AboutDialogAbout x64dbg关于 x64dbgWebsite:官方网站:<a href="https://x64dbg.com">https://x64dbg.com</a><a href="https://x64dbg.com">https://x64dbg.com</a>Version:版本:Icons:图标:<html><head/><body><p><a href="https://p.yusukekamiyamane.com"><span style=" text-decoration: underline;">Yusuke Kamiyamane</span></a><br/><a href="https://github.com/mrfearless"><span style=" text-decoration: underline;">mrfearless</span></a></p></body></html><html><head/><body><p><a href="https://p.yusukekamiyamane.com"><span style=" text-decoration: underline;">Yusuke Kamiyamane</span></a><br/><a href="https://github.com/mrfearless"><span style=" text-decoration: underline;">mrfearless</span></a></p></body></html>An open-source x64/x32 debugger for windows.一款开源的 Windows x64/x32 调试器。Check for Updates检查更新<h3>Donations</h3><h3>捐赠</h3>Please consider donating using the Bitcoin address on the right or by going to <a href="https://donate.x64dbg.com">donate.x64dbg.com</a>.请考虑以比特币形式捐赠,地址如右侧或前往 <a href="https://donate.x64dbg.com">donate.x64dbg.com</a>。AbstractStdTable&Line行(&L)Cropped &Table截断的表格(&T)&Full Table整个表格(&F)Line, To Log行,到日志Cropped Table, To Log截断的表格,到日志Full Table, To Log整个表格,到日志&Export Table导出表(&E)&Copy复制(&C)AbstractTableViewEdit columns编辑列AppearanceDialogAppearance外观Colors颜色Properties属性Color颜色#FFFFFF#FFFFFFOpen color selector打开颜色选择器Background Color背景色Transparent透明XXExample Text示例文本Font字体General Tables:表格:Normal常规Bold粗体Italic斜体Bold + Italic粗斜体6677889910101111121214141616181820202222Disassembly:反汇编:HexDump:十六进制显示:Stack:栈:Registers:寄存器:HexEdit:十六进制编辑:Log:日志:&Application Font*程序字体(&A)*Courier NewCourier New&Defaults默认(&D)*Setting requires restarting the application to take effect.*设置需要重启应用程序才能生效。&Save保存(&S)&Cancel取消(&C)Settings saved!
设置已保存!Background背景色Selection选区Header标题Text文本Separators分隔符EIPEIPRIPRIPAddresses地址Selected Addresses选定地址Breakpoints断点Hardware Breakpoints硬件断点Labels标签Bytes字节Modified Bytes已修改字节Restored Bytes被恢复字节Bookmarks书签Comments注释Automatic Comments自动注释Mnemonic Brief Comments助记符帮助提示Relocation underline重定向区域下划线Conditional Jump Lines (jump)将要执行的条件跳转线Conditional Jump Lines (no jump)不会执行的条件跳转线Unconditional Jump Lines无条件跳转线Traced line已追踪的行Function Lines函数包围线Loop Lines循环包围线SideBar:侧栏:Register Labels寄存器标签Conditional Jump Backwards Lines (jump)向上条件跳转线(即将执行)Conditional Jump Backwards Lines (no jump)向上条件跳转线(不会执行)Unconditional Jump Lines (jump)无条件跳转线 (跳转)Unconditional Jump Backwards Lines (jump)向上无条件跳转线(即将执行)Unconditional Jump Lines (no jump)无条件跳转线 (不跳转)Unconditional Jump Backwards Lines (no jump)向上无条件跳转线(不会执行)Code Folding Checkbox Color代码折叠框Bullets侧栏小点Breakpoint bullets断点标记Disabled Breakpoint bullets已禁用断点标记Bookmark bullets书签标记Register Names寄存器名称Argument Register Names作为参数的寄存器名称Modified Registers已修改的寄存器Highlight Read高亮读取Highlight Write高亮写入Highlight Read+Write高亮读写Extra Information附加信息Instructions:指令:Mnemonics指令助记符Push/Pops入栈/出栈指令CallsCALL指令Returns返回指令Conditional Jumps条件跳转Unconditional Jumps无条件跳转NOPs无意义指令FAR长程跳转INT3s调试断点Unusual Instructions异常指令Prefixes前缀Values立即数Commas逗号General Registers通用寄存器FPU Registers浮点寄存器MMX RegistersMMX寄存器XMM RegistersXMM寄存器YMM RegistersYMM寄存器ZMM RegistersZMM寄存器Memory Sizes内存大小Memory Segments内存段Memory Brackets内存寻址方括号Memory Stack Brackets栈中寻址方括号Memory Base Registers内存寻址基址寄存器Memory Index Registers内存寻址索引寄存器Memory Scales内存寻址缩放大小Memory Operators (+/-/*)内存寻址操作符 (+/-/*)Highlighting高亮部分0x00 Bytes0x00 字节0x7F Bytes0x7F 字节0xFF Bytes0xFF 字节IsPrint Bytes可打印字节User Code Pointer Highlight Color用户代码指针的高亮颜色User Data Pointer Highlight Color用户数据指针的高亮颜色System Code Pointer Highlight Color系统代码指针的高亮颜色System Data Pointer Highlight Color系统数据指针的高亮颜色Unknown Code Pointer Highlight Color未知模块代码指针的高亮颜色Unknown Data Pointer Highlight Color未知模块数据指针的高亮颜色ESPESPRSPRSPUser Stack Frame Line用户堆栈帧边线System Stack Frame Line系统堆栈帧边线Inactive Text不活跃文本Return To Comment返回地址注释SEH Chain CommentSEH链注释Wildcards通配符Graph:流程图:Breakpoint断点Disabled Breakpoint禁用断点Node节点Current node shadow当前节点阴影Terminal node shadow叶节点阴影Indirect call shadow间接调用的阴影Unconditional branch line无条件分支线True branch line条件真分支线False branch line条件假分支线Log日志Log Link Color日志中链接颜色Other:其它:Background Flicker Color背景闪烁颜色Search Highlight Color搜索高亮颜色Patch located in relocation region在重定向区域里的补丁Current Thread当前线程Watch (When Watchdog is Triggered)监视项 (当看门狗触发时)Memory Map Breakpoint内存区域断点Memory Map %1内存布局 %1Memory Map Section Text节名Struct text结构文本Struct primary background结构体视图主要背景色Struct secondary background结构体视图次要背景色Breakpoint Summary Parentheses断点摘要的括号Breakpoint Summary Keywords断点摘要的关键字Breakpoint Summary Strings断点摘要的内容Symbol User Module Text符号用户模块文本Symbol System Module Text符号系统模块文本Symbol Unloaded Text符号已卸载时的文本Symbol Loading Text符号正在加载时的文本Symbol Loaded Text符号已加载时的文本Link color链接颜色NOT FOUND IN CONFIG!在配置中未找到!&Default Value默认值(&D)&Current Setting当前设置(&C)Select Color选择颜色AssembleDialog00Keep &Size保持大小(&S)&Fill with NOP's剩余字节以NOP填充(&F)&XEDParse&XEDParse&asmjit&asmjitOK确定Cancel取消<font color='orange'><b>Instruction decoding error</b></font><font color='orange'><b>指令解释错误</b></font>empty instruction空指令<font color='orange'><b>Instruction encoding error: %1</b></font><font color='orange'><b>指令编码错误: %1</b></font><font color='red'><b>Instruction bigger by %1 %2...</b></font><font color='red'><b>指令比原来增大了 %1 %2...</b></font>byte字节bytes字节<br>Bytes: %1<br>字节:%1<font color='#00cc00'><b>Instruction smaller by %1 %2...</b></font><font color='#00cc00'><b>指令比原来小了 %1 %2...</b></font><font color='#00cc00'><b>Instruction is same size!</b></font><font color='#00cc00'><b>指令是同样大小!</b></font><font color='#00cc00'><b>Instruction encoded successfully!</b></font><font color='#00cc00'><b>指令编码成功!</b></font>AttachDialogAttach附加<a href="https://faq.x64dbg.com">Why is process X not shown?</a><a href="https://faq.x64dbg.com">为什么进程X不显示?</a>Refresh刷新Find Window...查找窗口...&Attach附加(&A)&Cancel取消(&C)PIDPIDName名称Title标题Path路径Command Line Arguments命令行参数Find Window查找窗口Enter window title or class name here.请输入窗口标题或类名。Cannot find window "%1". Retry?找不到窗口“%1”。重试?The PID of the window "%1" is %2, but it's hidden in the process list. Do you want to attach to it immediately?窗口“%1”的PID是%2,但是它在进程列表中隐藏了。您现在想直接附加到它吗?GetWindowThreadProcessId() failed. Cannot get the PID of the window.GetWindowThreadProcessId() 失败。无法获取窗口的 PID。BreakpointsViewType类型Address地址Module/Label/Exception模块/标签/异常State状态Disassembly反汇编Hits命中Summary摘要Follow breakpoint转到断点&Remove删除(&R)Disable禁用Enable启用&Edit编辑(&E)Reset hit count重置执行次数为零Enable all (%1)启用全部 (%1)Disable all (%1)禁用全部 (%1)Remove all (%1)删除全部 (%1)Add DLL breakpoint添加 DLL 断点Add exception breakpoint添加异常断点Copy breakpoint conditions复制断点条件Paste breakpoint conditions粘贴断点条件&Copy复制(&C)Inactive已禁用One-time一次性Enabled已启用Disabled已禁用byte字节word字dword双字节qword四字节access访问write写入execute执行read读取load载入unload卸载all全部firstchance首次secondchance二次anychance首次或二次breakif暂停条件fastresume快速恢复logif日志条件log日志cmdif命令条件cmd指令Cannot follow this breakpoint.
无法转到此断点。Enter the module name输入模块名称Example: mydll.dll例如: mydll.dllEnter the exception code输入异常代码Example: EXCEPTION_ACCESS_VIOLATION例如: EXCEPTION_ACCESS_VIOLATIONSoftware软件断点Hardware硬件断点Memory内存断点DLLDLLException异常断点BridgeThe data has been copied to clipboard.
数据已复制到剪贴板。
References引用BrowseDialogDialog对话框Please input the file path.请输入文件路径。Path:路径:&Browse...浏览(&B)...&OK确定(&O)&Cancel取消(&C)CPUArgumentWidgetArguments参数Unlocked解锁Refresh is automatic.自动刷新。[Formatting Error][解析出错]Follow %1 in %2在 %2 中转到 %1Disassembler反汇编Dump内存窗口Stack堆栈&Copy复制(&C)Default (x64 fastcall)默认 (x64 fastcall)Default (stdcall)默认 (stdcall)Default (stdcall, EBP stack)默认 (stdcall, EBP 栈帧)thiscallthiscallfastcallfastcallDelphi (Borland fastcall)Delphi (Borland fastcall)Locked锁定Refresh is disabled.不刷新。Calls调用Refresh is only done when executing a CALL instruction.只有执行CALL指令才刷新。CPUDisassembly&Selected Address选定的地址(&S)&Address: 地址(&A): &Constant: 常数(&C): &Value: 值(&V): Jump table%1: 跳转表%1: Address: 地址: Constant: 常数: &Edit编辑(&E)&Fill...填充(&F)...Fill with &NOPs用NOP填充(&N)&Copy复制(&C)&Paste粘贴(&P)Paste (&Ignore Size)粘贴时忽略大小(&I)&Binary二进制(&B)&Selection选区(&S)Selection to &File选区,到文件(&F)Selection (Bytes only)选区,仅限字节Selection (&No Bytes)选区,不含字节(&N)Selection to File (No Bytes)选区,到文件(不含字节)&Address地址(&A)&RVA&RVA&File Offset文件偏移(&F)&Header VA首字节地址(&H)Disassembly反汇编&Restore selection恢复选区(&R)&Follow in Dump在内存窗口中转到(&F)&Follow in Disassembler在反汇编中转到(&F)Open Source File打开源代码文件Help on Symbolic Name符号名称帮助Help on mnemonic指令帮助Show mnemonic brief显示指令提示Hide mnemonic brief隐藏指令提示&Highlighting mode高亮模式(&H)Edit columns...编辑列...Label Current Address给当前地址写标签Label标签Disable禁用Bit位Byte1字节Word2字节Start trace recording启动运行跟踪Trace coverage代码覆盖Stop trace recording停止运行跟踪Function函数Analyze module分析模块Add function添加函数Delete function删除函数Argument参数Add argument添加参数Delete argument删除参数Add loop添加循环Delete loop删除循环Analyze single function分析这个函数Remove type analysis from module从模块中删除类型分析Remove type analysis from selection从选区中删除类型分析Treat selection &head as将选区头字节视为(&H)Treat from &selection as将选区视为(&S)Analysis分析Download Symbols for This Module下载此模块的符号信息Assemble汇编Patches补丁Previous上一个Next下一个Expression表达式File Offset文件偏移Start of Page页首End of Page页尾Start of Function函数头部End of Function函数尾部Previous Reference上一个引用Next Reference下一个引用Go to转到xrefs...相互引用...C&ommand命令(&O)&Constant常数(&C)&String references字符串(&S)&Intermodular calls跨模块调用(&I)&Pattern匹配特征(&P)&GUID&GUID&Names名称(&N)Current Region当前区域Current Module当前模块Current Function当前函数All User Modules所有用户模块All System Modules所有系统模块All Modules所有模块&Search for搜索(&S)&Selected Address(es)选定的地址(&S)Find &references to查找引用(&R)Copy token &text复制标记文本(&T)Copy token &value复制标记值(&V)Add label at 添加标签到 The label may be in use标签可能正在使用中The label "%1" may be an existing label or a valid expression. Using such label might have undesired effects. Do you still want to continue?标签“%1”可能早已定义或是一个有效的表达式。使用这种标签可能产生意外的影响。您仍想继续使用该标签吗?Error!错误!DbgSetLabelAt failed!DbgSetLabelAt 失败!Assemble at %1汇编于 %1Failed to assemble instruction " %1 " (%2)无法汇编指令 "%1" (%2)Not inside a module...不在已知模块中...Goto File Offset in 转到指定文件的文件偏移Enter Constant输入常数Find Pattern...搜索匹配特征...Edit code at %1编辑代码于 %1Fill code at %1填充代码于 %1Size大小Open File打开文件Text Files (*.txt)文本文件 (*.txt)Error错误Could not open file无法打开文件Selection not in a module...选区不在一个模块中……Selection not in a file...选区不在一个文件中……Start from &Selection从&选择开始Failed to assemble instruction "无法汇编指令 "Failed to enable trace coverage for page %1.
为页面%1启用代码覆盖时失败。
Failed to disable trace coverage for page %1.
为页面%1禁用代码覆盖时失败。
CPUDump&Edit编辑(&E)&Fill...填充(&F)...&Copy复制(&C)&Paste粘贴(&P)Paste (&Ignore Size)粘贴时忽略大小(&I)Save To a File保存到文件B&inary二进制编辑(&I)&File Offset文件偏移(&F)&Restore selection恢复选区(&R)&Modify Value修改(&M)&Byte字节(&B)&Word2字节(&W)&Dword4字节(&D)&Qword8字节(&Q)Hardware, &Access硬件,访问(&A)Hardware, &Write硬件,写入(&W)Hardware, &Execute硬件,执行(&E)Remove &Hardware删除硬件断点(&H)&Singleshoot一次性(&S)&Restore on hit重复设置(&R)Memory, Access内存,访问Memory, Read内存, 读取Memory, Write内存,写入Memory, Execute内存,执行Remove &Memory删除内存断点(&M)&Breakpoint断点(&B)&Find Pattern...搜索匹配特征(&F)...Find &References搜索引用(&R)&Sync with expression与表达式同步(&S)Allocate Memory分配内存&Expression表达式(&E)File Offset文件偏移Start of Page页首End of Page页尾Previous上一个Next下一个Previous Reference上一个引用Next Reference下一个引用&Go to转到(&G)&ASCII&ASCII&Extended ASCII扩展ASCII(&E)&Codepage...代码页(&C)...&Hex十六进制(&H)&Text文本(&T)Signed byte (8-bit)有符号字节(8位)Signed short (16-bit)有符号Short(16位)Signed long (32-bit)有符号Long(32位)Signed long long (64-bit)有符号Long long(64位)Unsigned byte (8-bit)无符号字节(8位)Unsigned short (16-bit)无符号Short(16位)Unsigned long (32-bit)无符号Long(32位)Unsigned long long (64-bit)无符号Long long(64位)Hex short (16-bit)十六进制Short(16位)Hex long (32-bit)十六进制Long(32位)Hex long long (64-bit)十六进制Long long(64位)&Integer整数(&I)&Float (32-bit)Float (32位)&Double (64-bit)Double (64位)&Long double (80-bit)Long double (80位)&Half float (16-bit)&Float浮点数(&F)&Address地址(&A)&Disassembly反汇编(&D)System Code系统代码System Data系统数据User Code用户代码User Data用户数据 (Real4) (Real4) (Real8) (Real8) (BYTE) (BYTE) (WORD) (WORD) (DWORD) (DWORD) (QWORD) (QWORD) (String) (字符串)(Unknown String)(未知字符串)Modify value修改Error错误The input text is not a number!输入文本不是数字!Enter expression to follow in Dump...输入将在内存窗口中转到的表达式...Error!错误!Not inside a module...不在已知模块中...Goto File Offset in %1转到%1中的文件偏移Hex十六进制ASCIIASCIIUNICODEUNICODEFloat (32-bit)Float (32位)Double (64-bit)Double (64位)Long double (80-bit)Long double (80位)Half float (16-bit)Value值Comments注释Edit data at %1编辑数据于 %1Fill data at %1填充数据到 %1Save to file保存到文件All files (*.*)所有文件 (*.*)Find Pattern...搜索匹配特征...Selection not in a file...选区不在一个文件中……Dump内存窗口Enter expression to sync with...输入要同步到的表达式...Size大小Warning警告You're trying to allocate a zero-sized buffer just now.您刚刚想要分配一个大小为零的缓冲区。The size of buffer you're trying to allocate exceeds 1GB. Please check your expression to ensure nothing is wrong.您想要分配的缓冲区大小已经超过了1GB。请检查您的表达式,确认输入无误。Memory allocation failed!内存分配失败!CPUInfoBoxAddress地址RVARVAFile Offset文件偏移Copy Line复制行Jump is taken跳转将要执行Jump is not taken跳转不会执行Jump from 跳转自 Call from 调用自 Reference from 引用自 Accessed %n time(s)已访问 %n 次Modify Value修改&Address: 地址(&A): &Constant: 常数(&C): &Value: 值(&V): &Selected Address选定的地址(&S)&Follow in Dump在内存窗口中转到(&F)&Modify Value修改(&M)&Watch监视(&W)&Show References显示引用(&S)&Copy复制(&C)CPUMultiDumpDump 内存 Watch 监视 Locals局部变量Change Tab %1 Name改变标签 %1 的名称Tab Name标签名称Disassembly反汇编CPURegistersViewModify value修改Increment value加1Decrement value减1Zero value清零值Toggle切换Undo撤消Follow in Disassembler在反汇编中转到Follow in Dump在内存窗口中转到Follow in Stack在栈中转到Follow in Memory Map在内存布局中转到&Remove hardware breakpoint删除硬件断点(&R)Increment x87 Stack递增x87浮点寄存器栈Decrement x87 Stack递减x87浮点寄存器栈Highlight高亮Error错误Edit %1Edit编辑Edit %1 registerEdit FPU register编辑FPU寄存器ERROR CONVERTING TO HEX转换到十六进制时发生错误Set Last Error设置上次错误Set Last Status设置上次状态Follow in &Dump在内存窗口中转到(&D)Copy old value: %1复制旧值:%1Set Hardware Breakpoint on %1设置硬件断点于 %1CPUSideBarCannot fold selection.
