unfreeze the stack - + Enter expression to follow in Stack... - + Edit data at %1 - + Fill data at %1 - + Find Pattern... @@ -3702,107 +3712,162 @@ run - Actions -> Zero Register + Actions -> Increase Register by - Actions -> Set Register to One + Actions -> Decrease Register by - Actions -> Toggle Register Value + Actions -> Zero Register - Actions -> Copy + Actions -> Set Register to One - Actions -> Copy Address + Actions -> Toggle Register Value - Actions -> Copy Symbol + Actions -> Copy - Actions -> Load Script + Actions -> Copy Address - Actions -> Reload Script + Actions -> Copy Symbol - Actions -> Unload Script + Actions -> Load Script - Actions -> Run Script + Actions -> Reload Script - Actions -> Toggle Script Breakpoint + Actions -> Unload Script - Actions -> Run Script to Cursor + Actions -> Run Script - Actions -> Step Script + Actions -> Toggle Script Breakpoint - Actions -> Abort Script + Actions -> Run Script to Cursor - Actions -> Execute Script Command + Actions -> Step Script - Actions -> Refresh + Actions -> Abort Script - Actions -> Graph + Actions -> Execute Script Command + Actions -> Refresh + + + + + Actions -> Graph + + + + Actions -> Graph -> Toggle overview - - - - - - - - - - - - + + Actions -> Increment x87 Stack + + + + + Actions -> Decrement x87 Stack + + + + + Actions -> Push + + + + + Actions -> Pop + + + + + Actions -> Redirect Log + + + + + Actions -> Browse in Explorer + + + + + Actions -> Download Symbols for This Module + + + + + Actions -> Download Symbols for All Modules + + + + + Actions -> Create New Thread Here + + + + + + + + + + + + + + + NOT FOUND IN CONFIG! @@ -3956,539 +4021,539 @@ Invalid database file (JSON)! - - (switched from %X) + + (switched from %s) - - File: %s - PID: %X - %sThread: %X%s + + File: %s - PID: %X - %sThread: %s%s - + %s breakpoint "%s" at %s (%p)! - + %s breakpoint at %s (%p)! - + %s breakpoint "%s" at %p! - + %s breakpoint at %p! - + execute - + read/write - + write - + Hardware breakpoint (%s%s) "%s" at %s (%p)! - + Hardware breakpoint (%s%s) at %s (%p)! - + Hardware breakpoint (%s%s) "%s" at %p! - + Hardware breakpoint (%s%s) at %p! - + (read) - + (write) - + (execute) - + (read/write/execute) - + Memory breakpoint%s "%s" at %s (%p, %p)! - + Memory breakpoint%s at %s (%p, %p)! - + Memory breakpoint%s "%s" at %p (%p)! - + Memory breakpoint%s at %p (%p)! - + Breakpoint reached not in list! - + User code reached at %s (%p)! - + Breakpoint %p has been disabled because the bytes don't match! Expected: %02X %02X, Found: %02X %02X - + Could not set breakpoint %p! (SetBPX) - + MemRead failed on breakpoint address%p! - + Could not set memory breakpoint %p! (SetMemoryBPXEx) - - - + + + You can only set 4 hardware breakpoints - + Could not set hardware breakpoint %p! (SetHardwareBreakPoint) - + Set hardware breakpoint on %p! - + Could not delete breakpoint %p! (DeleteBPX) - + Could not delete memory breakpoint %p! (RemoveMemoryBPX) - + Could not delete hardware breakpoint %p! (DeleteHardwareBreakPoint) - - + + Trace finished after %llu steps! - - + + Trace finished after %u steps! - + Bad tracing state. - - + + ??? (GetFileNameFromHandle failed) - + Process Started: %p %s - - + + TLS Callbacks: %d - - + + Failed to get TLS callback addresses! - + TLS Callback %d - - + + %d invalid TLS callback addresses... - - + + entry breakpoint - + Process stopped with exit code 0x%X - + Thread - + Thread %X created, Entry: %p - + No threads left to switch to (bug?) - + Thread %X exit - + Attach breakpoint reached! - + System breakpoint reached! - - + + Error: Cannot load global initialization script. - - + + Error: Cannot load debuggee initialization script. - - + + TLS Callback - + DLL Loaded: %p %s - + DLL Unloaded: %p %s - + DebugString: "%s" - - + + DetachDebuggerEx failed... - - + + Detached! - + paused! - + SetThreadName(%X, "%s") - + First chance exception on %p (%.8X, %s)! - + First chance exception on %p (%.8X)! - + Last chance exception on %p (%.8X, %s)! - + Last chance exception on %p (%.8X)! - + Delete breakpoint failed (BpDelete): %p - - - + + + Delete breakpoint failed (DeleteBPX): %p - - - + + + Could not enable breakpoint %p (SetBPX) - - - + + + Could not enable breakpoint %p (BpEnable) - - - + + + Could not disable breakpoint %p (BpEnable) - - - + + + Could not disable breakpoint %p (DeleteBPX) - + Did not