AbstractTableView Edit columns AppearanceDialog Appearance Colors Color #FFFFFF Background Color X Properties Font General Tables: Disassembly: HexDump: Stack: Registers: HexEdit: &Application Font* Courier New &Defaults Normal Bold Italic Bold + Italic 6 7 8 9 10 11 12 14 16 18 20 22 Log: &Cancel &Save Settings saved! Text Header Text Background Selection Separators Bytes Modified Bytes Restored Bytes RIP EIP Breakpoints Hardware Breakpoints Bookmarks Comments Automatic Comments Mnemonic Brief Comments Labels Addresses Selected Addresses Conditional Jump Lines (jump) Conditional Jump Lines (no jump) Unconditional Jump Lines Traced line Function Lines Loop Lines SideBar: Register Labels Bullets Disabled Breakpoints Unconditional Jump Lines (jump) Unconditional Jump Lines (no jump) Jump Lines (executing) Code Folding Checkbox Color Modified Registers Register Names Argument Register Names Extra Information Instructions: Highlighting Commas Prefixes Values Mnemonics Push/Pops Calls Returns Conditional Jumps Unconditional Jumps NOPs FAR INT3s Unusual Instructions General Registers FPU Registers MMX Registers XMM Registers YMM Registers ZMM Registers Memory Sizes Memory Segments Memory Brackets Memory Stack Brackets Memory Base Registers Memory Index Registers Memory Scales Memory Operators (+/-/*) Inactive Text RSP ESP Wildcards Other: Current Thread Watch (When Watchdog is Triggered) Memory Map Breakpoint Memory Map %1 Memory Map Section Text Search Highlight Color &Default Value &Current Setting AssembleDialog 0 Keep &Size &Fill with NOP's &XEDParse &Keystone OK Cancel Instruction decoding error Instruction encoding error : %1 Instruction bigger by %1 %2... byte bytes Instruction smaller by %1 %2... Instruction is same size! Instruction encoded successfully! AttachDialog Attach Refresh &Attach &Cancel PID Path BreakpointsView Software Address Name Module/Label State Hit count Log text Condition Fast resume Command on hit Comment Hardware Memory Inactive Enabled Disabled &Edit Remove Remove All Enable Reset hit count Enable All Disable All Disable &Copy BrowseDialog Dialog Please input the file path. Path: &Browse... &OK &Cancel CPUArgumentWidget Form Unlocked Follow %1 in %2 Disassembler Dump Stack &Copy Default (x64 fastcall) Default (stdcall) Default (stdcall, EBP stack) thiscall Delphi (Borland fastcall) Locked Calls CPUDisassembly &Selected Address &Address: &Constant: &Value: Address: Constant: &Edit &Fill... Fill with &NOPs &Copy &Paste Paste (&Ignore Size) &Binary &Selection Selection (&No Bytes) &Address &RVA Disassembly &Restore selection Toggle Edit Set Hardware on Execution Remove Hardware Replace Slot 0 (Free) Replace Slot 1 (Free) Replace Slot 2 (Free) Replace Slot 3 (Free) Breakpoint Replace Slot %1 (0x%2) &Follow in Dump &Follow in Disassembler Open Source File Selection Function Decompile Help on Symbolic Name Help on mnemonic Show mnemonic brief Hide mnemonic brief &Highlighting mode Label Current Address Label Disable Bit Byte Word Trace record Comment Toggle Bookmark Add function Delete function Argument Add argument Delete argument Analyze single function Remove analysis from module Remove analysis from selection Treat selection &head as Treat from &selection as Analysis Assemble Patches &Yara... Set New Origin Here Origin Previous Next Expression File Offset Start of Page End of Page Start of Function End of Function Go to xrefs... C&ommand &Constant &String references &Intermodular calls &Pattern Current Region Current Module All Modules &Search for &Selected Address(es) Find &references to Add label at Error! DbgSetLabelAt failed! Add comment at DbgSetCommentAt failed! DbgSetBookmarkAt failed! Define function? Delete function? Define argument? Delete argument? Assemble at %1 Failed to assemble instruction " %1 " (%2) Not inside a module... Goto File Offset in Find Pattern... Selection not in a module... Failed to assemble instruction " Failed to set trace record. Size CPUDump B&inary &Edit &Fill... &Copy &Paste Paste (&Ignore Size) Save To a File &Restore selection Follow in Stack Follow in Disassembler &Follow QWORD in Disassembler &Follow DWORD in Disassembler &Follow QWORD in Current Dump &Follow DWORD in Current Dump &Follow QWORD in Dump &Follow DWORD in Dump Dump %1 &Sync with expression Entrop&y... Set &Label &Modify Value &Breakpoint Hardware, &Access &Byte &Word &Dword &Qword Hardware, &Write Hardware, &Execute Remove &Hardware Memory, Access &Singleshoot &Restore on hit Memory, Write Memory, Execute Remove &Memory &Find Pattern... &Yara... Data co&py... Find &References &Go to &Expression File Offset Start of Page End of Page Previous Next &Hex &Extended ASCII &Codepage... &Text &ASCII &Integer &Float &Address &Disassembly Add label at Error! DbgSetLabelAt failed! Modify value Enter expression to follow in Dump... Not inside a module... Goto File Offset in %1 Hex ASCII UNICODE Signed short (16-bit) Signed long (32-bit) Signed long long (64-bit) Unsigned short (16-bit) Unsigned long (32-bit) Unsigned long long (64-bit) Hex short (16-bit) Hex long (32-bit) Hex long long (64-bit) Float (32-bit) Double (64-bit) Long double (80-bit) Address Comments Not yet supported! Edit data at %1 Fill data at %1 Save to file All files (*.