无法折叠选区。
Click to unfold, right click to delete.点击展开,右击删除。Click to fold, right click to delete.点击折叠,右击删除。Click to fold.点击折叠。Breakpoint Enabled断点已启用Breakpoint Disabled断点已禁用Breakpoint Not Set断点未设置CPUStackComments注释Align Stack Pointer对齐堆栈指针Modify修改&Edit编辑(&E)&Fill...填充(&F)...&Copy复制(&C)&Paste粘贴(&P)Paste (&Ignore Size)粘贴时忽略大小(&I)B&inary二进制(&I)&DWORD&DWORD&QWORD&QWORD&Comments注释(&C)Hardware, Access硬件断点,访问&Byte字节(&B)&Word2字节(&W)&Dword4字节(&D)&Qword8字节(&Q)Hardware, Write硬件断点,写入Remove &Hardware删除硬件断点(&H)Memory, Access内存,访问&Singleshoot一次性(&S)&Restore on hit重复设置(&R)Memory, Write内存,写入Remove &Memory删除内存断点(&M)Brea&kpoint断点(&K)&Restore selection恢复选区(&R)&Find Pattern...搜索匹配特征(&F)...Follow E&SP转到 ESP (&S)Follow R&SP转到 RSP (&S)Follow E&BP转到 EBP (&B)Follow R&BP转到 RBP (&B)Go to &Expression转到表达式(&E)Go to Base of Stack Frame转到堆栈帧基址Go to Previous Stack Frame转到上一堆栈帧Go to Next Stack Frame转到下一堆栈帧Go to Previous转到上一个Go to Next转到下一个&Go to转到(&G)Freeze the stack锁定堆栈Follow DWORD in &Stack在栈中转到双字(&S)Follow QWORD in &Stack在栈中转到四字(&S)&Follow DWORD in Disassembler在反汇编中转到指定DWORD(&F)&Follow QWORD in Disassembler在反汇编中转到指定QWORD(&F)Edit columns...编辑列...Unfreeze the stack解锁堆栈Enter expression to follow in Stack...输入将在堆栈中转到的表达式...Edit data at %1编辑数据于 %1Fill data at %1填充数据到 %1Find Pattern...搜索匹配特征...CPUWidgetForm窗体Goto转到Ctrl+GCtrl+GDisassembly反汇编Stack堆栈Registers寄存器Dump内存窗口Arguments参数Sidebar侧栏InfoBox信息栏Graph流程图CalculatorDialogCalculator计算器Signed:有符号:Unsigned:无符号:Unicode:Unicode:Octal:八进制:Expression:表达式:Binary:二进制:ASCII:ASCII:0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 00000000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000Hexadecimal:十六进制:00000000000000000000000000000000Bytes:字节:&Follow in Disassembler在反汇编中转到(&F)Follow in &Dump在内存窗口中转到(&D)Follow in Memory Map在内存布局中转到&Close关闭(&C)CallStackViewThread ID线程 IDAddress地址To返回到From返回自Size大小Party方Comment注释Follow &Address跟随地址(&A)Follow &To跟随目标(&T)Follow &From跟随来源(&F)Download Symbols for This Thread下载此线程的符号信息Show Suspected Call Stack Frame显示可能的调用堆栈帧Show Active Call Stack Frame显示活跃的调用堆栈帧Follow in Threads在线程中转到Rename Thread重命名线程&Copy复制(&C)User用户模块System系统模块Thread name - %1线程名 - %1CloseDialogClosing Debugger...正在退出调试器...CodepageSelectionDialogSelect Codepage...选择代码页...&OK确定(&O)&Cancel取消(&C)ColumnReorderDialogDialog对话框Displayed显示<- &Add<- 添加(&A)&Hide ->隐藏(&H) ->&Up上移(&U)&Down下移(&D)<< A&dd all<< 全部添加(&A)Available可用&Ok确定(&O)&Cancel取消(&C)Error错误There isn't anything to display yet!没有要显示的列!ComboBoxDialogDialog对话框CheckBoxCheckBox&OK确定(&O)&Cancel取消(&C)CommandLineEditCommands are comma separated (like assembly instructions): mov eax, ebx命令使用逗号分隔(像汇编语言):mov eax, ebxCommonActionsFollow in Disassembler在反汇编中转到Show this address in disassembler. Equivalent command "d address".在反汇编窗口中显示此地址。等价于命令“d 地址”。&Follow DWORD in Disassembler在反汇编中转到指定DWORD(&F)&Follow QWORD in Disassembler在反汇编中转到指定QWORD(&F)Follow in Dump在内存窗口中转到Show the address in dump. Equivalent command "dump address".在内存窗口中显示此地址。等价于命令“dump 地址”。&Follow DWORD in Current Dump在当前内存窗口中转到指定DWORD(&F)&Follow QWORD in Current Dump在当前内存窗口中转到指定QWORD(&F)Dump %1内存 %1Follow DWORD in Dump在内存窗口中转到指定DWORDFollow QWORD in Dump在内存窗口中转到指定QWORDFollow in Stack在栈中转到Show this address in stack view. Equivalent command "sdump address".在堆栈窗口中显示此地址。等价于命令“sdump 地址”。Follow in Memory Map在内存布局中转到Show this address in memory map view. Equivalent command "memmapdump address".在内存布局窗口中显示此地址。等价于命令“memmapdump 地址”。Graph流程图Show the control flow graph of this function in CPU view. Equivalent command "graph address".在CPU视图中显示此函数的控制流程图。等价于命令“graph 地址”。Toggle切换Edit编辑Set Hardware on Execution设置硬件断点(执行)Remove Hardware删除硬件断点Replace Slot %1 (Unknown)替换硬件断点 %1 (未知)Breakpoint断点Set Conditional Breakpoint设置条件断点Replace Slot %1 (0x%2)替换硬件断点 %1 (0x%2)Label Current Address给当前地址写标签Comment注释Toggle Bookmark切换书签Set a bookmark here, or remove bookmark. Equivalent command "bookmarkset address"/"bookmarkdel address".在此设置书签,或移除书签。等价于命令“bookmarkset 地址”/“bookmarkdel 地址”。Set %1 Here在此设置%1Set the next executed instruction to this address. Equivalent command "mov cip, address".设置将要执行的指令为此地址。等价于命令“mov cip, 地址”。Create New Thread Here新建线程于此Create a new thread at this address. Equivalent command "createthread address, argument".在此地址创建一个新的线程。等价于命令“createthread 地址, 参数”。&Watch DWORD监视 DWORD(&W)&Watch QWORD监视 QWORD(&W)Add the address in the watch view. Equivalent command "AddWatch [address], "uint"".在监视视图中添加地址。等价于命令"AddWatch [地址], "uint"""。Cannot follow %1. Address is invalid.
无法转到 %1 。地址无效。
Add label at 添加标签到 The label may be in use标签可能正在使用中The label "%1" may be an existing label or a valid expression. Using such label might have undesired effects. Do you still want to continue?标签“%1”可能早已定义或是一个有效的表达式。使用这种标签可能产生意外的影响。您仍想继续使用该标签吗?Error!错误!DbgSetLabelAt failed!DbgSetLabelAt 失败!Add comment at 添加注释到 DbgSetCommentAt failed!DbgSetCommentAt 失败!DbgSetBookmarkAt failed!DbgSetBookmarkAt 失败!Address %1 is not executable地址 %1 不可执行Setting software breakpoint here may result in crash. Do you really want to continue?在这里设置软件断点可能会导致崩溃。你真的想要继续吗?Setting new origin here may result in crash. Do you really want to continue?在这里设置新的运行点可能会导致崩溃。你真的想要继续吗?Creating new thread here may result in crash. Do you really want to continue?在这里新建线程可能会导致崩溃。你真的想要继续吗?Argument for the new thread新线程的参数ConfigurationFile文件Open打开Attach附加Detach脱离Save database保存数据库Restore backup database还原备份数据库Reload database重新载入数据库Clear database清空数据库Import database导入数据库Export database导出数据库Restart as Admin以管理员身份重新启动Exit退出View视图CPUCPULog日志Breakpoints断点Memory Map内存布局Call Stack调用堆栈Notes笔记SEHSEH链Script脚本Symbol Info符号信息Modules模块Source源代码References引用Threads线程Patches补丁Comments注释Labels标签Bookmarks书签Functions函数Variables变量Handles句柄Graph流程图Previous Tab上一页Next Tab下一页Previous View上一个视图Next View下一个视图Hide Tab隐藏页面Debug调试Run运行Run (pass exception)运行(无视首次异常)Run (swallow exception)运行(无视异常)Run until selection运行到选区Run until expression运行到表达式Pause暂停Restart重新运行Close结束Step into步进Step into (pass exception)步进(无视首次异常)Step into (swallow exception)步进(无视异常)Step into (source)步进 (源代码)Step over步过Step over (pass exception)步过(无视首次异常)Step over (swallow exception)步过(无视异常)Step over (source)步过 (源代码)Execute till return运行到返回Execute till return (pass exception)运行到返回(无视首次异常)Run to user code运行到用户代码Skip next instruction跳过下一指令Command命令Trace into...步进直到条件满足...Trace over...步过直到条件满足...Trace coverage代码覆盖Bit位None无Undo instruction撤销上个指令Animate into自动步进Animate over自动步过Animate command自动运行命令Step into until reaching uncovered code步进至未覆盖的代码Step over until reaching uncovered code步过至未覆盖的代码Step into until reaching covered code步进至已覆盖的代码Step over until reaching covered code步过至已覆盖的代码Plugins插件ScyllaScyllaFavourites收藏夹Manage Favourite Tools管理收藏工具Options选项Preferences选项Appearance外观Hotkeys快捷键Topmost窗口置顶Reload style.css重新载入 style.cssHelp帮助About关于Blog博客Donate捐赠Calculator计算器Report Bug报告BugManual用户手册Generate Crash Dump生成故障转储Actions动作Find Strings搜索字符串Find Strings in Current Module在当前模块中搜索字符串Find Intermodular Calls搜索跨模块调用Toggle Breakpoint切换断点Set Conditional Breakpoint设置条件断点Toggle Bookmark切换书签Delete Breakpoint删除断点Enable/Disable Breakpoint启用/禁用断点Reset breakpoint hit count重置断点运行次数Enable all breakpoints启用所有断点Disable all breakpoints禁用所有断点Remove all breakpoints删除所有断点Binary Edit二进制编辑Binary Fill二进制填充Binary Fill NOPs用NOP填充Binary Copy二进制复制Binary Paste二进制粘贴Binary Paste (Ignore Size)二进制粘贴(忽略大小)Binary Save二进制保存Undo Selection恢复选区Set Label设置标签Set Label for the Operand给操作数设置标签Set Comment添加注释Toggle Function切换函数Add Loop添加循环Delete Loop删除循环Toggle Argument切换参数Assemble汇编Set %1 Here在此设置%1Goto Origin转到运行点Goto EBP/RBP转到 EBP/RBPGoto Previous转到上一个Goto Next转到下一个Goto Expression转到表达式Goto Start of Page转到页首Goto End of Page转到页尾Goto Start of Function转到函数头部Goto End of Function转到函数尾部Goto File Offset转到文件偏移Find References to Selected Address搜索对选定地址的引用Find Pattern搜索匹配特征Find Pattern in Current Module在当前模块中搜索匹配特征Find Names in Current Module在当前模块中搜索名称Find References搜索引用xrefs...相互引用...Analyze Single Function分析这个函数Analyze Module分析模块Help on Mnemonic指令帮助Toggle Mnemonic Brief切换指令帮助提示Highlighting Mode高亮模式Enable/Disable Branch Destination Preview启用或禁用分支目标预览Find搜索Find in Current Module在当前模块中搜索Enable/Disable Logging启用或禁用日志记录Allocate Memory分配内存Free Memory释放内存Sync同步Copy All Registers复制所有寄存器Mark As User Module标记为用户模块Mark As System Module标记为系统模块Mark As Party标记为第三方Set Hardware Breakpoint (Execute)设置硬件断点(执行)Remove Hardware Breakpoint删除硬件断点Remove Type Analysis From Module从模块中删除类型分析Remove Type Analysis From Selection从选区中删除类型分析Treat Selection As将选区视为Code代码Byte1字节Word2字节DwordDwordFwordFwordQwordQwordTbyteTbyteOwordOwordFloat单精度浮点数Double双精度浮点数LongDoubleLongDoubleASCIIASCIIUNICODEUNICODEMMWordMMWordXMMWordXMMWordYMMWordYMMWordZMMWordTreat Selection Head As将选区头字节视为Toggle Register Value翻转寄存器Clear清除Copy复制Copy Address复制地址Copy RVA复制RVACopy Symbol复制符号Copy Line复制行Load Script载入脚本Reload Script重新载入脚本Unload Script关闭脚本Edit Script编辑脚本Run Script运行脚本Toggle Script Breakpoint切换脚本断点Run Script to Cursor脚本运行到光标处Step Script脚本步进Abort Script中止脚本Execute Script Command运行脚本命令Refresh刷新Zoom to cursor缩放至光标Fit To Window适应窗口大小Follow in disassembler在反汇编中转到Save as image保存图像Toggle overview切换鸟瞰视图Toggle summary切换摘要Increment x87 Stack递增x87浮点寄存器栈Decrement x87 Stack递减x87浮点寄存器栈Redirect Log重定向日志输出Browse in Explorer在资源管理器中浏览Download Symbols for This Module下载此模块的符号信息Download Symbols for All Modules下载所有模块的符号信息Create New Thread Here新建线程于此Open Source File打开源代码文件Follow in Memory Map在内存布局中转到Follow in Stack在栈中转到Follow in Disassembler在反汇编中转到Follow DWORD/QWORD in Disassembler在反汇编器中转到指定DWORD/QWORDFollow DWORD/QWORD in Dump在内存窗口中转到指定DWORD/QWORDFreeze the stack锁定堆栈Go to Base of Stack Frame转到堆栈帧基址Go to Previous Stack Frame转到上一堆栈帧Go to Next Stack Frame转到下一堆栈帧Go to Previous Reference转到上一个引用Go to Next Reference转到下一个引用Modify value修改Watch DWORD/QWORD监视DWORD/QWORDCopy File Offset复制文件偏移Start/Stop trace recording启动/停止运行跟踪Copy -> Cropped Table复制 -> 截断的表格Copy -> Table复制 -> 整个表格Copy -> Line, To Log复制 -> 行,到日志Copy -> Cropped Table, To Log复制 -> 截断的表格,到日志Copy -> Table, To Log复制 -> 整个表格,到日志Copy -> Export Table复制 -> 导出表NOT FOUND IN CONFIG!在配置中未找到!CustomizeMenuDialogDialog对话框Customize which menu item will be shown in the "More commands" submenu自定义哪个菜单项将显示在“更多命令”子菜单中Disselect All全不选&OK确定(&O)&Cancel取消(&C)Disassembler反汇编Dump内存窗口Watch监视Call Stack调用堆栈Threads线程Graph流程图Xref Browser相互引用浏览框Struct结构体Stack堆栈Source源代码File文件Debug调试Option选项Favourite收藏夹Help帮助View视图Trace disassembler跟踪反汇编器Trace dump跟踪窗口中的内存窗口DBGTrace recording has stopped unexpectedly because WriteFile() failed. GetLastError() = %s.
由于WriteFile() 失败,运行跟踪意外停止了。GetLastError() = %s。
Trace recording failed to start because the file header cannot be written.运行跟踪启动失败,因为无法写入文件头。Started trace recording to file: %s
开始记录运行跟踪到文件:%s
Cannot create trace recording file. GetLastError() = %s.
无法新建运行跟踪文件。GetLastError() = %s。
Trace recording stopped.运行跟踪已停止。breakif暂停条件fastresume()快速恢复()logif日志条件log日志cmdif命令条件cmd指令%u functions
%u 个函数
Indirect pointer: 0x%p 0x%p
间接指针︰ 0x%p 0x%p
%u functions discovered!
发现了%u个函数!
This kind of analysis doesn't work on x32 executables...
这种分析不能用在32位程序……
Animation started. Use the "pause" command to stop animation.开始自动运行命令。可以用"pause"命令停止自动运行。Non-executable memory region非可执行内存区域Assembled branch does not point to an executable memory region!已汇编的分支指令并未指向一个可执行的内存区域!Error while writing process memory写入进程内存时出错Delete breakpoint failed (DeleteBPX): %p
删除断点失败 (DeleteBPX): %p
Error setting breakpoint at %p! (SetBPX)
设置断点于 %p 失败! (SetBPX)
Delete memory breakpoint failed (RemoveMemoryBPX): %p
删除内存断点失败 (RemoveMemoryBPX):%p
Could not enable memory breakpoint %p (SetMemoryBPXEx)
无法启用内存断点 %p (SetMemoryBPX)
Not enough arguments! At least %d argument(s) must be specified. Arguments are <a href="https://help.x64dbg.com/en/latest/commands/index.html">comma-separated</a>.
The command "%s" is debug-only
命令“%s”只能在调试程序时使用
Error allocating memory for cmdline为命令行分配内存时出错Error converting UNICODE cmdline转换UNICODE命令行时出错Error reading PEB base addres读取PEB基址出错Error reading PEB -> ProcessParameters -> CommandLine UNICODE_STRING读取PEB->ProcessParameters->CommandLine UNICODE_STRING错误Error reading PEB -> ProcessParameters pointer address读取PEB->ProcessParameters指针地址出错Error Getting remote PEB address获得远程PEB地址时出错Error Getting command line base address获得命令行基址时出错Error checking the pattern of the commandline stored检查保存的命令行的模式时出错Error writing the new command line stored保存新的命令行时出错Error getting getcommandline获取getcommandline时出错Error allocating the page with UNICODE and ANSI command lines在为 UNICODE 和 ANSI 命令行分配页面时出错Error writing the ANSI command line in the page在页面中写入 ANSI 命令行时出错Error writing the UNICODE command line in the page在页面中写入 UNICODE 命令行时出错Error writing command line UNICODE in PEB在 PEB 写 UNICODE 命令行时出错Error getting cmdline获取命令行时出错 (Address: %p) (地址: %p)Invalid parameter [base]!无效参数 [base]!Invalid memory address!无效的内存地址!Invalid parameter [size]无效参数 [size]Failed to load module (ModLoad)...加载模块失败 (ModLoad)...Virtual module "%s" loaded on %p[%p]!
This may take very long, depending on your network connection and data in the debug directory...这可能需要很长时间,取决于您的网络连接和调试目录中的数据...Done! See symbol log for more information完成!查看符号日志以获取更多信息Invalid module "%s"!
模块 "%s" 无效!