enable hardware breakpoint %p (all slots full) - - + + Could not enable hardware breakpoint %p (BpEnable) - + Could not enable hardware breakpoint %p (SetHardwareBreakPoint) - - + + Could not disable hardware breakpoint %p (BpEnable) - + Could not disable hardware breakpoint %p (DeleteHardwareBreakPoint) - - + + Could not enable memory breakpoint %p (BpEnable) - - + + Could not enable memory breakpoint %p (SetMemoryBPXEx) - - + + Could not disable memory breakpoint %p (BpEnable) - - + + Could not disable memory breakpoint %p (RemoveMemoryBPX) - + Delete memory breakpoint failed (BpDelete): %p - + Delete memory breakpoint failed (RemoveMemoryBPX): %p - + Delete hardware breakpoint failed (BpDelete): %p - + Delete hardware breakpoint failed (DeleteHardwareBreakPoint): %p - + Error starting process (CreateProcess, %s)! - - + + IsWow64Process failed! - - + + Use x32dbg to debug this process! - - + + Use x64dbg to debug this process! - + Debugging stopped! - + @@ -4534,516 +4599,516 @@ Invalid database file (JSON)! - - - - - - - - - + + + + + + + + + Not enough arguments! - + Invalid type specified! - + Default breakpoint type set to: %s - + Invalid addr: "%s" - + Breakpoint already set! - + Error setting breakpoint at %p! (IsBPXEnabled) - + Error setting breakpoint at %p! (memread) - + Error setting breakpoint at %p! (bpnew) - - + + Error setting breakpoint at %p! (SetBPX) - + Breakpoint at %p set! - + No breakpoints to delete! - + All breakpoints deleted! - - + + Delete breakpoint failed (bpdel): %p - - - - - - - - - + + + + + + + + + No such breakpoint "%s" - + Breakpoint deleted! - + No breakpoints to enable! - + All breakpoints enabled! - + Breakpoint already enabled! - + Breakpoint enabled! - + No breakpoints to disable! - + All breakpoints disabled! - + Breakpoint already disabled! - + Breakpoint disabled! - - - - - - + + + + + + not enough arguments! - + Can't set %s on breakpoint "%s" - + breakpoint name - + break condition - + logging text - + logging condition - + command on hit - + command condition - + Can't set hit count on breakpoint "%s" - - + + Can't set fast resume on breakpoint "%1" - + Can't set singleshoot on breakpoint "%1" - + argument count mismatch! - + Invalid type, assuming 'x' - + Invalid size, using 1 - + Address not aligned to %d - + Hardware breakpoint already set! - + Error setting hardware breakpoint (bpnew)! - + Error setting hardware breakpoint (TitanEngine)! - + Hardware breakpoint at %p set! - + No hardware breakpoints to delete! - + All hardware breakpoints deleted! - - + + Delete hardware breakpoint failed: %p (BpDelete) - - + + Delete hardware breakpoint failed: %p (DeleteHardwareBreakPoint) - - - + + + No such hardware breakpoint "%s" - + Hardware breakpoint deleted! - + No hardware breakpoints to enable! - + All hardware breakpoints enabled! - + Hardware breakpoint already enabled! - + Could not enable hardware breakpoint %p (SetHardwareBreakpoint) - + Hardware breakpoint enabled! - + No hardware breakpoints to disable! - + All hardware breakpoints disabled! - + Hardware breakpoint already disabled! - + Could not disable hardware breakpoint %p (DeleteHardwareBreakpoint) - + Hardware breakpoint disabled! - + Invalid type (argument ignored) - + Memory breakpoint already set! - + Error setting memory breakpoint! (BpNew) - + Error setting memory breakpoint! (SetMemoryBPXEx) - + Memory breakpoint at %p set! - + no memory breakpoints to delete! - + All memory breakpoints deleted! - - + + Delete memory breakpoint failed: %p (BpDelete) - - + + Delete memory breakpoint failed: %p (RemoveMemoryBPX) - - - + + + No such memory breakpoint "%s" - + Memory breakpoint deleted! - + No memory breakpoints to enable! - + All memory breakpoints enabled! - + Memory memory already enabled! - + Memory breakpoint enabled! - + No memory breakpoints to disable! - + All memory breakpoints disabled! - + Memory breakpoint already disabled! - + Memory breakpoint disabled! - + Something went wrong... - + Skipped INT3! - + Debugger hidden - + Something went wrong - + Run to party is busy. - - - + + + Not enough arguments - + Trace already active - + Invalid expression "%s" - + VirtualAllocEx failed - + $lastalloc is zero, provide a page address - + VirtualFreeEx failed - + Invalid address specified - + Memset failed - + Memory %p (size: %.8X) set to %.2X @@ -5051,538 +5116,555 @@ Invalid database file (JSON)! - + %ums - + Program is not running - - + + Error suspending thread - - - + + + Error resuming thread - + Error loading Scylla.dll! - + Could not find export 'ScyllaStartGui' inside Scylla.dll - + Scylla is already loaded - + Could not open process %X! - + Could not get module filename %X! - - - + + + Invalid address "%s"! - + Invalid stack address! - + Exception will be swallowed - + Exception will be thrown in the program - + Dll breakpoint set on "%s"! - + Failed to remove DLL breakpoint... - + DLL breakpoint removed! - - - - - - + + + + + + Invalid thread %X - + Thread switched! - + Thread suspended - + Thread resumed! - + Thread terminated - + Error terminating thread! - + + Create thread failed! + + + + + Thread %X created at %s %p(Argument=%llX) + + + + + + Thread %X created at %s %p(Argument=%X) + + + + + %d/%d thread(s) suspended - + %d/%d thread(s) resumed - - + + Unknown priority value, read the help! - + Error setting thread priority - + Thread priority changed! - + Failed to change the name for thread %X - + Thread name set to "%s"! - + Thread name changed from "%s" to "%s"! - + This may take very long, depending on your network connection and data in the debug directory... - - + + Done! See symbol log for more information - + Invalid module "%s"! - + GetModuleFileNameExA failed! - + SymGetSearchPath failed! - + SymSetSearchPath (1) failed! - + SymUnloadModule64 failed! - + SymLoadModuleEx failed! - + SymSetSearchPathW (2) failed! - - - + + + Error getting JIT auto %s - + Unknown JIT auto entry type. Use x64 or x32 as parameter. - - + + Error using x64 arg the debugger is not a WOW64 process - - + + Unknown JIT auto entry type. Use x64 or x32 as parameter - + JIT auto %s: %s - + Error run the debugger as Admin to setjitauto - + Error setting JIT Auto. Use ON:1 or OFF:0 arg or x64/x32, ON:1 or OFF:0. - + Error unknown parameters. Use ON:1 or OFF:0 - + Error setting JIT auto %s - + Error unknown parameters. Use x86 or x64 and ON:1 or OFF:0 - + Error unknown parameters use x86 or x64, ON/1 or OFF/0 - + New JIT auto %s: %s - + Error run the debugger as Admin to setjit - - - - - + + + + + Error setting JIT %s - - + + Error there is no old JIT entry stored. - + New OLD JIT stored: %s - - + + Unknown JIT entry type. Use OLD, x64 or x32 as parameter. - - + + Error using x64 arg. The debugger is not a WOW64 process - + Error unknown parameters. Use old, oldsave, restore, x86 or x64 as parameter. - + New JIT %s: %s - - + + Error getting JIT %s - + Error: there is not an OLD JIT entry stored yet. - + OLD JIT entry stored: %s - + JIT %s: %s - + Error: using an address as arg1 - - + + Error getting rights of page: %s - + Page: %p, Rights: %s - + Error: Using an address as arg1 and as arg2: Execute, ExecuteRead, ExecuteReadWrite, ExecuteWriteCopy, NoAccess, ReadOnly, ReadWrite, WriteCopy. You can add a G at first for add PAGE GUARD, example: GReadOnly - + Error: Set rights of %p with Rights: %s - + New rights of %p: %s - + Error: you must specify the name of the DLL to load - + Error: couldn't allocate memory in debuggee - + Error: couldn't write process memory - + Error: couldn't get kernel32:LoadLibraryA - + Error allocating memory for cmdline - + Error converting UNICODE cmdline - + Error reading PEB base addres - + Error reading PEB -> ProcessParameters -> CommandLine UNICODE_STRING - + Error reading PEB -> ProcessParameters pointer address - + Error Getting remote PEB address - + Error Getting command line base address - + Error checking the pattern of the commandline stored - + Error writing the new command line stored - + Error getting getcommandline - + Error allocating the page with UNICODE and ANSI command lines - + Error writing the ANSI command line in the page - + Error writing the UNICODE command line in the page - + Error writing command line UNICODE in PEB - + Error getting cmdline - + (Address: %p) - + Command line: %s - + Error: write the arg1 with the new command line of the process debugged - + New command line: %s - + Stack is now freezed - + Stack is now unfreezed @@ -7001,296 +7083,296 @@ Invalid database file (JSON)! - + command cut at ~%d characters - + [Script DLL] Calling export "AsyncStart"... - + [Script DLL] "AsyncStart" returned! - - + + [Script DLL] Calling FreeLibrary... - - + + success! - - + + failure (%08X)... - + [Script DLL] Loading Script DLL "%s"... - + [Script DLL] DLL loaded on 0x%p! - + [Script DLL] Creating thread to call the export "AsyncStart"... - + [Script DLL] Calling export "Start"... - + [Script DLL] "Start" returned! - + [Script DLL] Failed to find the exports "AsyncStart" or "Start" (%08X)! - + [Script DLL] LoadLibary failed (%08X)! - + Initializing wait objects... - + Initializing debugger... - + Initializing debugger functions... - + Setting JSON memory management functions... - + Initializing capstone... - + Initializing Yara... - + Getting directory information... - + Mnemonic help database loaded! - + Failed to load mnemonic help database... - + Failed to read mnemonic help database... - + Error codes database loaded! - + Failed to load error codes... - + Exception codes database loaded! - + Failed to load exception codes... - + It is strongly discouraged to use symbol servers in your path directly (use the store option instead). Do you want me to fix this? - + Symbol Path: %s - + Allocating message stack... - + Initializing global script variables... - + Registering debugger commands... - + Registering GUI command handler... - + Registering expression functions... - + Default - + Registering Script DLL command handler... - + Script DLL - + Starting command loop... - + Loading plugins... - + Handling command line... - + Reading notes file... - + Initialization successful! - + Stopping running debuggee... - + The debuggee does not close after 10 seconds. Probably the debugger state has been corrupted. - + Aborting scripts... - + Waiting for the debuggee to be stopped... - + Unloading plugins... - + Stopping command thread... - + Cleaning up allocated data... - + Checking for mem leaks... - + %d memory leak(s) found! - + Cleaning up wait objects... - + Cleaning up debugger threads... - + Saving notes... - + Exit signal processed successfully! @@ -7803,71 +7885,76 @@ Do you want me to fix this? - + Shortcut - + + Clear + + + + &OK - + &Cancel - + Path - + Description - - + + Enter the description - - + + This string will appear in the menu. - - + + Select script - - + + Script files (*.txt *.scr);;All files (*.*) - + Enter the command you want to favourite - + Example: bphws csp - + Enter a new command - + Example: bphws ESP @@ -8063,7 +8150,7 @@ Do you want me to fix this? - + Address @@ -8152,17 +8239,17 @@ Do you want me to fix this? LogView - + Clea&r - + &Copy - + Select &All @@ -8172,80 +8259,80 @@ Do you want me to fix this? - - + + Disable &Logging - - + + &Redirect Log... - + Enable &Logging - + Stop &Redirection - + fwrite() failed (GetLastError()= %1 ). Log redirection stopped. - + Redirect log to file - + Enter the file to which you want to redirect log messages. - + Log files(*.txt);;All files(*.*) - + _wfopen() failed. Log will not be redirected to %1. - + Log will be redirected to %1. - + Logging will be enabled. - + Logging will be disabled. - + Error, log have not been saved. - + Log have been saved as %1 @@ -9609,47 +9696,47 @@ Do you want to apply these patches anyway? RegistersView - + Increment - + Decrement - + Zero - + Set to 1 - + Modify value - + Toggle - + Copy value to clipboard - + Copy Symbol Value to Clipboard - + Copy all registers @@ -9719,47 +9806,47 @@ Do you want to apply these patches anyway? - + Hide FPU - + Show FPU - + Edit YMM register - + Edit XMM register - + Edit FPU register - + ERROR CONVERTING TO HEX - - - - - - + + + + + + Edit - + Set Hardware Breakpoint on %1 @@ -10287,18 +10374,23 @@ Do you want to apply these patches anyway? - + Shortcut - + + Clear + + + + &Save - + &Cancel @@ -10308,7 +10400,7 @@ Do you want to apply these patches anyway? - + Settings saved! @@ -10365,25 +10457,25 @@ Do you want to apply these patches anyway? StdTable - - + + &Line - - + + Cropped &Table - - + + &Full Table - + &Copy @@ -10468,112 +10560,112 @@ Do you want to apply these patches anyway? - + Download Symbols for &All Modules - + Copy File &Path - + Browse in Explorer - + &Yara Memory... - + &Yara File... - + Entropy... - + Mark as &user module - + Mark as &system module - + Mark as &party... - + Import - + Export - - - + + + User - - - + + + System - - + + Party: %1 - + &Copy - + Error! - + DbgSetBookmarkAt failed! - + Entropy (%1) - + Mark the party of the module as - + Error - + The party number can only be an integer