Symbol download failed... See symbol log for more information符号下载失败……查看符号日志以了解更多信息File does not exist!文件不存在!Symbol load failed... See symbol log for more information符号加载失败……查看符号日志以了解更多信息Done!已完成!Invalid argument无效参数Image information for %s
“%s”的映像信息
Characteristics (0x%X):
特性(0x%X): None
无
IMAGE_FILE_RELOCS_STRIPPED: Relocation info stripped from file.IMAGE_FILE_RELOCS_STRIPPED: 重定向信息已从文件删除。IMAGE_FILE_EXECUTABLE_IMAGE: File is executable (i.e. no unresolved externel references).IMAGE_FILE_EXECUTABLE_IMAGE:文件是可执行文件(即没有无法解析的外部引用)。IMAGE_FILE_LINE_NUMS_STRIPPED: Line numbers stripped from file.IMAGE_FILE_LINE_NUMS_STRIPPED: 行号信息已从文件删除。IMAGE_FILE_LOCAL_SYMS_STRIPPED: Local symbols stripped from file.IMAGE_FILE_LOCAL_SYMS_STRIPPED: 局部符号信息已从文件删除。IMAGE_FILE_AGGRESIVE_WS_TRIM: Agressively trim working setIMAGE_FILE_LARGE_ADDRESS_AWARE: App can handle >2gb addressesIMAGE_FILE_LARGE_ADDRESS_AWARE:应用程序可以处理 > 2 gb 地址IMAGE_FILE_BYTES_REVERSED_LO: Bytes of machine word are reversed.IMAGE_FILE_BYTES_REVERSED_LO: 机器的字节序是反转的。IMAGE_FILE_32BIT_MACHINE: 32 bit word machine.IMAGE_FILE_32BIT_MACHINE:32 位机。IMAGE_FILE_DEBUG_STRIPPED: Debugging info stripped from file in .DBG fileIMAGE_FILE_REMOVABLE_RUN_FROM_SWAP: If Image is on removable media, copy and run from the swap file.IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP: 如果文件在可移动媒体上,复制并从交换文件中运行。IMAGE_FILE_NET_RUN_FROM_SWAP: If Image is on Net, copy and run from the swap file.IMAGE_FILE_NET_RUN_FROM_SWAP: 如果文件在网络上,复制并从交换文件中运行。IMAGE_FILE_SYSTEM: System File.IMAGE_FILE_SYSTEM︰系统文件。IMAGE_FILE_DLL: File is a DLL.IMAGE_FILE_DLL:文件是一个 DLL。IMAGE_FILE_UP_SYSTEM_ONLY: File should only be run on a UP machineIMAGE_FILE_BYTES_REVERSED_HI: Bytes of machine word are reversed.DLL Characteristics (0x%X):
DLL 特性(0x%X):
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE: DLL can move.IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE:DLL 可以重定位。IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY: Code Integrity ImageIMAGE_DLLCHARACTERISTICS_NX_COMPAT: Image is NX compatibleIMAGE_DLLCHARACTERISTICS_NX_COMPAT:映像支持NXIMAGE_DLLCHARACTERISTICS_NO_ISOLATION: Image understands isolation and doesn't want itIMAGE_DLLCHARACTERISTICS_NO_SEH: Image does not use SEH. No SE handler may reside in this imageIMAGE_DLLCHARACTERISTICS_NO_BIND: Do not bind this image.IMAGE_DLLCHARACTERISTICS_WDM_DRIVER: Driver uses WDM model.IMAGE_DLLCHARACTERISTICS_WDM_DRIVER:使用 WDM 模型的驱动程序。IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE: Remote Desktop Services aware.IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE︰支持远程桌面服务。Not enough arguments!参数个数不足!Invalid relocation table!无效的迁移表!Relocation table size: %X
重新定位表大小:%X
Failed to get SEH (disabled?)无法获取 SEH (禁用?)Failed to get VEH (loaded symbols for ntdll.dll?)Failed to get VCH (loaded symbols for ntdll.dll?)Failed to get UnhandledExceptionFilter (loaded symbols for kernelbase.dll?)Failed to get UnhandledExceptionFilter (loaded symbols for kernel32.dll?)Delete breakpoint failed (BpDelete): %p
删除断点失败 (BpDelete): %p
Could not enable breakpoint %p (SetBPX)
无法启用断点 %p (SetBPX)
Could not enable breakpoint %p (BpEnable)
无法启用断点 %p (BpEnable)
Could not disable breakpoint %p (BpEnable)
无法禁用断点 %p (BpEnable)
Could not disable breakpoint %p (DeleteBPX)
无法禁用断点 %p (DeleteBPX)
Invalid addr: "%s"
无效地址: "%s"
Breakpoint already set!断点早已存在!Error setting breakpoint at %p! (IsBPXEnabled)
设置断点于 %p 失败! (IsBPXEnabled)
Error setting breakpoint at %p! (memread)
设置断点于 %p 失败! (memread)
Error setting breakpoint at %p! (bpnew)
设置断点于 %p 失败! (bpnew)
Error handling invalid breakpoint at %p! (bpdel)
处理 %p 处无效的断点发生了错误!(bpdel)
Breakpoint at %p (%s) set!
断点已设置在 %p (%s) !
Breakpoint at %p set!
断点已设置在 %p !
No breakpoints to delete!没有要删除的断点!All breakpoints deleted!所有断点都已删除!Delete breakpoint failed (bpdel): %p
删除断点失败 (bpdel): %p
No such breakpoint "%s"
没有断点 "%s"
Breakpoint deleted!断点已删除!No breakpoints to enable!没有可以启用的断点!All breakpoints enabled!所有断点都已启用!Breakpoint already enabled!断点早已启用!Breakpoint enabled!断点已启用!No breakpoints to disable!没有可以禁用的断点!All breakpoints disabled!所有的断点都禁用了!Breakpoint already disabled!断点早已禁用!Breakpoint disabled!断点已禁用!Delete hardware breakpoint failed (BpDelete): %p
删除硬件断点失败 (BpDelete): %p
Delete hardware breakpoint failed (DeleteHardwareBreakPoint): %p
删除硬件断点失败 (DeleteHardwareBreakPoint):%p
Did not enable hardware breakpoint %p (all slots full)
未能启用硬件断点 %p (没有可用空位)
Could not enable hardware breakpoint %p (BpEnable)
无法启用硬件断点 %p (BpEnable)
Could not enable hardware breakpoint %p (SetHardwareBreakPoint)
无法启用硬件断点 %p (SetHardwareBreakPoint)
Could not disable hardware breakpoint %p (BpEnable)
无法禁用硬件断点 %p (BpEnable)
Could not disable hardware breakpoint %p (DeleteHardwareBreakPoint)
无法禁用硬件断点 %p (DeleteHardwareBreakPoint)
Invalid type, assuming 'x'无效的类型,默认为'x'Invalid size, using 1无效的大小,默认为1Address not aligned to %d
地址没有对齐到 %d
You can only set 4 hardware breakpoints您最多只能设置4个硬件断点Hardware breakpoint already set!该地址已存在硬件断点!Error setting hardware breakpoint (bpnew)!设置硬件断点发生错误(bpnew)!Error setting hardware breakpoint (TitanEngine)!设置硬件断点发生错误(TitanEngine)!Hardware breakpoint at %p set!
已于 %p 处设置硬件断点!
No hardware breakpoints to delete!没有可删除的硬件断点!All hardware breakpoints deleted!所有的硬件断点都已删除!Delete hardware breakpoint failed: %p (BpDelete)
删除硬件断点失败:%p (BpDelete)
Delete hardware breakpoint failed: %p (DeleteHardwareBreakPoint)
删除硬件断点失败:%p (DeleteHardwareBreakPoint)
No such hardware breakpoint "%s"
硬件断点“%s”并不存在
Hardware breakpoint deleted!硬件断点已删除!No hardware breakpoints to enable!没有可以启用的硬件断点!All hardware breakpoints enabled!所有硬件断点都已启用!Hardware breakpoint already enabled!这个硬件断点早已启用!Could not enable hardware breakpoint %p (SetHardwareBreakpoint)
无法启用硬件断点 %p (SetHardwareBreakpoint)
Hardware breakpoint enabled!硬件断点已启用!No hardware breakpoints to disable!没有可以禁用的硬件断点!All hardware breakpoints disabled!所有的硬件断点都禁用了!Hardware breakpoint already disabled!这个硬件断点早已禁用!Could not disable hardware breakpoint %p (DeleteHardwareBreakpoint)
无法禁用硬件断点 %p (DeleteHardwareBreakpoint)
Hardware breakpoint disabled!硬件断点已禁用!Delete memory breakpoint failed (BpDelete): %p
删除内存断点失败 (BpDelete): %p
Could not enable memory breakpoint %p (BpEnable)
无法启用内存断点 %p (BpEnable)
Could not disable memory breakpoint %p (BpEnable)
无法禁用内存断点 %p (BpEnable)
Could not disable memory breakpoint %p (RemoveMemoryBPX)
无法禁用内存断点 %p (RemoveMemoryBPX)
Invalid type (argument ignored)无效的类型 (自动忽略该参数)Memory breakpoint already set!此处早已设置内存断点!Error setting memory breakpoint! (BpNew)设置内存断点发生错误! (BpNew)Error setting memory breakpoint! (SetMemoryBPXEx)设置内存断点发生错误! (SetMemoryBPXEx)Memory breakpoint at %p[%p] set!
Invalid type specified!设置了无效的断点类型!No memory breakpoints to delete!没有可以删除的内存断点!All memory breakpoints deleted!所有内存断点都已删除!Delete memory breakpoint failed: %p (BpDelete)
删除内存断点失败:%p (BpDelete)
Delete memory breakpoint failed: %p (RemoveMemoryBPX)
删除内存断点失败:%p (RemoveMemoryBPX)
No such memory breakpoint "%s"
没有内存断点 "%s"
Memory breakpoint deleted!内存断点已删除!No memory breakpoints to enable!没有可以启用的内存断点!All memory breakpoints enabled!所有内存断点都已启用!Memory breakpoint already enabled!内存断点早已启用!Memory breakpoint enabled!内存断点已启用!No memory breakpoints to disable!没有可以禁用的内存断点!All memory breakpoints disabled!所有内存断点都已禁用!Memory breakpoint already disabled!内存断点早已禁用!Memory breakpoint disabled!内存断点已禁用!Could not delete DLL breakpoint %s (BpDelete)
无法删除DLL断点 %s (BpDelete)
Could not delete DLL breakpoint %s (LibrarianRemoveBreakPoint)
无法删除DLL断点 %s (LibrarianRemoveBreakPoint)
Could not enable DLL breakpoint %s (BpEnable)
无法启用DLL断点 %s (BpEnable)
Could not enable DLL breakpoint %s (LibrarianSetBreakPoint)
无法启用DLL断点 %s (LibrarianSetBreakPoint)
Could not disable DLL breakpoint %s (BpEnable)
无法禁用DLL断点 %s (BpEnable)
Could not disable DLL breakpoint %s (LibrarianRemoveBreakPoint)
无法禁用DLL断点 %s (LibrarianRemoveBreakPoint)
Error creating Dll breakpoint! (BpNewDll)新建DLL断点失败!(BpNewDll)Error creating Dll breakpoint! (LibrarianSetBreakPoint)新建DLL断点失败!(LibrarianSetBreakPoint)Dll breakpoint set on "%s"!
DLL断点已设置在“%s”!
No DLL breakpoints to delete!没有要删除的DLL断点!All DLL breakpoints deleted!所有DLL断点都已删除!Failed to find DLL breakpoint '%s'...
找不到 DLL 断点 '%s'...
Failed to remove DLL breakpoint (BpDelete)...删除 DLL 断点失败 (BpDelete)...Failed to remove DLL breakpoint (dbgdeletedllbreakpoint)...删除 DLL 断点失败 (dbgdeletedllbreakpoint)...DLL breakpoint removed!DLL 断点已删除!No DLL breakpoints to enable!没有可以启用的DLL断点!All DLL breakpoints enabled!所有DLL断点都已启用!No such DLL breakpoint "%s"
DLL断点“%s”并不存在
DLL breakpoint already enabled!DLL断点早已启用!DLL breakpoint enable!DLL断点已启用!No DLL breakpoints to disable!没有可以禁用的DLL断点!All DLL breakpoints disabled!所有DLL断点都已禁用!DLL breakpoint already disabled!DLL断点早已禁用!DLL breakpoint disabled!DLL断点已禁用!Could not delete exception breakpoint %p (BpEnable)
无法删除异常断点 %p (BpEnable)
Could not enable exception breakpoint %p (BpEnable)
无法启用异常断点 %p (BpEnable)
Could not disable exception breakpoint %p (BpEnable)
无法禁用异常断点 %p (BpEnable)
Invalid exception code: %s.
异常代码无效:%s。
Exception breakpoint %X (%s) already exists!
异常断点 %X (%s) 早已存在!
Invalid exception type!异常类型无效!Failed to set exception breakpoint! (BpNew)设置异常断点失败! (BpNew)No exception breakpoints to delete!没有可删除的异常断点!All exception breakpoints deleted!所有的异常断点都已删除!Delete exception breakpoint failed (bpdel): %p
删除异常断点失败 (bpdel): %p
No such exception breakpoint "%s"
异常断点“%s”并不存在
Exception breakpoint deleted!异常断点已删除!No exception breakpoints to enable!没有可启用的异常断点!All exception breakpoints enabled!所有的异常断点都已启用!Exception breakpoint already enabled!异常断点早已启用!Exception breakpoint enabled!异常断点已启用!No exception breakpoints to disable!没有可禁用的异常断点!All exception breakpoints disabled!所有的异常断点都已禁用!Exception breakpoint already disabled!异常断点早已禁用!Exception breakpoint disabled!异常断点已禁用!argument count mismatch!
参数个数不正确!
Something went wrong...出错了...Default breakpoint type set to: %s
默认的断点类型已设为:%s
Can't set %s on breakpoint "%s"
无法设置 %s 属性于断点 "%s"
breakpoint name断点名称break condition暂停条件logging text日志文本logging condition日志条件command on hit运行命令command condition命令条件log fileCan't set fast resume on breakpoint "%s"
无法设置快速恢复属性于断点 "%s"
Can't set singleshoot on breakpoint "%s"
无法设置一次性属性于断点 "%s"
Can't set silent on breakpoint "%s"
无法设置不输出日志属性于断点 "%s"
Can't set hit count on breakpoint "%s"
无法设置执行次数于断点 "%s"
Skipped INT3!已跳过INT3!Resolved shortcut "%s" -> "%s"
解析了快捷方式 "%s" -> "%s"
Resolved arguments from shortcut "%s"
已解析快捷方式的参数为 "%s"
Resolved working directory from shortcut "%s"
已解析快捷方式的工作区目录为 "%s"
Could not open file!无法打开文件!Debugging: %s
正在调试:%s
Invalid PE file!无效的PE文件!Use x32dbg to debug this file!请您用x32dbg来调试这个程序!Use x64dbg to debug this file!请您用x64dbg来调试这个程序!Finalizing the debugger thread took more than 10 seconds. This can happen if you are loading large symbol files or saving a large database.调试器线程未在 10 秒内结束,通常在加载较大的符号文件或存储较大的数据库时会出现这种情况。The debuggee did not stop after 10 seconds of requesting termination. The debugger state may be corrupted. It is recommended to restart x64dbg.被调试对象未能在 10 秒内终止,调试器内部状态可能已被破坏。建议重启 x64dbg。Could not open process %X!
无法打开进程 %X!
Process is already being debugged!进程已经在调试!IsWow64Process failed!IsWow64Process 失败 !Use x32dbg to debug this process!请您用x32dbg来调试这个程序!Use x64dbg to debug this process!请您用x64dbg来调试这个程序!Could not get module filename %X!
无法获取模块文件名 %X!
DetachDebuggerEx failed...DetachDebuggerEx 失败……Detached!已脱离!Not debugging!未在调试!Program is not running程序尚未运行The active thread is suspended, switch to a running thread to pause the process当前线程已暂停,请切换到正在运行的线程才能暂停进程。Error resuming thread恢复线程时出错Exception will be swallowed异常将会忽略Exception will be thrown in the program异常将会传递给程序Invalid variable "%s"
变量“%s”无效
Variable size not supported.变量的大小不支持。invalid argument "%s"!
参数“%s”无效!
Invalid dest "%s"
无效的目标"%s"
Invalid hex string "%s"
十六进制字符串“%s”无效
Invalid destination "%s"
无效的目标"%s"
Failed to write to %p
写入 %p 失败
Invalid src "%s"
无效的源"%s"
Failed to read (all) memory...读取(全部)内存失败...Failed to read register context...无法读取注册表上下文...Usage: movdqu xmm0, [address] / movdqu [address], xmm0 / movdqu xmm0, xmm1用法:movdqu xmm0, [地址] / movdqu [地址], xmm0 / movdqu xmm0, xmm1Usage: vmovdqu zmm0 (or ymm0), [address] / vmovdqu [address], zmm0 (or ymm0) / vmovdqu zmm0 (or ymm0), zmm1 (or ymm1)Usage: kmovq k1, [address] / kmovq [address], k1 / kmovq k1, k2Failed to write to %s
Usage: kmovd k1, [address] / kmovd [address], k1 / kmovd k1, k2Invalid thread %s
无效的线程 %s
Invalid address "%s"!
"%s" 地址无效!
Invalid stack address!无效的堆栈地址!Invalid address %p!
无效的地址:%p!
No graph generated...没有绘制流程图……Stack is now frozen
堆栈已锁定
Stack is now unfrozen
堆栈已解锁
Script脚本Address地址Data数据Invalid argument 1 : %s
参数1无效:“%s”
Invalid argument 2 : %s
参数2无效:“%s”
Address "%s" doesn't belong to any module!
地址“%s”不属于任何模块 !
VirtualAllocEx failedVirtualAllocEx 失败User-allocated memory用户分配的内存$lastalloc is zero, provide a page address$lastalloc 为零,提供一个页面地址VirtualFreeEx failedVirtualFreeEx 失败Invalid address specified指定了无效地址Memset failedMemset 失败Memory %p (size: %.8X) set to %.2X
内存 %p (大小:%.8X)已设为%.2X
Error: using an address as arg1
错误:请用一个地址作为参数1
Error getting rights of page: %s
获取页的权限时出错︰%s
Page: %p, Rights: %s
页面: %p,权限: %s
Error: Using an address as arg1 and as arg2: Execute, ExecuteRead, ExecuteReadWrite, ExecuteWriteCopy, NoAccess, ReadOnly, ReadWrite, WriteCopy. You can add a G at first for add PAGE GUARD, example: GReadOnly
错误:请用地址作参数1并用以下参数作参数2:Execute,ExecuteRead,ExecuteReadWrite,ExecureWriteCopy,NoAccess,ReadOnly,ReadWrite,WriteCopy。你可以在前面加G来添加PAGE GUARD,例如:GReadOnly
Error: Set rights of %p with Rights: %s
发生错误:试图将页面 %p 的访问权限设为:%s
New rights of %p: %s
页面 %p 已设置新的权限: %s
Failed to write file...写入文件失败……%p[%llX] written to "%s" !
%p[%llX] 已写入 "%s"!
%p[%X] written to "%s" !
%p[%X] 已写入 "%s"!
Cannot dump while running...程序正在运行时无法保存内存……Dump saved!内存已保存!MiniDumpWriteDump failed. GetLastError() = %s.
MiniDumpWriteDump 失败。GetLastError() = %s。
Directory '%s' doesn't exist
目录“%s”不存在Current directory changed!当前目录已经改变!Debugger hidden调试器已隐藏Something went wrong出问题啦Error: you must specify the name of the DLL to load
错误︰您必须指定要加载的 DLL 的名称
Error: couldn't get kernel32:LoadLibraryW错误:无法获取 kernel32:LoadLibraryWError: couldn't allocate memory in debuggee错误︰无法在调试对象内分配内存Error: couldn't write process memory错误:无法写入进程内存Error: couldn't SetBPX错误:无法 SetBPXError: the specified address does not point inside a module错误:指定的地址并非指向一个模块的内部。Error: couldn't get kernel32:FreeLibrary错误︰找不到 kernel32:LoadLibraryInvalid expression: "%s"!
无效的表达式:“%s”!
Invalid address: %p!
无效的地址︰ %p!
Failed to assemble "%s" (%s)
汇编“%s”失败(%s)
Error run the debugger as Admin to setjit
发生错误,请以管理员权限运行调试器再执行setjit
Error setting JIT %s
设置%s即时调试器出错
Error there is no old JIT entry stored.错误,没有保存旧的即时调试器。New OLD JIT stored: %s
已覆盖并保存原来的即时调试器:%s
Unknown JIT entry type. Use OLD, x64 or x32 as parameter.自动开始即时调试标志的类型未知。请使用OLD,x64或者x32作为参数。Error using x64 arg. The debugger is not a WOW64 process
错误使用了x64参数。调试器不是WOW64进程。
Error unknown parameters. Use old, oldsave, restore, x86 or x64 as parameter.错误:未知参数。请用old,oldsave,restore,x86或x64作为参数。New JIT %s: %s
新的即时调试器 %s: %s
Error getting JIT %s
获取%s即时调试器出错
OLD JIT entry stored: %s
已保存原来的即时调试器:%s
JIT %s: %s
即时调试器 %s: %s
Error getting JIT auto %s
获取自动开始即时调试标志%s失败
Unknown JIT auto entry type. Use x64 or x32 as parameter.自动开始即时调试标志的类型错误,请使用x64或者x32作为参数。Error using x64 arg the debugger is not a WOW64 process
不能使用64位参数, 当前调试器不是一个wow64进程
JIT auto %s: %s
自动开始%s即时调试:%s
Error run the debugger as Admin to setjitauto
发生错误,请以管理员权限运行调试器再执行setjitauto
Error setting JIT Auto. Use ON:1 or OFF:0 arg or x64/x32, ON:1 or OFF:0.
设置自动开始即时调试时出错。请使用 ON:1 或者 OFF:0 参数或者 x64/x32, ON:1 或者 OFF:0。
Error unknown parameters. Use ON:1 or OFF:0未知参数错误。请使用 ON:1 (启用)或 OFF:0 (关闭)Error setting JIT auto x64设置自动开始x64即时调试出错Error setting JIT auto x32设置自动开始x32即时调试出错Error unknown parameters. Use x86 or x64 and ON:1 or OFF:0
未知参数错误。请使用 x86 或 x64 和 ON:1 或 OFF:0Error getting JIT auto x64读取自动开始x64即时调试出错Error getting JIT auto x32读取自动开始x32即时调试出错Error unknown parameters use x86 or x64, ON/1 or OFF/0
错误地使用了未知参数,请使用x86或x64,ON/1或OFF/0
New JIT auto %s: %s
新的%s自动开始即时调试标志:%s
Command line: %s
命令行: %s
Error: write the arg1 with the new command line of the process debugged错误:请将被调试程序的新的命令行写在参数1New command line: %s
新的命令行︰ %s
No description or empty description没有指令描述或其为空Error: Configuration not found.错误:没找到设置项。Error updating configuration.保存设置出错。Could not find the specified privilege: %s
找不到指定的特权: %s
DuplicateHandle failed: %s
DuplicateHandle 失败: %s
Handle %llX closed!
句柄 %llX 已经关闭!
Handle %X closed!
句柄 %X 已经关闭!
Error loading Scylla.dll!加载 Scylla.dll 时出错!Could not find export 'ScyllaStartGui' inside Scylla.dll在Scylla.dll中找不到函数"ScyllaStartGui"Scylla is already loadedScylla 早已载入Press OK to reload the plugin...点击OK重新载入插件……Reload重新载入No call stack.没有调用堆栈。%llu call stack frames (RIP = %p , RSP = %p , RBP = %p ):
%llu 个调用堆栈帧 (RIP = %p, RSP = %p, RBP = %p ):
%u call stack frames (EIP = %p , ESP = %p , EBP = %p ):
%u 个调用堆栈帧 (EIP = %p, ESP = %p, EBP = %p ):
Failed to transform pattern!变换匹配特征时失败!Invalid memory address %p!
内存地址 %p 无效!
Failed to read memory!读取内存失败!Pattern: %s匹配特征: %sDisassembly反汇编[Error disassembling][反汇编出错]%d occurrences found in %ums
找到了 %d 项于 %u毫秒内
MemFindInMap failed!MemFindInMap 失败!Failed to assemble "%s" (%s)!
汇编“%s”失败(%s)!
Command: "%s"命令: “%s”%u result(s) in %ums
%u 结果, 用时 %u毫秒
Constant: %p常数: %pRange: %p-%p范围: %p-%p%u reference(s) in %ums
搜索到 %u 个引用于 %u毫秒内
String Address字符串地址String字符串Follow in Disassembly and Dump在反汇编和内存窗口中转到Follow string in Dump在内存窗口中转到字符串Function pointer函数指针Label标签Strings字符串%u string(s) in %ums
搜索到 %u 个字符串于 %u 毫秒内
Function pointers函数指针%u function pointer(s) in %ums
找到了 %u 个函数指针于 %u 毫秒内。
Destination目标Calls调用%u call(s) in %ums
找到 %u 个调用于 %u毫秒内
GUIDGUIDProgIdProgIdPath路径Description描述RegOpenKeyExW() failed. Cannot enumerate GUIDs.RegOpenKeyExW() 失败。因此无法搜索GUID。%u GUID(s) in %ums
找到 %u 个GUID于 %u 毫秒内
Invalid expression: "%s"无效表达式:“%s”Create thread failed!新建线程失败!Thread %s created at %s %p(Argument=%llX)
线程 %s 已创建于 %s %p(参数=%llX)
Thread %s created at %s %p(Argument=%X)
线程 %s 创建于 %s %p(参数=%X)
Thread switched!已切换线程!Error suspending thread暂停线程时出错Thread suspended线程已暂停运行Thread resumed!线程已恢复运行!Thread terminated线程已结束运行Error terminating thread!结束线程时发生错误!%d/%d thread(s) suspended
已暂停 %d/%d 个线程
%d/%d thread(s) resumed
已恢复 %d/%d 个线程
Unknown priority value, read the help!优先级值未知,请您阅读用户手册!Error setting thread priority设置线程优先级失败Thread priority changed!线程优先级已更改!Failed to change the name for thread %s
更改线程 %s 的名称失败
Thread name set to "%s"!
线程已命名为“%s”!
Thread name changed from "%s" to "%s"!
线程名称从"%s"改为"%s"!
Trace already active追踪正在进行Cannot start a trace when running, pause execution first.运行时无法启动跟踪,请先暂停。Invalid expression "%s"
无效表达式 “%s”
Run to party is busy.
运行到第三方功能已经运行。
EncodeMapSetType failed...EncodeMapSetType 失败……AddType failedAddType 失败AddStruct failedAddStruct 失败AddUnion failedAddUnion 失败AddMember failedAddMember 失败AppendMember failedAppendMember 失败Unknown calling convention "%s"
调用约定"%s"未知
AddFunction failedAddFunction 失败AddArg failedAddArg 失败AppendArg failedAppendArg 失败SizeofType failedSizeofType 失败VisitType failedVisitType 失败RemoveType failedRemoveType 失败Type %s removed
类型 %s 已删除
LoadTypes failedLoadTypes 失败Types loaded类型已载入No such variable "%s"!
变量 "%s" 并不存在!
Failed to set variable "%s"!
设置变量“%s”失败!
Variable "%s" is not a string!
变量 "%s" 不是一个字符串!
Failed to get variable size "%s"!
获得变量“%s”的大小失败!
Failed to get variable data "%s"!
获得变量“%s”的内容失败!
MemPatch failed!MemPatch 失败!String written!字符串已写入!Database cleared!数据库已清理!Error setting comment设置注释时出错Error deleting comment删除注释时出错Comments注释Comment注释No comments没有注释Delete删除%d comment(s) listed in Reference View
已列出 %d 项注释于引用视图
All comments deleted!所有注释已删除!Error setting label设置标签时出错Error deleting label删除标签失败Labels标签No labels没有标签%d label(s) listed in Reference View
已列出 %d 个标签于引用视图
All labels deleted!所有标签已删除!Failed to set bookmark!设置书签失败!Bookmark set!已设置书签!Failed to delete bookmark!删除书签失败!Bookmark deleted!已删除书签!Bookmarks书签No bookmarks found无书签%d bookmark(s) listed
已列出 %d 个书签
All bookmarks deleted!所有书签已删除!Failed to add function添加函数失败Function added!函数已添加!Failed to delete function删除函数失败Function deleted!函数已删除!Functions函数Start开始End结束Size大小Disassembly (Start)反汇编 (起始指令)No functions无函数%d function(s) listed
已列出 %d 个函数
All functions deleted!已删除所有函数!Failed to add argument添加参数失败Argument added!参数已添加!Failed to delete argument删除参数失败Argument deleted!参数已删除!Arguments参数Label/Comment标签/注释No arguments无参数%d argument(s) listed
已列出 %d 个参数
All arguments deleted!所有参数已删除!Failed to add loop添加循环失败Loop added!循环已添加!Failed to delete loop删除循环失败Loop deleted!循环已删除!Loops循环Depth深度Parent父No loops没有循环%d loop(s) listed
已列出 %d 个循环
All loops deleted!所有循环已删除!Invalid variable name "%s"
变量名 “%s” 无效
Invalid value "%s"
值 "%s" 无效
Error creating variable "%s"
创建变量"%s"时出错
Could not delete variable "%s"
无法删除变量 "%s"
Deleted variable "%s"
变量“%s”已经删除
No variables!无变量!Error listing variables!列出变量出错!Variables变量Value (Hex)值(十六进制)Variable变量Value (Decimal)值(十进制)Property属性User Variable用户变量System Variable系统变量Read Only Variable只读变量No enough arguments for addwatch
addwatch参数不足
No enough arguments for delwatch
delwatch参数不足
Error expression in argument 1.
参数1中的表达式错误。
Unknown watchdog mode.
未知的看门狗模式。
No enough arguments for SetWatchType
SetWatchType参数不足Unknown watch type.
未知的监视模式。No enough arguments for SetWatchExpressionSetWatchExpression参数不足No enough arguments for SetWatchNameSetWatchName参数不足Saving database to %s 正在将数据库保存于 %s
Failed to write database file !(GetLastError() = %s)
写入数据库文件失败!(GetLastError() = %s)
%ums
%u毫秒
Loading commandline...正在读取命令行……Loading database from %s 正在从 %s 载入数据库 (migrating breakpoints) (升级断点)
Invalid database file!
数据库文件无效!
Failed to read database file !(GetLastError() = %s)
读取数据库文件失败!(GetLastError() = %s)
Invalid database file (JSON)!
JSON数据库文件无效!Warning: Failed to create database folder '%s'. GetLastError() = %s
警告:创建数据库文件夹“%s”失败。GetLastError() = %s
Cannot write to the program directory (GetLastError() = %s), try running x64dbg as admin...
不能写入程序目录中(GetLastError() = %s),请尝试以管理员身份运行 x64dbg。
Database file: %s
数据库文件: %s
WARNING: The database has a checksum that is different from the module you are debugging. It is possible that your debuggee has been modified since last session. The content of this database may be incorrect.警告:数据库的校验码与你现在正在调试的校验码不同,可能是因为你的调试对象已经修改,因此当前数据库中的内容未必准确。Missing operand缺少操作数Failed to convert operand转换操作数失败Operand value too big操作数的值太大Invalid operand (FromHex failed)无效操作数 (FromHex 失败)Invalid size (expected %llu, got %llu)无效的大小(期望 %llu,实际 %llu)Invalid size (expected %u, got %u)无效的大小(期望 %u,实际 %u)80bit extended float is not supported不支持80位扩展型浮点数Invalid string literal无效的字符串String too long字符串太长Dest buffer too small目标缓冲区太小Thread switched from %X to %X !
刚从线程 %X 切换到线程 %X!
Module: %s - 模块: %s - (switched from %s) (切换自 %s)%s - PID: %s - %sThread: %s%s%s%s - PID: %s - %s线程: %s%s%s%s breakpoint "%s" at %s!
%s 断点 "%s" 于 %s !
%s breakpoint at %s!
%s 断点于 %s!
execute执行read/write读写write写入Hardware breakpoint (%s%s) "%s" at %s!
硬件断点 (%s%s) "%s" 于 %s!
Hardware breakpoint (%s%s) at %s!
硬件断点 (%s%s) 于 %s!
(read) (读取) (write) (写入) (execute) (执行) (read/write/execute) (读写和执行)Memory breakpoint%s "%s" at %s, exception address: %s!
内存断点%s “%s” 位于 %s,异常地址:%s!
Memory breakpoint%s at %s, exception address: %s!
内存断点%s位于%s,异常地址:%s!
DLL LoadDLL载入DLL UnloadDLL卸载DLL Load and unloadDLL 加载和卸载DLL Breakpoint %s (%s): Module %s
DLL断点 %s (%s): 模块 %s
DLL Breakpoint (%s): Module %s
DLL断点 (%s): 模块 %s
Exception Breakpoint %s (%p) at %p!
异常断点 %s (%p) 于 %p!
paused!已暂停!Breakpoint reached not in list!遇到了未知断点!Error when evaluating break condition.暂停条件计算出错。Error when evaluating log condition.日志条件计算出错。Error when evaluating command condition.命令条件计算出错。Failed to open breakpoint log: %s (%s)
打开断点日志失败: %s (%s)
User code reached at %s已到达用户代码 %sBreakpoint %p has been disabled because the bytes don't match! Expected: %02X %02X, Found: %02X %02X
由于字节不匹配,断点%p已经禁用。预期:%02X %02X, 实际:%02X %02X
Could not set breakpoint %p! (SetBPX)
无法设置断点 %p! (SetBPX)
MemRead failed on breakpoint address %p!
MemRead在断点地址%p上失败了!
Could not set memory breakpoint %p! (SetMemoryBPXEx)
无法设置内存断点 %p! (SetMemoryBPX)
Could not set hardware breakpoint %p! (SetHardwareBreakPoint)
无法设置硬件断点 %p! (SetHardwareBreakPoint)
Set hardware breakpoint on %p!
已设置硬件断点于 %p!
Could not delete breakpoint %p! (DeleteBPX)
无法删除断点 %p! (DeleteBPX)
Could not delete memory breakpoint %p! (RemoveMemoryBPX)
无法删除内存断点 %p! (RemoveMemoryBPX)
Could not delete hardware breakpoint %p! (DeleteHardwareBreakPoint)
无法删除硬件断点 %p! (DeleteHardwareBreakPoint)
Trace finished after %llu steps!
追踪 %llu 步后成功结束!
Trace finished after %u steps!
追踪 %u 步后成功结束!
??? (GetFileNameFromHandle failed)??? (GetFileNameFromHandle 失败)Process Started: %p %s
进程已启动: %p %s
TLS Callback %dTLS回调函数%d%d invalid TLS callback addresses...
%d个无效的TLS回调函数地址……
entry breakpoint入口断点Process stopped with exit code %s
进程已停止,退出码为 %sThread %s created, Entry: %s, Parameter: %s
线程 %s 已创建,入口:%s,参数:%s
Thread Entry线程入口Thread %s Stack线程 %s 堆栈...No threads left to switch to (bug?)没有剩下的线程可以切换(bug?)Thread %s exit
线程 %s 退出
Error: Cannot load global initialization script.错误︰ 无法加载全局初始化脚本。Error: Cannot load debuggee initialization script.错误︰ 无法加载调试对象初始化脚本。System breakpoint reached!已到达系统断点!It has been detected that the debuggee entry point is in the MZ header of the executable. This will cause strange behavior, so the system breakpoint has been enabled regardless of your setting. Be careful!检测到调试器入口点位于程序的 MZ 头中,这将导致异常现象,因此系统断点已被强制开启。请注意!TLS CallbackTLS回调函数Waiting until ntdll.dll symbols are loaded...
正在等待 ntdll.dll 符号载入...Set LdrpDebugFlags to 0x%08X successfully!
成功将 LdrpDebugFlags 设置为 0x%08X!Failed to write to LdrpDebugFlags
无法写入 LdrpDebugFlagsSymbol 'LdrpDebugFlags' not found!
找不到符号“LdrpDebugFlags”!Failed to find LdrpDebugFlags (you need to load symbols for ntdll.dll)
找不到LdrpDebugFlags(您需要为ntdll.dll加载符号)DLL Loaded: %p %s
DLL已载入: %p %s
DLL Unloaded: %p %s
DLL已卸载: %p %s
DebugString: "%s"
调试字符串: "%s"
SetThreadName exception on %p (%X, "%s")
SetThreadName 异常发生于 %p (%X, "%s")
First chance exception on %p (%.8X, %s)!
第一次异常于 %p (%.8X, %s)!
First chance exception on %p (%.8X)!
第一次异常于 %p (%.8X)!
Last chance exception on %p (%.8X, %s)!
第二次异常于 %p (%.8X, %s)!
Last chance exception on %p (%.8X)!
第二次异常于 %p (%.8X)!
Attached to process!已附加到进程!Error debugging DLL (failed to copy loader)
调试DLL时发生错误 (无法复制加载器)
Error debugging DLL (loaddll.exe not found)
调试DLL时出错 (找不到 loaddll.exe)
The executable you are trying to debug requires elevation. Restart as admin?您要调试的程序需要提升权限。以管理员身份重新启动吗?Elevation提升权限Error starting process (CreateProcess, %s)!
启动进程 (CreateProcess,%s) 时出错!
Attach to process failed: %s
附加到进程失败:%s
Debugging stopped!调试结束!Drivers known to interfere with x64dbg's operation have been detected.
List of drivers:
%s
Do you want to continue debugging?检测到已知影响x64dbg操作的驱动程序。
驱动程序列表:
%s
您想要继续调试吗?Invalid line in exception database: "%s"
异常数据库中有无效的行:“%s”
Failed to convert number in exception database "%s"
转换异常数据库中的数字“%s”失败
invalid dest "%s"
无效的目标"%s"
Expression evaluated to a string: "%s"
表达式被计算为字符串:“%s”
No such expression function '%s'
不存在表达式函数 '%s'number数string字符串anyinvalid无效Bad argument count for expression function %s (expected %s, got %d)!
表达式函数 %s 的参数个数错误(需要%s,提供了%d)!Expression function %s argument %d/%d (%s) type mismatch (expected %s, got %s)!
表达式函数 %s 的参数 %d/%d (%s) 类型不匹配(应该为 %s,现在为%s)!Expression function %s errored!
表达式函数 %s 出错!
Expression function %s returned an invalid value!
表达式函数 %s 返回了错误值!
Invalid argument...参数无效……Too much data (10MB max)...数据太多(最多10MB)……Failed to read memory...读取内存失败……Invalid size...无效的大小Debuggee被调试对象Cannot restore last instruction.无法恢复上个指令。History record is empty没有历史记录Reserved (%p)保留 (%p)Reserved保留TEB (%s)TEB (%s)WoW64 TEB (%s)WoW64 TEB (%s)Stack (%s)堆栈 (%s)Failed to read mnemonic help database...指令助记符数据库读取失败……Failed to load mnemonic help database...指令助记符数据库载入失败……Mnemonic help database loaded!指令助记符数据库已成功载入!Invalid mnemonic!指令助记符无效!Too many redirections...跳转太多……invalid instruction指令无效Invalid relocation block for module %s%s!
模块 %s%s 的重定向块是错误的!
Invalid relocation entry for module %s%s!
模块 %s%s 的重定向项是错误的!
Illegal relocation type 0x%02X for module %s%s!
重定向类型0x%02X(在模块%s%s中)是无效的!
Unknown CodeView signature %08X for module %s%s...
未知的CodeView签名 %08X 出现于模块 %s%s 中……
Skipping unsupported debug type %s in module %s%s...
跳过了不支持的调试类型 %s (在模块%s%s中)……
Did not find any supported debug types in module %s%s!
在模块 %s%s 中没有找到任何支持的调试类型!
Exception while getting module info (%s), please report...
获取模块信息(%s)时出现异常,请反馈...Module %s%s: invalid PE file!
模块 %s%s:无效的PE文件!
No patches to apply没有可以应用的补丁Not all patches are in module %s并非所有的补丁都在模块 %sFailed to get base of module %s获得模块 %s 的基址失败Failed to get module path of module %s获得模块 %s 的路径失败Failed to make a copy of the original file (patch target is in use?)备份原始文件失败(修复目标已经被占用?)Unable to obtain attributes for copied file无法获取复制的文件的属性StaticFileLoad failedStaticFileLoad 失败StaticFileUnload failedStaticFileUnload 失败[PLUGIN] %s already loaded
[插件] %s 早已载入
[PLUGIN] Cannot find plugin: %s
[插件] 找不到插件: %s
[PLUGIN] Failed to load plugin: %s
[插件] 载入插件失败:“%s”
[PLUGIN] Export "pluginit" not found in plugin: %s
[插件] 插件中没有找到“pluginit”导出函数: %s
[PLUGIN] pluginit failed for plugin: %s
[插件] 插件函数pluginit失败: %s
[PLUGIN] %s is incompatible with this SDK version
[插件] %s 与本软件SDK版本不兼容
[PLUGIN] %s v%d Loaded!
[插件] %s v%d 已经载入!
[PLUGIN] GuiMenuAdd(%d) failed for plugin: %s
[PLUGIN] GuiMenuAdd(%d) 失败于插件:%s
[PLUGIN] %s unloaded
[插件] %s 已经卸载
[PLUGIN] %s not found
[插件] 找不到 %s
[PLUGIN] Ignoring top-level plugin in favor of the directory 'plugins\%s'
[插件]已忽略顶层的插件而使用目录'plugins\%s'[PLUGIN] Invalid plugin handle %d...
[插件]插件句柄%d无效……
[PLUGIN, %s] Command "%s" failed to register...
[插件,%s]命令“%s”注册失败……
[PLUGIN, %s] Command "%s" registered!
[插件,%s] 命令 "%s" 已经注册!
[PLUGIN, %s] Command "%s" unregistered!
[插件,%s] 命令 "%s" 已经删除!
[PLUGIN, %s] Command "%s" failed to unregister...
[插件,%s] 命令 "%s" 删除失败……
[PLUGIN, %s] Expression function "%s" failed to register...
[插件,%s] 表达式函数“%s”注册失败……
[PLUGIN, %s] Expression function "%s" registered!
[插件,%s] 表达式函数“%s”已经注册!
[PLUGIN, %s] Expression function "%s" unregistered!
[插件,%s] 表达式函数“%s”已经删除!
[PLUGIN, %s] Expression function "%s" failed to unregister...
[插件,%s] 表达式函数“%s”删除失败……
[PLUGIN, %s] Format function "%s" failed to register...
[插件,%s]格式函数“%s”删除失败……
[PLUGIN, %s] Format function "%s" registered!
[插件,%s]格式函数“%s”已经注册!
[PLUGIN, %s] Format function "%s" unregistered!
[插件,%s] 格式函数“%s”已经删除!
[PLUGIN, %s] Format function "%s" failed to unregister...
[插件,%s]格式函数“%s”删除失败……
Invalid memory page 0x%p
无效的内存页 0x%p
%s (Region %s)%s (区域 %s)%s (Region %p)%s (区域 %p)Region Search区域搜索Couldn't locate module for 0x%p
无法为%p定位模块
Module Search模块搜索Couldn't get module list无法获取模块列表User Modules (%s)用户模块 (%s)System Modules (%s)用户模块 (%s)All Modules (%s)所有模块 (%s)FileHelper::ReadAllText failed...FileHelper::ReadAllText 失败……Empty label detected on line %d!发现在行 %d 上有空的标签!Duplicate label "%s" detected on lines %d and %d!发现重复的标签"%s"于行%d和%d!Invalid branch label "%s" detected on line %d!检测到无效的分支标签“%s”于行%d!Script finished!脚本执行完毕!Error executing command!执行命令时出错!The script is too busy. Would you like to terminate it now?脚本运行过久。您想现在终止运行脚本吗?Script is terminated by user.脚本被用户终止。Debugger must be paused to run a script!调试器只有在暂停时才能运行脚本!Pointer to SEH_Record[%d]指向SEH_Record[%d]的指针End of SEH ChainSEH链结束return to %s from %s返回到 %s 自 %s[Formatting Error][解析出错]Module not found...
找不到模块……
Module has no symbol information...
模块无符号信息……
No symbol path specified...
未指定符号路径……
Symbol file '%s' exists but could not be loaded!
符号文件'%s'存在,但无法加载!
No symbol store URL specified...
未指定符号存储网址……
Downloading symbol %s
Signature: %s
Destination: %s
URL: %s
正在下载符号 %s
签名:%s
目标:%s
网址:%s
Failed to create destination file (%s)...
创建目标文件失败(%s)……
InternetOpen failed (%s)...
InternetOpen失败(%s)……
InternetOpenUrl failed (%s)...
InternetOpenUrl失败(%s)……
Connection succeeded, but download failed (status code: %d)...
连接成功,但下载失败(状态码:%d)……
Download interrupted...
下载中断……
Download incomplete...
下载不完整……
Finished downloading symbol %s in %.03fs
已经下载符号%s,用时%.03f秒。Main Thread主线程Failed to suspend thread 0x%X...
暂停线程 0x%X 失败……
Failed to add %s %s;
未能添加 %s %s;
Failed to add typedef %s %s;
类型定义 %s %s添加失败;
Failed to add function %s %s()
函数 %s %s() 添加失败
Failed to add member %s %s.%s;
成员 %s %s.%s添加失败;
Failed to add argument %s %s.%s;
参数 %s %s.%s添加失败;
Not debugging未在调试valfromstring_noexpr failed on %s
valfromstring_noexpr %s 失败
Failed to read memory读取内存失败Invalid value: "%s"!
无效的值:"%s"!
Failed to write memory写入内存失败Watchdog %s (expression "%s") is triggered at %p ! Original value: %p, New value: %p
看门狗 %s (表达式 "%s") 已经触发于 %p ! 原始值: %p, 当前值: %p
Watch %u监视 %ucommand cut at ~%d characters
命令在约 %d 个字符处截断
[Script DLL] Calling export "AsyncStart"...
[脚本DLL] 正在调用导出函数 "AsyncStart"……
[Script DLL] "AsyncStart" returned!
[脚本DLL]"AsyncStart"函数已返回!
[Script DLL] Calling FreeLibrary...[脚本DLL]正在调用FreeLibrary……success!
成功!
failure (%s)...
失败 (%s)...
[Script DLL] Loading Script DLL "%s"...
[脚本DLL] 正在加载脚本DLL"%s"……
[Script DLL] DLL loaded on 0x%p!
[脚本DLL] DLL已载入到0x%p!
[Script DLL] Creating thread to call the export "AsyncStart"...
[脚本DLL] 新建线程调用导出函数“AsyncStart”……
[Script DLL] Calling export "Start"...
[脚本DLL]正在调用导出函数“Start”……
[Script DLL] "Start" returned!
[脚本DLL]"Start"函数已返回!
[Script DLL] Failed to find the exports "AsyncStart" or "Start" (%s)!
[脚本DLL] 无法找到导出函数“AsyncStart”或“Start” (%s)!
[Script DLL] LoadLibary failed (%s)!
[脚本DLL] LoadLibrary失败 (%s)!
Retrieving syscall indices...正在获取系统调用编号...Syscall indices loaded!已加载系统调用编号!Failed to load syscall indices...无法加载系统调用编号...Error codes database loaded!成功载入错误码数据库!Failed to load error codes...载入错误码数据库失败……Exception codes database loaded!成功载入异常码数据库!Failed to load exception codes...载入异常码数据库失败……NTSTATUS codes database loaded!成功载入NTSTATUS码数据库!Failed to load NTSTATUS codes...载入NTSTATUS码数据库失败……Windows constant database loaded!窗口常数数据库已载入!Failed to load Windows constants...载入窗口常数失败……Reading notes file...正在读取笔记文件……Reading notes failed...读取笔记失败……File read thread finished!文件读取线程完成!Initializing wait objects...正在初始化等待对象……Initializing debugger...正在初始化调试器……Initializing debugger functions...正在初始化调试器函数……Setting JSON memory management functions...正在设置JSON内存管理函数……Getting directory information...正在获取目录信息……Start file read thread...读取文件线程开始……It is strongly discouraged to use symbol servers in your path directly (use the store option instead).
Do you want me to fix this?不建议您直接使用本地路径的符号服务器 (您可以用符号存储选项)
您现在就想修复这个问题吗?Symbol Path: %s
符号路径: %s
Allocating message stack...正在分配消息堆栈……Initializing global script variables...正在初始化全局脚本变量……Registering debugger commands...正在注册调试器命令……Registering GUI command handler...正在注册GUI命令接收器……Registering expression functions...正在注册表达式函数……Registering format functions...正在注册格式函数……Default默认Registering Script DLL command handler...正在注册脚本DLL命令接收者……Script DLL脚本DLLStarting command loop...正在初始化命令执行循环……Initialization successful!初始化成功!Loading plugins...正在载入插件……Handling command line...正在处理命令行……Stopping command thread...正在停止命令线程……Stopping running debuggee...正在停止调试对象……Aborting scripts...正在退出脚本……Unloading plugins...正在卸载插件……Cleaning up allocated data...正在清理已分配的内存数据……Cleaning up wait objects...正在清理等待对象……Cleaning up debugger threads...正在清理调试器线程……Saving notes...正在保存笔记……Exit signal processed successfully!退出过程成功完成!%1 occurrence(s) in %2ms
找到了 %1 项于 %2毫秒内
DebugStatusLabelInitialized已初始化Paused已暂停Running运行中Terminated已停止DisassemblerGraphViewUse Graph command or menu action to draw control flow graph here...使用Graph命令或者菜单操作来在此绘制流程图……Large number of nodes节点太多The graph you are trying to render has a large number of nodes (%1). This can cause x64dbg to hang or crash. It is recommended to save your data before you continue.
Do you want to continue rendering this graph?您要绘制的流程图含有太多节点(%1)。这可能导致 x64dbg 卡机或崩溃。建议您在继续绘制前保存数据。
您确实需要继续绘制这个流程图吗?Follow in &Disassembler在反汇编中转到(&D)Xrefs...相互引用...Expression表达式Previous上一个Next下一个&Address: 地址(&A): &Constant: 常数(&C): &Value: 值(&V): Block incoming: %1区块完成:%1Block exit %1区块退出%1Go to转到Help on mnemonic指令帮助&Highlighting mode高亮模式(&H)&Zoom 100%缩放至 100%(&Z)&Fit to window适应窗口大小(&F)&Overview鸟瞰视图(&O)S&ummary摘要(&U)&Sync with %1 与 %1 同步(&S)&Refresh刷新(&R)&Save as image保存图像(&S)Narrow窄Medium中等Wide宽Layout布局Detach脱离Copy token &text复制标记文本(&T)Copy token &value复制标记值(&V)Save as image保存图像PNG file (*.png);;WebP file (*.webp);;BMP file (*.bmp);;TIFF file (*.tif)PNG 文件 (*.png);;WebP 文件 (*.webp);;BMP文件 (*.bmp);;TIFF 文件 (*.tif)Error错误Image saving failed!图片保存失败!DisassemblyAddress地址Bytes字节Disassembly反汇编Mnemonic brief指令提示Comments注释EditBreakpointDialogEdit breakpoint编辑断点<html><head/><body><p>This text will be logged whenever the log condition is true.</p><p>String formatting can be used to print variables.</p></body></html><html><head/><body><p>这一文本在日志条件为真的时候将被记录到日志内。</p><p>可使用字符串格式化打印变量。</p></body></html>&Log Text:日志文本(&L):<html><head/><body><p>If this expression is evaluated to 1 the breakpoint will break.</p><p>Set to <span style=" text-decoration: underline;">0</span> for a breakpoint that never breaks, but can still do logging and execute command.</p></body></html><html><head/><body><p>若该表达式评估值为 1,该断点将触发。</p><p>将其设为<span style=" text-decoration: underline;">0</span>可得到一个永不触发的断点,但其仍能记录日志和执行命令。</p></body></html>&Break Condition:暂停条件(&B):Example: arg(0) == 123 (numbers are hex by default)<html><head/><body><p>String logging is enabled whenever this expression is evaluated to 1.</p></body></html><html><head/><body><p>字符串日志记录在该表达式评估值为 1 时启用。</p></body></html>Lo&g Condition:日志条件(&G):&Name:名称(&N):<html><head/><body><p>This command will be executed whenever command condition is true.</p><p>Currently certain commands, for example, stepping from breakpoint command are not supported.</p></body></html><html><head/><body><p>该命令在命令条件为真时将被执行。</p><p>目前还不支持从断点步进等命令。</p></body></html>&Command Text:命令(&C):<html><head/><body><p>The number of times the breakpoint is hit.</p></body></html><html><head/><body><p>该断点触发的次数。</p></body></html>&Hit Count:执行次数(&H):<html><head/><body><p>If this expression is evaluated to 1 the command specified above is executed when the breakpoint is hit.</p><p>Set the expression to <span style=" text-decoration: underline;">1</span> to always execute the command.</p></body></html><html><head/><body><p>若该表达式评估值为 1,将在断点触发时执行上面指定的命令。</p><p>将表达式设为<span style=" text-decoration: underline;">1</span>以便总是执行该命令。</p></body></html>C&ommand Condition:命令条件(&O):Log F&ile...日志文件(&I)...<html><head/><body><p>Remove the breakpoint once it pauses the debuggee.</p></body></html><html><head/><body><p>被调试进程被该断点暂停时将其移除。</p></body></html>Singlesho&ot一次性(&O)<html><head/><body><p>Don't print the default breakpoint log.</p></body></html><html><head/><body><p>不打印默认断点日志。</p></body></html>&Silent不输出日志<html><head/><body><p>Don't enable extended conditional breakpoint features and plugins.</p></body></html><html><head/><body><p>不启用扩展条件断点功能和插件。</p></body></html>&Fast Resume快速恢复(&F)&Save保存(&S)C&ancel取消(&A)Edit DLL Breakpoint %1编辑DLL断点 %1Edit Breakpoint %1编辑断点 %1Edit Hardware Breakpoint %1编辑硬件断点 %1Edit Memory Breakpoint %1编辑内存断点 %1Edit Exception Breakpoint %1编辑异常断点 %1Breakpoint log file断点日志文件Enter the path to the log file.输入日志文件的路径。Log Files (*.txt *.log);;All Files (*.*)日志文件(*.txt *.log);;所有文件(*.*)EditFloatRegisterDialog对话框Double:Double:Word:Word:Float:Float:Byte:字节:Qword:Qword:Dword:Dword:High:高位部分:10-1110-1112-1312-1314-1514-1516-1716-1718-1918-191A-1B1A-1B1C-1D1C-1D1E-1F1E-1FLow:低位部分:0-10-12-32-34-54-56-76-78-98-9A-BA-BC-DC-DE-FE-F&Hexadecimal十六进制(&H)&Signed有符号(&S)&Unsigned无符号(&U)&OK确定(&O)&Cancel取消(&C)Error, register size %1 is not supported.
错误,寄存器大小 %1 不支持。
ExceptionRangeDialogRange范围Start:开始:End:结束:OK确定Cancel取消ExportCSVExport data in CSV format将数据导出到 CSV 文件Enter the CSV file name to export输入要导出的 CSV 文件名CSV files (*.csv);;All files (*.*)CSV 文件 (*.csv);;所有文件 (*.*)CSV export error
CSV 导出错误Saved CSV data at %1
已保存CSV数据于 %1FavouriteToolsFavourites收藏夹Tools工具&Add...添加(&A)...&Edit编辑(&E)&Remove删除(&R)De&scription...描述(&S)...&Up上移(&U)&Down下移(&D)Script脚本Command命令Shortcut快捷键Clear清除&OK确定(&O)&Cancel取消(&C)Path路径Description描述Browse tool浏览工具Enter the path of the tool.输入该工具的路径。Executable Files (*.exe);;All Files (*.*)可执行文件 (*.exe);;所有文件 (*.*)Enter the description输入当前项的描述This string will appear in the menu.此字符串将出现在菜单中。Select script选择脚本Script files (*.txt *.scr);;All files (*.*)脚本文件 (*.txt *.scr);;所有文件 (*.*)Enter the command you want to favourite请输入您想要收藏的命令Example: bphws csp例如: bphws cspEnter a new command输入一个新的命令Example: bphws ESP例如: bphws ESPGotoDialogEnter expression to follow...输入目标的地址或表达式...&OK确定(&O)&Cancel取消(&C)<font color='red'><b>Not debugging...</b></font><font color='red'><b>未在调试……</b></font><font color='red'><b>Invalid expression...</b></font><font color='red'><b>无效的表达式……</b></font>File offset文件偏移Shortcuts: 快捷方式:<font color='#00DD00'><b>Correct expression! -> </b></font><font color='#00DD00'><b>正确的表达式! -> </b></font><font color='red'><b>Invalid file offset...</b></font><font color='red'><b>无效的文件偏移量……</b></font><font color='red'><b>Invalid memory address...</b></font><font color='red'><b>无效的内存地址……</b></font><font color='red'><b>Memory out of range...</b></font><font color='red'><b>内存地址超出范围……</b></font>HandlesViewType类型Type number类型编号Handle句柄Access访问权限Name名称Proc窗口过程Title标题Class窗口类名Thread线程Style风格StyleEx扩展风格Parent父Size大小Enable启用Remote address远程地址Local address本机地址State状态Privilege特权Windows窗口Handles句柄TCP ConnectionsTCP 连接Privileges特权&Refresh刷新(&R)Close handle关闭句柄Disable Privilege: 禁用特权: Enable Privilege: 启用特权: Disable all privileges禁用所有特权Enable all privileges启用所有特权Enable window启用窗口Disable window禁用窗口Follow Proc in Disassembler在反汇编中转到窗口过程Follow in Threads在线程中转到Toggle Breakpoint in Proc在窗口过程切换断点Message Breakpoint消息断点TCP Connection enumeration is only available on Windows Vista or greater.枚举TCP网络连接功能仅适用于Windows Vista及以上版本的操作系统。Enabled已启用Unknown未知&Copy复制(&C) (Desktop window) (桌面)Disabled已禁用HexDump&Selected lines选定的行(&S)&Address地址(&A)Error!错误!Selection not in a module...选区不在一个模块中……Address地址HexEditDialogHexEdit十六进制编辑器Hex十六进制Warning: Data cannot be represented in selected codepage.警告:数据不能用选定的代码页表示。ASCIIASCII&UNICODE:&UNICODE:Last &Codepage:上次代码页(&C):Code&page...代码页(&P)...&Hex:十六进制(&H):String字符串Convert to Windows style line ending.改为 Windows 样式行尾。CR LFCR LFCopy data复制数据Copy复制Items per line:每行个数:&Keep Size保持大小(&K)&Entire Block整块(&E)Start from &Selection从&选择开始&OK确定(&O)&Cancel取消(&C)C-Style BYTE (Hex)C样式字节 (十六进制)C-Style WORD (Hex)C样式字 (十六进制)C-Style DWORD (Hex)C样式双字 (十六进制)C-Style QWORD (Hex)C样式四字 (十六进制)C-Style StringC样式字符串C-Style Unicode StringC样式 Unicode 字符串C-Style Shellcode StringC样式Shellcode字符串ASM-Style BYTE (Hex)汇编语言风格字节 (十六进制)ASM-Style WORD (Hex)汇编语言风格字 (十六进制)ASM-Style DWORD (Hex)汇编语言风格双字 (十六进制)ASM-Style QWORD (Hex)汇编语言风格四字 (十六进制)ASM-Style String汇编语言风格字符串Pascal BYTE (Hex)Pascal字节 (十六进制)Pascal WORD (Hex)Pascal字 (十六进制)Pascal DWORD (Hex)Pascal双字 (十六进制)Pascal QWORD (Hex)Pascal四字 (十六进制)Python 3 BYTE (Hex)Python 3 字节 (十六进制)Unicode StringUnicode 字符串UTF8 StringUTF8 字符串UCS4 StringUCS4 字符串Hex Stream十六进制流GUIDGUIDIP Address (IPv4)IP 地址 (IPv4)IP Address (IPv6)IP 地址 (IPv6)Base64Base64LabeledSplitter&Detach脱离(&D)&Collapse收起(&C)&Expand展开(&E)LineEditDialogDialog对话框CheckBoxCheckBox&OK确定(&O)&Cancel取消(&C)<font color='red'>CT: %1%2</font><font color='red'>CT: %1%2</font>LocalVarsViewName名称Expression表达式Value值&Follow in Dump在内存窗口中转到(&F)Follow DWORD in Dump在内存窗口中转到指定DWORDFollow QWORD in Dump在内存窗口中转到指定QWORDFollow in Stack在栈中转到Follow DWORD in Stack在栈中转到双字Follow QWORD in Stack在栈中转到四字Follow in Memory Map在内存布局中转到&Modify Value修改(&M)&Rename改名(&R)&Copy复制(&C)Base Register基址寄存器Local%1局部变量%1Arg%1参数%1Rename local variable "%1"重命名局部变量“%1”Edit %1 at %2编辑 %2 处的 %1LogViewFind For查找Clea&r清除(&R)&Copy复制(&C)&Paste粘贴(&P)Select &All全选(&A)&Save保存(&S)Disable &Logging禁用日志记录(&L)&Redirect Log...重定向日志输出(&R)...Auto Scrolling自动滚动Copy To Notes复制到笔记&Global全局(&G)&Debuggee被调试对象(&D)Find搜索Find Next OccurenceFind Previous OccurenceEnable &Logging启用日志记录(&L)Stop &Redirection停止重定向(&R)Invalid address!地址无效!The address %1 is not a valid memory location...地址 %1 不是有效的内存地址……Url is not valid!Url 无效!The Url %1 is not supported不支持 Url %1fwrite() failed (GetLastError()= %1 ). Log redirection stopped.
fwrite() 失败 (GetLastError() = %1)。日志重定向已停止。
Log redirection is stopped.
日志重定向已停止。
Log is not redirected.
日志未被重定向。
_wfopen() failed. Log will not be redirected to %1.
_wfopen() 失败。日志无法被重定向到 %1。
Log will be redirected to %1.
日志将被重定向到 %1。
Redirect log to file将日志重定向到文件Enter the file to which you want to redirect log messages.输入您想要将日志消息重定向到的文件。Log files (*.txt);;All files (*.*)日志文件(*.txt);;所有文件(*.*)Logging will be enabled.
将启用日志记录。
Logging will be disabled.
将禁用日志记录。
Error, log have not been saved.
发生错误,因此日志尚未保存。
Log have been saved as %1
日志已保存于 %1
MHTabBar&Detach脱离(&D)&Close关闭(&C)MainWindowx64dbgx64dbg&File文件(&F)&Recent Files最近打开文件(&R)Database数据库&View视图(&V)&Debug调试(&D)Advanced高级&Help帮助(&H)&Plugins插件(&P)&Options选项(&O)&Theme主题(&T)Favour&ites收藏夹(&I)Traci&ng跟踪(&N)Trace &coverage代码覆盖(&C)Toolbar工具栏CommandBar命令栏&Open打开(&O)Run the file and start debugging.运行文件并开始调试。E&xit退出(&X)Exit x64dbg.退出 x64dbg。&Run运行(&R)Run the debuggee or restart debugging.运行被调试程序或重新调试。&Pause暂停(&P)Pause the execution of debuggee to debug it, or stop animate into/animate over.暂停运行被调试程序以进行调试,或停止自动步进。Re&start重新运行(&S)Stop the debuggee and restart it, or restart the last debugged file.停止调试并重新启动调试,或重新启动上次的被调试程序。&Close结束(&C)Terminate the debuggee and stop debugging.终止被调试进程,停止调试。Step &into步进(&I)Execute a single instruction执行一条指令Step &over步过(&O)Execute a single instruction without entering the CALL instruction执行一条指令但不跟进 CALL 指令Co&mmand命令(&M)Focus on the command bar激活命令栏E&xecute till return运行到返回(&X)Trace over until the RET instruction would be executed and stack pointer is less than or equal to current value.步过到 RET 指令将被执行,堆栈指针小于或等于当前值。&Memory Map内存布局(&M)Show the Memory Map tab.显示内存布局选项卡。&Log Window日志窗口(&L)Show the Log tab.显示日志标签页。&About关于(&A)Display information about x64dbg显示 x64dbg 相关信息ScyllaScylla&Breakpoints断点(&B)Show the Breakpoints tab.显示断点标签页。Step into (pass all exceptions)步进(无视所有异常)Execute a single instruction, pass exceptions to the debuggee.执行单个指令,跳过所有传给被调试进程的异常。Step over (pass all exceptions)步过(无视所有异常)Run (pass all exceptions)运行(无视所有异常)Run the debuggee and pass all exceptions to the debuggee without pausing.运行被调试进程并跳过所有传给被调试进程的异常而不暂停。Execute till return (pass all exceptions)运行到返回(无视所有异常)&Script脚本(&S)Script脚本Show the Script tab.显示脚本标签页。Run &until selection运行到选区(&U)Run until selection运行到选区Put a breakpoint on selection and run the debuggee.放置断点到光标后运行被调试程序。&CPU&CPUCPUCPUShow the CPU tab to display the disassembly.显示 CPU 标签以显示反汇编。Symbol &Info符号信息(&I)Symbol Info符号信息Show the Symbols tab.显示符号标签页。&References引用(&R)References引用Show the References tab.显示引用标签页。&Threads线程(&T)Threads线程Show the Threads tab.显示线程标签页。&Preferences选项(&P)Preferences选项Opem the Preferences dialog.打开选项对话框。&Find Strings搜索字符串(&S)Find Strings搜索字符串Find possible strings in the current module. Equivalent command "strref"在当前模块内查找可能的字符串,等价于命令“strref”&Appearance外观(&A)Open the Appearance dialog to adjust color and font settings.打开外观对话框以调整颜色和字体设置。Find Intermodular Calls搜索跨模块调用Find intermodular calls in the current module. Equivalent command "modcallfind"在当前模块中查找跨模块调用,等价于命令“modcallfind”Patch file...补丁...Patches补丁Open the patch dialog.打开补丁对话框。Comments注释Show a list of comments. Equivalent command "commentlist"显示注释列表。等于命令“commentlist”。Labels标签Show a list of labels. Equivalent command "labellist"显示标签列表。等于命令“labellist”。Bookmarks书签Show a list of bookmarks. Equivalent command "bookmarklist"显示书签列表。等于命令“bookmarklist”。Functions函数Show a list of functions. Equivalent command "functionlist"显示函数列表。等于命令“functionlist”。Check for &Updates检查更新(&U)Connect to Github to check for updates连接到 Github 以检查更新Call Stack调用堆栈Show the Call Stack tab.显示调用堆栈标签页。Hotkeys快捷键Open the Hotkeys dialog to customize keyboard hotkeys.打开快捷键对话框以自定义键盘快捷键。&Donate捐赠(&D)Donate捐赠Open https://donate.x64dbg.com打开 https://donate.x64dbg.comCalculator计算器Open the Calculator dialog.打开计算器对话框。Attach附加Attach the debugger to a process to debug it.将调试器附加到进程来开始调试。Detach脱离Detach from the debuggee so that it continues running without being debugged.脱离被调试程序,让它不被调试继续运行。Change Command &Line改变命令行(&L)Set the command line of the debuggee.设置被调试程序的命令行。Skip next instruction跳过下一指令Topmost窗口置顶Topmost Window窗口置顶Make x64dbg topmost将x64dbg置顶&Report Bug报告Bug(&B)Report Bug报告BugOpen https://report.x64dbg.com打开 https://report.x64dbg.com&Source源代码(&S)Source源代码Show the Source tab.显示源代码标签页。&Manual用户手册(&M)Open the CHM manual or online documentation at https://help.x64dbg.com打开 CHM 手册或 https://help.x64dbg.com 上的在线手册&FAQ&FAQFAQFAQOpen https://faq.x64dbg.com打开 https://faq.x64dbg.comSEH ChainSEH链Hide debugger (PEB)隐藏调试器 (PEB)Modifies the PEB to hide debugger.修改 PEB 以隐藏调试器。Reload style.css重新载入 style.cssRead style.css from disk to apply theme changes.从磁盘读取style.css来应用主题更改。Notes笔记Show the Notes tab.显示笔记标签页。Handles句柄Show the Handles tab.显示句柄标签页。Trace over...步过直到条件满足...Step over until a condition becomes true, and optionally log and execute commands when tracing. Equivalent command "tocnd"步过直到一个条件变为真,并且在追踪时可以记录和执行命令。等于命令“tocnd”。Trace into...步进直到条件满足...Step into until a condition becomes true, and optionally log and execute commands when tracing. Equivalent command "ticnd"步进直到一个条件变为真,并且在追踪时可以记录和执行命令。等于命令“ticnd”。Bit位Enable trace coverage with 1 bit (whether an instruction was executed or not)启用1比特代码覆盖(指令是否被执行)Byte1字节Enable trace coverage with 1 byte to record how many times an instruction has been executed.启用1字节代码覆盖记录指令执行次数Word2字节Enable trace coverage with 1 word to record how many times an instruction has been executed.启用2字节代码覆盖记录指令执行次数Step into until reaching uncovered code步进至未覆盖的代码Step into until reaching an instruction that was not covered before. Equivalent command "tibt"步进并追踪直到当前指令未曾被执行过,等价于命令“tibt”Step over until reaching uncovered code步过至未覆盖的代码Step over until reaching an instruction that was not covered before. Equivalent command "tobt"步过并追踪直到当前指令未曾被执行过,等价于命令“tobt”Step into until reaching covered code步进至已覆盖的代码Step into until reaching an instruction that has been covered before. Equivalent command "tiit"步进并追踪直到当前指令已经被执行过,等价于命令“tiit”Step over until reaching covered code步过至已覆盖的代码Step over until reaching an instruction that has been covered before. Equivalent command "toit"步过并追踪直到当前指令已经被执行过,等价于命令“toit”Disable禁用Disable trace coverage禁用代码覆盖Run to &user code运行到用户代码(&U)Trace over until user code would be executed.步过并追踪直到用户代码将被执行。Run until e&xpression运行到表达式(&X)Undo last instruction撤销上个指令Generate crash dump生成故障转储&Manage Favourite Tools...管理收藏工具(&M)...Step over (source)步过 (源代码)Execute a single line of source code without entering the subroutine. Equivalent to "TraceOverConditional src.line(cip) && !src.disp(cip)"执行源代码内的单行而不进入子程序内,等价于“TraceOverConditional src.line(cip) && !src.disp(cip)”Step into (source)步进 (源代码)Execute a single source code line. Equivalent to "TraceIntoConditional src.line(cip) && !src.disp(cip)"执行单行源代码,等价于“TraceIntoConditional src.line(cip) && !src.disp(cip)”&Graph流程图(&G)Show the CPU tab and switch to Graph mode.显示 CPU 菜单栏并切换至图形模式。Step into (swallow exception)步进(无视异常)Step over (swallow exception)步过(无视异常)Run (swallow exception)运行(无视异常)Run the debuggee and ignore all exceptions so the debuggee will not process the exception.执行被调试进程并忽略所有异常,使得被调试进程不处理异常。Blog博客Open https://blog.x64dbg.com打开 https://blog.x64dbg.comAnimate into自动步进Execute the step into command at a fixed pace以固定速度运行步进命令Animate over自动步过Execute the step over command at a fixed pace以固定速度运行步过命令Animate command...自动运行命令...Execute a command at a fixed pace以固定速度运行命令System breakpoint scripts系统断点脚本Set the script file to run automatically when the system breakpoint is reached.设置当运行到系统断点时自动运行的脚本文件。Import settings...导入设置...Import settings from an external file从外部文件导入设置Customize menus自定义菜单Open the Customize Menus dialog to hide infrequently used menu items into the "more commands" submenu.打开自定义菜单对话框,将不经常使用的菜单项隐藏到“更多命令”子菜单中。&Import database导入数据库(&I)Open an external database file to import data.打开外部数据库文件导入数据。&Export database导出数据库(&E)Previous Tab上一页Show the tab on the left.显示左侧的标签页。Next Tab下一页Show the tab on the right.显示右侧的标签页。Previous View上一个视图Show the tab history popup window and select more recently used tab.显示标签页历史窗口并选择最近使用的标签页。Next View下一个视图Show the tab history popup window and select previously viewed tab.显示标签历史窗口并选择更旧的标签页。Hide Tab隐藏页面Hide the current tab. The hidden tab can be reopened from the View menu.隐藏当前标签页。可以从视图菜单重新打开被隐藏的标签页。&Variables变量(&V)Show a list of x64dbg variables. Equivalent command "varlist"显示x64dbg变量列表。等效命令“varlist”Restart as Admin以管理员身份重新启动Restart x64dbg under Administrator privilege.以管理员权限重启 x64dbg。Plugins插件Open https://plugins.x64dbg.com打开 https://plugins.x64dbg.comTrace跟踪Show the Trace tab.显示跟踪标签页。Modules模块Show the Symbols tab. Note that the Modules list is in the symbols tab.显示符号标签页。注意模块列表在符号标签页内。&Default默认(&D)&Save database保存数据库(&S)Save all data. The database will be automatically saved when debugging is stopped.保存所有数据。当调试停止时,数据库将自动保存。Re&load database重新载入数据库(&L)Discard all modifications and read all data from disk.放弃所有修改并从磁盘读取所有数据。&Restore backup database还原备份数据库(&R)Read data from the backup database to recover from database corruption.从备份数据库读取数据以恢复数据库损坏。&Clear database清空数据库(&C)Clear all data.清除全部数据。About Qt关于 QtDisplay information about Qt显示 Qt 相关信息Mnemonic Help指令帮助Output the detailed help information about an assembly mnemonic to the log. Equivalent command "mnemonichelp name".输出有关汇编指令的详细的帮助信息到日志。等价于命令“mnemonichelp 名称”。%1 (%2)%1 (%2)%1 [Elevated]%1 [管理员]Log日志Symbols符号Breakpoints断点Memory Map内存布局SEHSEH链Favourite Toolbox收藏工具箱Command: 命令: Ready就绪Languages语言DarkAlways stop the debuggee and exit总是停止被调试程序并退出The debuggee is still running and will be terminated if you exit. What do you want to do?被调试程序还在运行,如果退出,被调试程序也将终止。你想要做什么?Debuggee is still running调试对象仍在运行&Exit退出(&E)Stop the debuggee and exit x64dbg.停止被调试程序,并退出 x64dbg。&Detach and exit脱离并退出(&D)Detach from the debuggee (leaving it running) and exit x64dbg.脱离调试器(被调试程序继续运行)并退出 x64dbg。&Restart debugging重新调试(&R)Restart the debuggee and keep x64dbg open.重新启动被调试程序,x64dbg仍然打开。&Continue debugging继续调试(&C)Close this dialog and continue where you left off.关闭此对话框,继续调试。Unsupported systemYou are running x64dbg in ARM64 emulation mode. <b>This system is not supported by x64dbg and will cause unexpected behavior.</b> Analyzing malware in this environment is dangerous and you should switch to an actual Intel/AMD CPU.<br><br>For more information, see the <a href="%1">FAQ</a>.You are running x64dbg on an unsupported operating system version. <b>Future updates will completely stop running on this system.</b><br><br>For more information, see the official <a href="%1">announcement</a>.Error错误Cannot start a trace when running, pause execution first.运行时无法启动跟踪,请先暂停。Open file打开文件Executables (*.exe *.dll);;All files (*.*)可执行文件 (*.exe *.dll);;所有文件 (*.*)Disassembly反汇编Dump内存窗口Stack堆栈Enter expression to run to...请输入要运行到的表达式...Error!错误!Patches can only be shown while debugging...只能在调试时显示补丁……All the money will go to x64dbg development.所有捐款都将用于赞助x64dbg的开发。You will visit x64dbg's official blog.您将打开 x64dbg 的官方博客。You will be taken to a website where you can report a bug.
Make sure to fill in as much information as possible.您将会进入报告Bug的网站。记得尽可能填写最多信息。This action will crash the debugger and generate a crash dump. You will LOSE ALL YOUR UNSAVED DATA. Do you really want to continue?此操作将使调试器崩溃并生成故障转储。你将失去你所有未保存的数据。你真的想要继续吗?Have fun debugging the debugger!祝您调试调试器愉快!Debugger detected!发现调试器!Mnemonic help指令帮助Change Command Line改变命令行Cannot get remote command line, use the 'getcmdline' command for more information.无法获得调试对象的命令行,请尝试调用“getcmdline”命令来获得更多信息。Could not set command line!无法设置命令行!New command line: 新的命令行︰ Manual cannot be opened. Please check if x64dbg.chm exists and ensure there is no other problems with your system.不能打开手册。请检查 x64dbg.chm 是否存在,并确保您的系统没有其他问题。Do you want to open online manual at https://help.x64dbg.com ?您想在 https://help.x64dbg.com 上打开在线手册吗?Open the Favourites dialog to manage the favourites menu打开收藏夹对话框来管理收藏夹菜单Starting tool %1
正在启动工具 %1
The translation is nearly empty. Do you still want to use this language?翻译几乎是空的。你仍然想要使用这种语言吗?New language setting will take effect upon restart.新的语言设置将在重新启动应用程序时生效。Animate command自动运行命令Example: StepInto例如: StepIntoCustomize Menus自定义菜单Settings (*.ini);;All files (*.*)配置文件 (*.ini);;所有文件 (*.*)Import database导入数据库Databases (%1);;Database backup (%1.bak);;All files (*.*)数据库(%1);数据库备份(%1.bak);所有文件 (*.*)Export database导出数据库Databases (%1);;All files (*.*)数据库 (%1);;所有文件 (*.*)More Commands更多命令MemoryMapViewAddress地址Size大小Party方Info页面信息Page Information页面信息Content内容Content of section节的内容Type类型Allocation Type分配类型Protection页面保护Current Protection当前保护Initial初始保护Allocation Protection初始保护&Follow in Dump在内存窗口中转到(&F)Follow in &Disassembler在反汇编中转到(&D)&Follow in Symbols在符号中转到(&F)Set Page Memory Rights设置内存保护权限Memory &Breakpoint内存断点(&B)Access访问&Singleshoot一次性(&S)&Restore重复设置(&R)Read读取Write写入Execute执行&Remove删除(&R)&Allocate memory分配内存(&A)&Free memory释放内存(&F)Go to转到Expression表达式&Find Pattern...搜索匹配特征(&F)...&Dump Memory to File将内存转存到文件(&D)&Overwrite with Data from File用文件中的数据覆盖(&O)Add virtual module添加虚拟模块Find references to region搜索区域引用&Comment注释(&C)&Copy复制(&C)Section &viewRegion &viewUser用户模块System系统模块Uninitialized data未初始化的数据Initialized data已初始化的数据Export tables导出表Import tables导入表Exception information异常信息Read-only initialized data只读的已初始化数据Base relocations基重定位数据Resources资源Executable code可执行代码Thread-local storage线程本地存储Warning警告You're trying to allocate a zero-sized buffer just now.您刚刚想要分配一个大小为零的缓冲区。Error错误The size of buffer you're trying to allocate exceeds 1GB. Please check your expression to ensure nothing is wrong.您想要分配的缓冲区大小已经超过了1GB。请检查您的表达式,确认输入无误。Memory allocation failed!内存分配失败!Find Pattern...搜索匹配特征...Dumping non-consecutive memory ranges is not supported!不支持保存不连续的内存区域!Save Memory Region保存内存区域Binary files (*.bin);;All files (*.*)二进制文件 (*.bin);;所有文件 (*.*)Load Memory Region加载内存区域Address %0 not found in memory map...内存映射中找不到地址 %0...Enter the address to find...请输入要查找的地址...Add comment at 添加注释到 Error!错误!DbgSetCommentAt failed!DbgSetCommentAt 失败!MenuBuilderMore commands更多命令MessagesBreakpointsMessage Breakpoint消息断点Messages:消息:Break on any window在所有窗口都中止Break on current window only
(Invalid for next session)只在当前窗口中止(下次调试无效)Use TranslateMessage使用 TranslateMessageOK确定Cancel取消ModuleStdTableUnloaded已卸载Loading加载中Loaded已载入NotesManagerGlobal全局Debuggee被调试对象PageMemoryRightsSet Page Memory Rights设置内存保护权限Select ALL全选Deselect ALL取消全选Rights权限NO ACCESSNO ACCESSREAD ONLYREAD ONLYREAD WRITEREAD WRITEEXECUTEEXECUTEEXECUTE READEXECUTE READFULL ACCESSFULL ACCESSWRITE COPYWRITE COPYEXECUTE WRITE COPYEXECUTE WRITE COPYSet Rights设置权限PAGE GUARDPAGE GUARDPress CTRL or SHIFT key to select multiple pages请按CTRL或SHIFT键以选择多个页面&Cancel取消(&C)Address地址Pages Rights Changed to: 页面权限已改为: Error setting rights, read the MSDN to learn the valid rights of: 设置页面权限时发生错误,请您浏览MSDN来了解有效的页面权限: PatchDialogPatches补丁&Modules模块(&M)&Import导入(&I)&Export导出(&E)P&atches补丁(&A)&Select All全选(&S)&Deselect All取消全选(&D)&Restore Selected恢复选择项(&R)Pick &Groups选择组(&G)&Patch File修补文件(&P)Byte is located in relocation region字节在重定向区域里Information温馨提示Nothing to patch!没有补丁!Error!发生错误!Failed to get module filename...获取模块文件名时发生错误……Save file保存文件All files (*.*)所有文件 (*.*)Failed to save patched file (%1)保存修补文件时失败 (%1)%1/%2 patch(es) applied!%1/%2 个补丁已经应用!Open patch打开补丁Patch files (*.1337)补丁文件 (*.1337)The patch file is empty...补丁文件为空……Patch file format is incorrect...补丁文件格式无效……No patches to apply in the current process.当前进程中没有需要应用的补丁。Question温馨提示Some patches are already applied.
Do you want to remove these patches?部分补丁早已应用。
您确实想要恢复这些补丁吗?Some bytes do not match the original in the patch file.
Do you want to apply these patches anyway?部分补丁的源字节与当前要修补的文件不一致。
您现在还想应用这些补丁吗?Save patch保存补丁No patches to export.没有需要导出的补丁。%1 patch(es) exported!成功导出了 %1 个补丁!Patches overlap with relocation regions补丁和重定向区域重叠Your patches overlap with relocation regions. This can cause your code to become corrupted when you load the patched executable. Do you want to continue?你的补丁有部分位于重定向区域里,这可能导致你的修复后的代码在载入时被破坏。你还想继续吗?PatchDialogGroupSelectorGroup Selector组选择00000000000000000000000000000000&Toggle切换(&T)&Previous上一个(&P)&Next下一个(&N)QObjectDbgInit Error!DbgInit 错误!ReferenceManagerClose All Tabs关闭全部页面ReferenceView&Follow in Disassembler在反汇编中转到(&F)Follow in &Dump在内存窗口中转到(&D)Follow &API Address转到API地址(&A)Toggle Breakpoint切换断点Toggle Bookmark切换书签Set breakpoint on all commands在所有命令上设置断点Remove breakpoint on all commands删除所有命令上的断点Set breakpoint on all api calls在所有API调用上设置断点Remove breakpoint on all api calls删除所有API调用上的断点Total Progress %1%总进度: %1%Set breakpoint on all calls to %1在所有对%1的调用上设置断点Remove breakpoint on all calls to %1删除所有对%1的调用上的断点Error!发生错误!DbgSetBookmarkAt failed!DbgSetBookmarkAt 失败!RegistersViewAVX-512 isn't supported on this computer.
Copy value复制值Copy floating point value复制浮点数Copy Symbol Value复制符号Copy all registers复制所有寄存器Change view切换视图Change SIMD Register Display Mode更改 SIMD 寄存器显示模式Display ST(x)显示 ST(x)Display x87rX显示 x87rXDisplay MMX显示 MMXHexadecimal十六进制Float单精度浮点数Double双精度浮点数Signed Word有符号WordSigned Dword有符号DwordSigned Qword有符号QwordUnsigned Word无符号WordUnsigned Dword无符号DwordUnsigned Qword无符号QwordHexadecimal Word十六进制WordHexadecimal Dword十六进制DwordHexadecimal Qword十六进制QwordAlways show maximum vector lengthAlways show all AVX-512 registersCF (Carry flag)CF (进位标志)PF (Parity flag)PF (奇偶标志)AF (Auxiliary Carry flag)AF (辅助进位标志)ZF (Zero flag)ZF (零标志)SF (Sign flag)SF (符号标志)TF (Trap flag)TF (陷阱标志)IF (Interrupt enable flag)IF (中断启用标志)DF (Direction flag)DF (方向标志)OF (Overflow flag)OF (溢出标志)Bit #位 #Mask掩码Flag标志位<table cellspacing='7'> <thead>%1</thead> <tbody>%2</tbody></table><table cellspacing='7'> <thead>%1</thead> <tbody>%2</tbody></table>CF (bit 0) : Carry flag - Set if an arithmetic operation generates a carry or a borrow out of the most-significant bit of the result; cleared otherwise.
This flag indicates an overflow condition for unsigned-integer arithmetic. It is also used in multiple-precision arithmetic.CF (第0位) : 进位标志 - 当算数运算在最高位产生了进位或借位时设置,否则清除。
该标志也表示无符号整数运算发生了溢出。该标志也用于高精度算术。PF (bit 2) : Parity flag - Set if the least-significant byte of the result contains an even number of 1 bits; cleared otherwise.PF (第2位) : 奇偶标志位 - 当结果的最低字节中1的个数为偶数时设置,否则清除。AF (bit 4) : Auxiliary Carry flag - Set if an arithmetic operation generates a carry or a borrow out of bit
3 of the result; cleared otherwise. This flag is used in binary-coded decimal (BCD) arithmetic.AF (第4位) : 辅助进位标志位 - 当算术运算在第3位产生了进位或者借位时设置,否则清除。
该标志位主要用于二进制编码的十进制(BCD码)算术。ZF (bit 6) : Zero flag - Set if the result is zero; cleared otherwise.ZF (第6位) : 零标志位 - 当结果是零时设置,否则清除。SF (bit 7) : Sign flag - Set equal to the most-significant bit of the result, which is the sign bit of a signed
integer. (0 indicates a positive value and 1 indicates a negative value.)SF (第7位) : 符号标志位 - 设置成结果的最高位,也就是带符号数中的符号位。(0表示正数,1表示负数)OF (bit 11) : Overflow flag - Set if the integer result is too large a positive number or too small a negative
number (excluding the sign-bit) to fit in the destination operand; cleared otherwise. This flag indicates an overflow
condition for signed-integer (two’s complement) arithmetic.OF (第11位) : 溢出标志位 - 当结果大于可表示的最大正数或小于可表示的最小负数(不含符号位)时设置,否则清除。
该标志位表示了有符号数算术(补码算术)发生了溢出情况。DF (bit 10) : The direction flag controls string instructions (MOVS, CMPS, SCAS, LODS, and STOS). Setting the DF flag causes the string instructions
to auto-decrement (to process strings from high addresses to low addresses). Clearing the DF flag causes the string instructions to auto-increment
(process strings from low addresses to high addresses).DF (第10位) : 方向标志位控制了串操作指令 (MOVS, CMPS, SCAS, LODS 与 STOS)。设置DF标志位将使得串操作指令地址自动递减(从高地址向低地址处理串)。
清除DF标志位将使得串操作指令自动递增(从低地址向高地址处理串)。TF (bit 8) : Trap flag - Set to enable single-step mode for debugging; clear to disable single-step mode.TF (第8位) : 跟踪标志位 - 设置可启用单步运行模式来调试程序,清除则禁用单步运行模式。IF (bit 9) : Interrupt enable flag - Controls the response of the processor to maskable interrupt requests. Set to respond to maskable interrupts; cleared to inhibit maskable interrupts.IF (第9位) : 中断允许标志 - 控制处理器对于可屏蔽中断的处理。
置位可使处理器响应可屏蔽中断;清除则禁止响应可屏蔽中断。The 16-bit x87 FPU control word controls the precision of the x87 FPU and rounding method used. It also contains the x87 FPU floating-point exception mask bits.16位的x87控制字控制了x87 FPU的精度以及采用的舍入方法。它还包括了x87 FPU浮点运算异常掩码位。The 16-bit x87 FPU status register indicates the current state of the x87 FPU.16位的x87 FPU状态寄存器表明了x87 FPU的当前状态。The 16-bit tag word indicates the contents of each the 8 registers in the x87 FPU data-register stack (one 2-bit tag per register).16位的标志字表明了8个x87浮点寄存器各自的内容。(每个浮点寄存器占两位)The precision-control (PC) field (bits 8 and 9 of the x87 FPU control word) determines the precision (64, 53, or 24 bits) of floating-point calculations made by the x87 FPU精度控制(PC)位(x87 FPU控制字的第8和9位)决定了x87 FPU浮点数计算采用的精度(64, 53 或 24位)。The rounding-control (RC) field of the x87 FPU control register (bits 10 and 11) controls how the results of x87 FPU floating-point instructions are rounded.x87 FPU控制字的舍入控制(RC)位(第10和11位)控制了x87 FPU浮点运算的结果如何舍入。The infinity control flag (bit 12 of the x87 FPU control word) is provided for compatibility with the Intel 287 Math Coprocessor;
it is not meaningful for later version x87 FPU coprocessors or IA-32 processors.无穷控制标志 (FPU控制字的第12位) 是为了兼容英特尔 287 数学协处理器而提供的;它在后来版本的x87 FPU协处理器和IA-32处理器中没有意义。The invalid operation exception mask (bit 0). When the mask bit is set, its corresponding exception is blocked from being generated.无效操作异常掩码(第0位)。当这个掩码位设置,它对应的异常就被屏蔽而不会发生。The denormal-operand exception mask (bit 2). When the mask bit is set, its corresponding exception is blocked from being generated.操作数不正常掩码(第2位)。当这个掩码位设置,它对应的异常就不会发生。The floating-point divide-by-zero exception mask (bit 3). When the mask bit is set, its corresponding exception is blocked from being generated.浮点数被零除异常掩码(第3位)。当这个掩码位设置,它对应的异常就不会发生。The floating-point numeric overflow exception mask (bit 4). When the mask bit is set, its corresponding exception is blocked from being generated.浮点数溢出掩码(第4位)。当这个掩码位设置,它对应的异常就不会发生。The potential floating-point numeric underflow condition mask (bit 5). When the mask bit is set, its corresponding exception is blocked from being generated.浮点数可能发生下溢掩码(第5位)。当这个掩码位设置,它对应的异常就不会发生。The inexact-result/precision exception mask (bit 6). When the mask bit is set, its corresponding exception is blocked from being generated.结果不精确掩码(第6位)。当这个掩码位设置,它对应的异常就不会发生。The busy flag (bit 15) indicates if the FPU is busy (B=1) while executing an instruction, or is idle (B=0).
The B-bit (bit 15) is included for 8087 compatibility only. It reflects the contents of the ES flag.忙碌标志(第15位) 表明了FPU当前正在运行指令(B=1) 还是空闲(B=0)。B标志(第15位) 仅仅是为了兼容8087而保留的。它反映了ES标志的内容。The C%1 condition code flag (bit %2) is used to indicate the results of floating-point comparison and arithmetic operations.C%1状态码标志 (第%2位) 用来指示浮点数比较或运算的结果。The error/exception summary status flag (bit 7) is set when any of the unmasked exception flags are set.错误/异常汇总状态位(第7位)应在任何未屏蔽的异常位被设置时设置。The stack fault flag (bit 6 of the x87 FPU status word) indicates that stack overflow or stack underflow has occurred with data
in the x87 FPU data register stack.堆栈错误标志(x87 FPU状态字的第6位)表明x87 FPU浮点寄存器栈发生了溢出。A pointer to the x87 FPU data register that is currently at the top of the x87 FPU register stack is contained in bits 11 through 13
of the x87 FPU status word. This pointer, which is commonly referred to as TOP (for top-of-stack), is a binary value from 0 to 7.这个指针指向当前x87浮点处理器寄存器栈的栈顶,被保存于x87浮点处理器状态字的第11位至第13位。这个被称为TOP(top-of-stack)的指针是一个0到7的二进制数。The processor reports an invalid operation exception (bit 0) in response to one or more invalid arithmetic operands.处理器会在存在一个或多个无效的算术操作数时报告无效操作异常(第0位)。The processor reports the denormal-operand exception (bit 2) if an arithmetic instruction attempts to operate on a denormal operand.处理器会在运算一个不正常的算术操作数时报告操作数不正常异常(第2位)。The processor reports the floating-point divide-by-zero exception (bit 3) whenever an instruction attempts to divide a finite non-zero operand by 0.处理器会在把有限且非零的数除以零时报告浮点数被零除异常(第3位)。The processor reports a floating-point numeric overflow exception (bit 4) whenever the rounded result of an instruction exceeds the largest allowable finite value that will fit into the destination operand.处理器会在舍入结果超出目标寄存器的最大表示范围时报告浮点数溢出异常(第4位)。The processor detects a potential floating-point numeric underflow condition (bit 5) whenever the result of rounding with unbounded exponent is non-zero and tiny.处理器会在舍入结果中指数位非零但很小时报告可能存在浮点数下溢异常(第5位)。The inexact-result/precision exception (bit 6) occurs if the result of an operation is not exactly representable in the destination format.结果不准确异常(第6位)会在结果无法在目标格式中被准确表示时发生。The 32-bit MXCSR register contains control and status information for SIMD floating-point operations.32位的MXCSR寄存器保存了SIMD浮点运算的控制位与状态信息Bit 0 (IE) : Invalid Operation Flag; indicate whether a SIMD floating-point exception has been detected.第0位 (IE) : 无效操作标志;表示一个SIMD浮点异常是否曾发生过。Bit 1 (DE) : Denormal Flag; indicate whether a SIMD floating-point exception has been detected.第1位 (DE) : 不正常标志;表示一个SIMD浮点异常是否曾发生过。Bit 2 (ZE) : Divide-by-Zero Flag; indicate whether a SIMD floating-point exception has been detected.第2位 (ZE) : 被零除标志;表示一个SIMD浮点异常是否曾发生过。Bit 3 (OE) : Overflow Flag; indicate whether a SIMD floating-point exception has been detected.第3位 (OE) : 溢出标志;表示一个SIMD浮点异常是否曾发生过。Bit 4 (UE) : Underflow Flag; indicate whether a SIMD floating-point exception has been detected.第4位 (UE):溢出标志;表示一个SIMD浮点异常是否曾发生过。Bit 5 (PE) : Precision Flag; indicate whether a SIMD floating-point exception has been detected.第5位 (PE):精度低标志;表示一个SIMD浮点异常是否曾发生过。Bit 7 (IM) : Invalid Operation Mask. When the mask bit is set, its corresponding exception is blocked from being generated.第7位 (IM) : 无效操作掩码。当这个掩码位设置,它对应的异常就不会触发。Bit 8 (DM) : Denormal Mask. When the mask bit is set, its corresponding exception is blocked from being generated.第8位 (DM) : 数值不正常掩码。当这个掩码位设置,它对应的异常就不会触发。Bit 9 (ZM) : Divide-by-Zero Mask. When the mask bit is set, its corresponding exception is blocked from being generated.第9位 (ZM) : 被零除掩码。当这个掩码位设置,它对应的异常就不会触发。Bit 10 (OM) : Overflow Mask. When the mask bit is set, its corresponding exception is blocked from being generated.第10位 (OM) : 堆栈上溢掩码。当这个掩码位设置,它对应的异常就不会触发。Bit 11 (UM) : Underflow Mask. When the mask bit is set, its corresponding exception is blocked from being generated.第11位 (UM) : 堆栈下溢掩码。当这个掩码位设置,它对应的异常就不会触发。Bit 12 (PM) : Precision Mask. When the mask bit is set, its corresponding exception is blocked from being generated.第12位 (PM) : 结果不精确掩码。当这个掩码位设置,它对应的异常就不会触发。Bit 15 (FZ) of the MXCSR register enables the flush-to-zero mode, which controls the masked response to a SIMD floating-point underflow condition.MXCSR寄存器的第15位 (FZ) 可启用“清除为零”模式,来控制对被屏蔽的SIMD浮点数计算下溢情况的处理。Bit 6 (DAZ) of the MXCSR register enables the denormals-are-zeros mode, which controls the processor’s response to a SIMD floating-point
denormal operand condition.第6位 (DAZ) MXCSR寄存器可以启用“非正常数为零”模式,来控制处理器对于
非正常数字作为操作数时SIMD浮点运算的处理。Bits 13 and 14 of the MXCSR register (the rounding control [RC] field) control how the results of SIMD floating-point instructions are rounded.舍入控制位域[RC]位于MXCSR寄存器的第13和14位,它控制了SIMD浮点运算的结果如何舍入。The value of GetLastError(). This value is stored in the TEB.GetLastError() 的值。该值保存于TEB。The NTSTATUS in the LastStatusValue field of the TEB.保存在TEB中LastStatusValue域的NTSTATUS值The TEB of the current thread can be accessed as an offset of segment register GS (x64).
The TEB can be used to get a lot of information on the process without calling Win32 API.当前线程的 TEB 可以以 GS (x64) 段寄存器的偏移地址访问。TEB 可以无需调用 Win32 API 就得到大量的有关进程的信息。The TEB of the current thread can be accessed as an offset of segment register FS (x86).
The TEB can be used to get a lot of information on the process without calling Win32 API.当前线程的 TEB 可以以 FS (x86) 段寄存器的偏移地址访问。TEB 可以无需调用 Win32 API 就得到大量的有关进程的信息。Hide FPU隐藏FPUShow FPU显示FPUUnknown未知RegistersView_ConstantsOfRegistersNonzero非零Zero零Special特殊Empty空Toward Zero向零Toward Positive向上Toward Negative向下Round Near向最近偶数Truncate截断Round Up向上舍入Round Down向下舍入Real4Real4Not Used未使用Real8Real8Real10Real10SEHChainViewAddress地址Handler异常处理例程Module/Label模块/标签Comment注释Follow &Address转到地址(&A)Follow Handler转到异常处理程序&Copy复制(&C)ScriptViewLine行Text内容Info信息Execute Script Command...运行脚本命令...&Open...打开(&O)...&Paste粘贴(&P)Load Script载入脚本Re&load Script重新载入脚本(&L)&Unload Script关闭脚本(&U)&Edit Script编辑脚本(&E)Toggle &BP切换断点(&B)Ru&n until selection运行到选区(&N)&Step单步(&S)&Run运行(&R)&Abort终止(&A)&Continue here...从此处继续运行(&C)...Copy复制E&xecute Command...运行命令(&X)...Error on line发生错误于行Script Error!脚本错误!Select script选择脚本Script files (*.txt *.scr);;All files (*.*)脚本文件 (*.txt *.scr);;所有文件 (*.*)Error!错误!File open failed! Please open the file yourself...文件打开失败!请自己打开文件...Error setting script breakpoint!设置脚本断点时发生错误!Error executing command!执行命令时出错!Message消息Question温馨提示SearchListViewType here to filter results...在此输入可过滤结果...Regex正则表达式Lock锁定Search: 搜索: Search...搜索...&Copy复制(&C)Use case sensitive regular expression使用区分大小写的正则表达式Use case insensitive regular expression使用不区分大小写的正则表达式SelectFieldsDialog对话框&OK确定(&O)&Cancel取消(&C)SettingsDialogPreferences选项Events事件User DLL Load用户DLL载入Thread Create新建线程Exit Breakpoint*退出断点*SetThreadName exceptionsSetThreadName异常System DLL Load系统DLL载入Thread Entry线程入口Debug Strings调试字符串Thread Exit线程结束System TLS Callbacks*系统TLS回调函数*System DLL Unload系统DLL卸载Break on:当以下事件发生时暂停:User DLL Unload用户DLL卸载User TLS Callbacks*用户TLS回调函数*System Breakpoint*系统断点*Entry Breakpoint*入口断点System DLL Entry系统DLL入口User DLL Entry用户DLL入口* Requires debuggee restart* 需要重启被调试程序Engine引擎Calculation Type计算表达式时数据类型&Signed有符号(&S)&Unsigned无符号(&U)Debug Engine*调试引擎*TitanEngineTitanEngineGleeBugGleeBugDefault Breakpoint Type默认断点类型INT3INT3Long INT3长INT3UD2UD2Undecorate Symbol Names解码符号名称Enable Debug &Privilege获取调试特权(&P)Enable Source Debugging允许源代码级调试Disable Database Compression禁用数据压缩Save Database in Program Directory将数据保存于应用程序目录Skip INT3 stepping步进时无视INT3异常No Script Timeout Warning没有脚本超时警告&Ignore inconsistent breakpoints忽略不一致的断点(&I)Log If the Thread Has Switched当线程已切换时在日志信息中记录Enable Verbose Exception Logging在日志窗口记录详细的异常信息Disable WOW64 Single Step Workaround禁用 WOW64 单步执行补丁Disable ASLR禁用 ASLRDefault maximum trace &count默认最多跟踪指令数(&C)Animation per-step interval (ms)自动单步间隔 (ms)<html><head/><body><p>The debugger sleeps for a certain time in order to keep the interval between animation steps constant as specified in this setting.</p><p>If you want to animate as fast as possible set this to 0.</p></body></html><html><head/><body><p>为保证动画各帧间隔遵循用户设定,调试器进程将休眠一段时间。</p><p>如果您希望动画速度尽可能快,请将帧间隔设为0。</p>* Requires debugger restart* 需要重启调试器Exceptions异常Exception Filters:异常过滤器:Ignore &Range忽略范围(&R)&Delete Range删除区间(&D)Ignore &Last忽略上次(&L)Ignore all first-chance exceptions, don't print log, pass them to the debuggee and only break on second-chance exceptions.忽略所有第一次机会异常,不要打印日志,将它们传递到被调试程序,并且只是在第二次机会异常时暂停。Ignore First-Chance忽略第一次机会Break On暂停于First chance第一次机会Second chance第二次机会Do not break不暂停Logging日志Log exception记录异常日志Exception handled by异常处理者Debugger调试器Debuggee被调试对象Disasm反汇编Argument Spaces在操作数间加空格Tab between mnemonic and arguments在助记符与操作数间使用制表符Hide pointer sizes隐藏指针大小Only show FS/GS segments仅显示 FS 或 GS 段寄存器Memory Spaces在内存寻址寄存器间加空格Uppercase大写Autocomments only on CIP仅在CIP处显示自动注释Don't highlight operands不突出显示操作数Hide module name for local memory addresses内存操作数中不显示当前模块名称Permanent highlighting mode一直启用高亮模式Disable branch disassembly preview不弹出跳转目标预览框0x prefix for values值前加 0x 前缀Don't show source lines in comments注释栏不显示源代码行号Assemble instruction on double-click双击指令时打开汇编窗口Maximum module name size模块名最长长度GUI图形界面Show FPU registers as little endian以小端字节序显示FPU寄存器Save GUI layout and column orders保存 GUI 布局与列顺序Don't show close dialog不显示关闭对话框Enable Load/Save Tab Order允许载入/保存页面顺序Show Watch Labels in Side Bar在侧栏显示监视项标签Do not call SetForegroundWindow不调用 SetForegroundWindowShow RVA addresses in graph view在流程图显示相对地址Graph zoom mode图形缩放模式Auto follow operand in stack自动在堆栈转到操作数Show exit confirmation dialog显示退出确认对话框Disable auto completion in goto dialog在“转到”对话框中禁用自动完成功能Hide seasonal icons不显示节庆图标Disabling this option will tell Windows that x64dbg is DPI unaware. This might result in blurry results in some configurations.禁用此选项x64dbg将告诉Windows不支持DPI。这可能会导致一些系统中显示模糊。Qt High DPI ScalingQt高分辨率缩放Full executable path in title标题栏显示应用程序完整路径Disable icons*禁用图标*Dump in trace view consumes significant memory. It is used by many features in trace view that need to search for access to memory. If disabled, it will not be loaded by default. The user can always load the dump manually. Dump in already opened trace tabs are not disabled until you close them.运行跟踪窗口中的内存窗口需要使用大量内存。它由运行跟踪窗口中的许多需要搜索内存访问的功能所使用。如果禁用这个选项,内存窗口不会默认加载。用户总是可以手动加载。在已经打开的运行跟踪窗口中的内存窗口不会被禁用,需要先关闭运行跟踪。Automatically load dump in trace view在跟踪视图中自动加载内存窗口Misc杂项Symbol Store:符号存储网址:Symbol Path:本地符号路径:Set x64dbg as Just In Time Debugger将这份x64dbg设为即时调试器JIT:即时调试器:<font color="red">DIE SCUM!</font><font color="red">DIR SCUM!</font>Search Engine URL搜索引擎的 URLUTF-16 Log Redirect*日志重定向采用UTF-16编码*Use local help file (x64dbg.chm)使用本地帮助文件 (x64dbg.chm)Query process cookie*查询进程 cookie *Query working set before reading memory读取内存之前查询工作集Transparent exception stepping*步进 (忽略错误, Exception类的)Save保存Cancel取消<font color="red"><b>Warning</b></font>: Run the debugger as Admin to enable JIT.<font color="red"> <b>警告</b></font>︰ 需要以管理员权限运行才能启用即时调试。Settings saved!设置已保存!ERROR NOT FOUND OLD JIT错误:没有找到旧的即时调试器NOT FOUND OLD JIT ENTRY STORED, USE SETJIT COMMAND没有找到以前保存的旧的即时调试器,请使用SETJIT命令设置Question提示Are you sure you want to add %.8X?您确定要添加 %.8X 吗?ShortcutsDialogHotkeys快捷键Action filter动作过滤器Hotkey快捷键Clear清除Save保存Cancel取消Action动作Settings saved!设置已保存!SimpleTraceDialogHint: History is available in every text field with the Up/Down arrows!提示:每个文本框都可以用↑键和↓键选取历史记录!Lo&g Condition:日志条件(&G):&Command Text:命令(&C):&Break Condition:暂停条件(&B):&Record trace运行跟踪(&R)Log &File...日志文件(&F)...&OK确定(&O)C&ancel取消(&A)C&ommand Condition:命令条件(&O):&Maximum trace count:最大单步次数(&M):&Log Text:日志文本(&L):Example: %1 (numbers are hex by default)Example: %1例如:%1Trace log file追踪日志文件It appears you have set the log file, but not the log text. <b>This will result in an empty log</b>. Do you really want to continue?您设置了日志文件却没有设置日志文本。<b>这将会使得日志文件为空。</b>您真的还要继续吗?Error错误Trace recording was requested, but not enabled.已经请求运行跟踪,但未启用。Failed to set log text/condition!设置日志文本或条件时失败!Failed to set command text/condition!设置命令或命令条件时失败!Failed to set log file!设置日志文件失败!Failed to start trace!启动跟踪失败!Enter the path to the log file.输入日志文件的路径。Log Files (*.txt *.log);;All Files (*.*)日志文件(*.txt *.log);;所有文件(*.*)Trace recording already started运行跟踪早已开始SourceViewAddress地址Line行Code代码Go to line转到行Line (decimal):行 (十进制数):Open source file打开源代码文件Show source file in directory在目录中显示源文件&Copy复制(&C)Error错误Failed to open file!打开文件失败!Failed to parse file!解析文件失败!SourceViewerManagerClose All Tabs关闭全部页面StructWidgetStruct结构体Field字段Offset偏移Address地址Size大小Value值&Follow address in Dump在内存窗口中转到地址(&F)Follow value in Dump在内存窗口中转到值Follow value in Disassembler在反汇编中转到值Change address更改地址Display type显示类型Load JSON载入 JSONParse header解析头文件Remove删除Clear清除&Refresh刷新(&R)&Copy复制(&C)Error错误No types loaded yet, parse a header first...没有加载结构体,请先解析头文件……Type to display显示的结构体Address to display %1 at %1 显示在地址JSON files (*.json);;All files (*.*)JSON文件 (*.json);;所有文件 (*.*)Header files (*.h *.hpp);;All files (*.*)头文件 (*.h *.hpp);;所有文件 (*.*)SymbolViewForm窗体Base基址Module模块Party方Path路径Status状态&Follow in Disassembler在反汇编中转到(&F)Follow in &Dump在内存窗口中转到(&D)Follow &imported address转到导入的地址(&I)Toggle Breakpoint切换断点Toggle Bookmark切换书签Help on Symbolic Name符号名称帮助Follow &Entry Point in Disassembler在反汇编窗口中转到入口点(&E)Follow in Memory Map在内存布局中转到&Download Symbols for This Module下载此模块的符号信息(&D)Download Symbols for &All Modules下载所有模块的符号信息(&A)Copy File &Path复制文件路径(&P)Browse in Explorer在资源管理器中浏览Load library...注入模块...Free library卸载模块Mark as &user module标记为用户模块(&U)Mark as &system module标记为系统模块(&S)Mark as &party...标记为第三方(&P)...User用户模块System系统模块Party: %1第三方: %1Import导入&Copy复制(&C)Select DLL选择 DLLEnter the path of a DLL to load in the debuggee.输入要在调试对象中加载的 DLL 的路径。DLL Files (*.dll);;All Files (*.*)DLL 文件 (*.dll);;所有文件 (*.*)Are you sure you want to free the module: %1?
This could introduce unexpected behaviour to your debugging session...您真的要卸载模块:%1?
这可能给调试过程带来意外后果……Free Library卸载模块Error!发生错误!DbgSetBookmarkAt failed!DbgSetBookmarkAt 失败!Mark the party of the module as标记该模块所属方的代号为0 is user module, 1 is system module.0 是用户模块,1 是系统模块。Error错误The party number can only be 0 or 1第三方代号只能是0或1SystemBreakpointScriptDialogSystem breakpoint scripts系统断点脚本1. System breakpoint script for every process1. 所有进程的系统断点脚本Path:路径:Browse浏览Open打开2. System breakpoint script for a specific process (debug a process to specify)2. 特定进程的系统断点脚本(请调试该进程才能设置)2. System breakpoint script for %12. %1的系统断点脚本Create创建Script files (*.txt *.scr);;All files (*.*)脚本文件 (*.txt *.scr);;所有文件 (*.*)File not found找不到文件Would you like to create a new script?您想要创建一个新脚本吗?Error!错误!File open failed! Please open the file yourself...文件打开失败!请自己打开文件...ThreadViewSwitch Thread转到线程Suspend Thread挂起线程Resume Thread恢复线程Suspend All Threads挂起所有线程Resume All Threads恢复所有线程Kill Thread结束线程Set Name设置名称Idle空闲Above Normal高于标准Below Normal低于标准Highest高Lowest低Normal标准Time Critical实时AboveNormal高于标准TimeCritical实时BelowNormal低于标准Set Priority设置优先级Go to Thread Entry转到线程入口&Copy复制(&C)Number序号IDIDEntry入口TEBTEBEIPEIPRIPRIPSuspend Count挂起计数Priority优先级Wait Reason等待原因Last Error上次错误User Time用户时间Kernel Time内核时间Creation Time创建时间CPU CyclesCPU 周期Name名称Main主线程Unknown未知Thread name - %1线程名 - %1TimeWastedCounter%1 events/s%1 事件/秒Time Wasted Debugging:已调试时间:TraceBrowserIndex索引Address地址Bytes字节Disassembly反汇编Registers寄存器Memory内存断点Comments注释Start trace recording启动运行跟踪Trace recording file运行跟踪文件Trace recordings (*%1);;All files (*.*)运行跟踪文件 (*%1);;所有文件 (*.*)Error错误File name contains invalid character.文件名包含无效字符。An error occurred when reading trace file (reason: %1).
读取运行跟踪文件发生了错误(原因:%1)。
&Selection选区(&S)Selection to &File选区,到文件(&F)Selection (&No Bytes)选区,不含字节(&N)Selection to File (No Bytes)选区,到文件(不含字节)&Export Table导出表(&E)&RVA&RVA&File Offset文件偏移(&F)&Copy复制(&C)&Follow in Dump在内存窗口中转到(&F)&Highlighting mode高亮模式(&H)Help on mnemonic指令帮助Show mnemonic brief显示指令提示Hide mnemonic brief隐藏指令提示Expression表达式Function return函数返回Previous上一个Next下一个Go to转到xrefs...相互引用...Address/Constant地址/常量Memory Reference内存引用&Search搜索(&S)Information信息Sync with CPU与 CPU 同步Start recording启动运行跟踪Stop recording停止运行跟踪Close recording关闭运行跟踪Close the trace file tab, and stop recording trace.关闭运行跟踪文件标签,停止录制运行跟踪。Delete recording关闭并删除运行跟踪文件Delete the trace file from disk, and stop recording trace.删除运行跟踪文件,停止录制运行跟踪。Browse in Explorer在资源管理器中浏览Open the trace file in Explorer.在资源管理器中打开运行跟踪文件。Open trace recording打开运行跟踪Trace recording运行跟踪Trace recordings (*.%1);;All files (*.*)运行跟踪文件 (*.%1);;所有文件 (*.*)Are you sure you want to delete this recording?您确定要删除这个运行跟踪文件吗?Address not found in trace在运行跟踪中找不到该地址The address %1 is not found in trace.在运行跟踪中找不到地址%1Do you want to follow in CPU instead?您想要在CPU视图中转到该地址吗?Open File打开文件Text Files (*.txt)文本文件 (*.txt)Could not open file无法打开文件Error!错误!Selection not in a module...选区不在一个模块中……Selection not in a file...选区不在一个文件中……Constant常数%1 result(s) in %2ms
%1 结果, 用时 %2毫秒
References引用TraceDump&Copy复制(&C)Save To a File保存到文件B&inary二进制编辑(&I)&File Offset文件偏移(&F)&Find Pattern...搜索匹配特征(&F)...&Expression表达式(&E)Previous上一个Next下一个&Go to转到(&G)xrefs...相互引用...&ASCII&ASCII&Extended ASCII扩展ASCII(&E)&Codepage...代码页(&C)...&Hex十六进制(&H)&Text文本(&T)Signed byte (8-bit)有符号字节(8位)Signed short (16-bit)有符号Short(16位)Signed long (32-bit)有符号Long(32位)Signed long long (64-bit)有符号Long long(64位)Unsigned byte (8-bit)无符号字节(8位)Unsigned short (16-bit)无符号Short(16位)Unsigned long (32-bit)无符号Long(32位)Unsigned long long (64-bit)无符号Long long(64位)Hex short (16-bit)十六进制Short(16位)Hex long (32-bit)十六进制Long(32位)Hex long long (64-bit)十六进制Long long(64位)&Integer整数(&I)&Float (32-bit)Float (32位)&Double (64-bit)Double (64位)&Long double (80-bit)Long double (80位)&Half float (16-bit)&Float浮点数(&F)&Address地址(&A)&Disassembly反汇编(&D)Enter expression to follow in Dump...输入将在内存窗口中转到的表达式...Hex十六进制ASCIIASCIIUNICODEUNICODEFloat (32-bit)Float (32位)Double (64-bit)Double (64位)Long double (80-bit)Long double (80位)Half float (16-bit)Value值Comments注释Save to file保存到文件All files (*.*)所有文件 (*.*)Find Pattern...搜索匹配特征...Error!错误!Selection not in a file...选区不在一个文件中……Dump内存窗口TraceFileSearchConstant: %1常数: %1Range: %1-%2范围: %1-%2Address地址Index索引Disassembly反汇编Follow index in trace在跟踪中转到索引Reference引用Pattern: %1匹配特征: %1Start Index开始索引End Index结束索引Follow start index in trace在跟踪中转到开始索引Follow end index in trace在跟踪中转到结束索引TraceInfoBoxJump is taken跳转将要执行Jump is not taken跳转不会执行Copy Line复制行&Follow in Dump在内存窗口中转到(&F)&Copy复制(&C)TraceManagerClose All Tabs关闭全部页面Open trace recording打开运行跟踪Trace recording运行跟踪Trace recordings (*.%1);;All files (*.*)运行跟踪文件 (*.%1);;所有文件 (*.*)Start recording启动运行跟踪Stop trace recording停止运行跟踪Start trace recording启动运行跟踪Open打开Recent Files最近打开文件TraceRegistersCopy floating point value复制浮点数Set as current value设置为当前值Follow in Dump在内存窗口中转到Highlight高亮View XMM register查看XMM寄存器View MMX register查看MMX寄存器TraceStackComments注释&Copy复制(&C)B&inary二进制编辑(&I)&DWORD&DWORD&QWORD&QWORD&Comments注释(&C)Follow E&SP转到 ESP (&S)Follow R&SP转到 RSP (&S)Follow E&BP转到 EBP (&B)Follow R&BP转到 RBP (&B)Go to &Expression转到表达式(&E)Go to Previous转到上一个Go to Next转到下一个&Go to转到(&G)xrefs...相互引用...Follow DWORD in &Stack在栈中转到双字(&S)Follow QWORD in &Stack在栈中转到四字(&S)&Follow DWORD in Disassembler在反汇编中转到指定DWORD(&F)&Follow QWORD in Disassembler在反汇编中转到指定QWORD(&F)Edit columns...编辑列...Enter expression to follow in Stack...输入将在堆栈中转到的表达式...TraceWidgetForm窗体Goto转到Ctrl+GCtrl+GLoad dump加载内存窗口Disassembly反汇编Registers寄存器Dump内存窗口Stack堆栈InfoBox信息栏Error错误Error when opening trace recording (reason: %1)打开运行跟踪时出错(原因:%1)Trace file is recorded for another debuggee运行跟踪文件记录了另一个调试对象的历史。Checksum is different for current trace file and the debugee. This probably means you have opened a wrong trace file. This trace file is recorded for "%1"当前文件的校验和与当前调试的程序不同。这可能是因为你打开了一个错误的文件。这个运行跟踪文件对应了“%1“。Enabling the trace dump can consume a lot of memory (max ~%1GiB for this trace) and freeze x64dbg for prolonged periods of time. This feature is still experimental, please report any bugs you encounter.启用运行跟踪内存窗口可能消耗大量内存(此运行跟踪最大需要 ~%1GiB),并长时间冻结x64dbg。此功能仍然是实验性的,请报告您遇到的任何问题。Warning警告Loaded trace dump in %1ms
载入跟踪内存用时%1毫秒&Selected Address选定的地址(&S)&Address: 地址(&A): &Old value: 旧值(&O):&Value: 值(&V): &New value: 新值(&N):&Constant: 常数(&C): TraceXrefBrowseDialogDialog对话框&OK确定(&O)&Cancel取消(&C)xrefs at <%1>相互引用于 <%1>Selected xref所选相互引用All xrefs所有相互引用Copy复制UpdateCheckerChecking for updates...
正在检查更新......Network Error!网络错误!Error!错误!File on server could not be parsed...无法解析服务器上的文件……New build %1 available!<br>Download <a href="%2">here</a><br><br>You are now on build %3新版本 %1 已经发布!<br>立即<a href="%2">下载</a><br><br>您现在正在使用版本 %3You have a development build (%1) of x64dbg!您正在使用开发版(%1) 的x64dbgYou have the latest build (%1) of x64dbg!你有最新的版本 (%1) 的 x64dbg!Information温馨提示VirtualModDialogVirtual Module虚拟模块&Name:名称(&N):&Base:基址(&B):&Size:大小(&S):&OK确定(&O)&Cancel取消(&C)WatchViewName名称Expression表达式Value值Type类型Watchdog Mode看门狗模式IDID%1 is not readable.“%1” 不可读。Disabled已禁用Changed更改Is true为真Is false为假Not changed没有更改&Add...添加(&A)...&Delete删除(&D)Rename重命名&Edit...编辑(&E)...&Modify...修改(&M)...Watchdog看门狗UintUintIntIntFloat单精度浮点数AsciiAsciiUnicodeUnicode&Copy复制(&C)Enter the expression to watch请输入要监视的表达式Example: [EAX]样例: [EAX]Enter the name of the watch variable输入监视变量的名称Modify "%1"修改“%1”Cannot modify "%1"无法修改“%1”It might not possible to assign a value to "%1".“%1”也许无法被赋值。WordEditDialogEdit编辑Expression:表达式:Bytes:字节:Unsigned:无符号:ASCII:ASCII:Signed:有符号:&OK确定(&O)&Cancel取消(&C)XrefBrowseDialogDialog对话框&OK确定(&O)&Cancel取消(&C)xrefs at <%1>相互引用于 <%1>Toggle &Breakpoint切换断点(&B)Hardware, Access硬件断点,访问&Byte字节(&B)&Word2字节(&W)&Dword4字节(&D)&Qword8字节(&Q)Hardware, Write硬件断点,写入Remove &Hardware删除硬件断点(&H)Memory, Access内存,访问&Singleshoot一次性(&S)&Restore on hit重复设置(&R)Memory, Write内存,写入Remove &Memory删除内存断点(&M)Brea&kpoint断点(&K)Toggle breakpoints on all xrefs在所有相互引用上切换断点Selected xref所选相互引用All xrefs所有相互引用Copy复制ZehSymbolTableAddress地址Type类型Ordinal序号Symbol符号Symbol (undecorated)符号(已解码)Import导入Export导出