*) Find Pattern... Entropy (Address: %1, Size: %2) Enter expression to sync with... CPUInfoBox Address RVA File Offset Jump is taken Jump is not taken &Selected Address &Address: &Constant: &Value: &Follow in Dump &Copy CPUMultiDump Dump Watch Change Tab %1 Name Tab Name CPUSideBar Cannot fold selection. Breakpoint Enabled Breakpoint Disabled Breakpoint Not Set CPUStack B&inary &Edit &Fill... &Copy &Paste Paste (&Ignore Size) Brea&kpoint Hardware, Access &Byte &Word &Dword &Qword Hardware, Write Remove &Hardware Memory, Access Memory, Write &Singleshoot &Restore on hit Remove &Memory &Restore selection Modify Follow R&SP Follow R&BP Follow E&SP Follow E&BP Freeze the stack &Find Pattern... Go to &Expression Go to Previous Go to Next &Follow in Disassembler Follow DWORD in &Dump Follow QWORD in &Dump &Follow DWORD in Dump &Follow QWORD in Dump Dump %1 Follow DWORD in &Stack Follow QWORD in &Stack Unfreeze the stack Enter expression to follow in Stack... Edit data at %1 Fill data at %1 CPUWidget Form Goto Ctrl+G CalculatorDialog Calculator &Follow in Disassembler XXXX Expression: Octal: Unsigned: Hexadecimal: ASCII: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0001 0010 Binary: XXX Unicode: Signed: &Close Follow in &Dump CallStackView Address To From Comment Follow &Address Follow &To Follow &From &Copy CloseDialog Closing Debugger... CodepageSelectionDialog Select Codepage... &OK &Cancel ColumnReorderDialog Dialog Displayed <- &Add &Hide -> &Up &Down << A&dd all Available &Ok &Cancel Error There isn't anything to display yet! CommandHelpView Form Command Initialize debugging a file. Example: InitDebug "C:\test.exe", commandline, "C:\homeDir" Stop debugging (terminate the target). Example: StopDebug Resume debugging. Example: run Configuration File -> Open File -> Attach File -> Detach File -> Exit View -> CPU View -> Log View -> Breakpoints View -> Memory Map View -> Call Stack View -> Notes View -> SEH View -> Script View -> Symbol Info View -> Source View -> References View -> Threads View -> Patches View -> Comments View -> Labels View -> Bookmarks View -> Functions View -> Snowman View -> Handles Debug -> Run Debug -> Run (skip exceptions) Debug -> Run until selection Debug -> Run until expression Debug -> Pause Debug -> Restart Debug -> Close Debug -> Step into Debug -> Step into (skip execptions) Debug -> Step over Debug -> Step over (skip execptions) Debug -> Execute till return Debug -> Execute till return (skip exceptions) Debug -> Run to user code Debug -> Skip next instruction Debug -> Command Debug -> Trace Into Conditional Debug -> Trace Over Conditional Debug -> Trace Record -> Bit Debug -> Trace Record -> None Debug -> Undo instruction Plugins -> Scylla Favourites -> Manage Favourite Tools Options -> Preferences Options -> Appearance Options -> Shortcuts Options -> Topmost Options -> Reload style.css Help -> About Help -> Donate Help -> Check for Updates Help -> Calculator Help -> Report Bug Help -> Manual Help -> Generate Crash Dump Actions -> Find Strings Actions -> Find Intermodular Calls Actions -> Toggle Breakpoint Actions -> Toggle Bookmark Actions -> Delete Breakpoint Actions -> Enable/Disable Breakpoint Actions -> Binary Edit Actions -> Binary Fill Actions -> Binary Fill NOPs Actions -> Binary Copy Actions -> Binary Paste Actions -> Binary Paste (Ignore Size) Actions -> Undo Selection Actions -> Set Label Actions -> Set Comment Actions -> Toggle Function Actions -> Toggle Argument Actions -> Assemble Actions -> Yara Actions -> Set New Origin Here Actions -> Goto Origin Actions -> Goto Previous Actions -> Goto Next Actions -> Goto Expression Actions -> Goto Start of Page Actions -> Goto End of Page Actions -> Goto Start of Function Actions -> Goto End of Function Actions -> Goto File Offset Actions -> Find References to Selected Address Actions -> Find Pattern Actions -> Find References Actions -> xrefs... Actions -> Analyze Single Function Actions -> Help on Mnemonic Actions -> Toggle Mnemonic Brief Actions -> Highlighting Mode Actions -> Find Actions -> Decompile Function Actions -> Decompile Selection Actions -> Edit breakpoint Actions -> Enable/Disable Logging Actions -> Allocate Memory Actions -> Free Memory Actions -> Sync With Expression Actions -> Entropy Actions -> Copy All Registers Actions -> Mark As User Module Actions -> Mark As System Module Actions -> Mark As Party Actions -> Set Hardware Breakpoint (Execute) Actions -> Remove Hardware Breakpoint Actions -> Remove Analysis From Module Actions -> Remove Analysis From Selection Actions -> Treat Selection As Code Actions -> Treat Selection As Byte Actions -> Treat Selection As Word Actions -> Treat Selection As Dword Actions -> Treat Selection As Fword Actions -> Treat Selection As Qword Actions -> Treat Selection As Tbyte Actions -> Treat Selection As Oword Actions -> Treat Selection As Float Actions -> Treat Selection As Double Actions -> Treat Selection As LongDouble Actions -> Treat Selection As ASCII Actions -> Treat Selection As UNICODE Actions -> Treat Selection As MMWord Actions -> Treat Selection As XMMWord Actions -> Treat Selection As YMMWord Actions -> Increase Register Actions -> Decrease Register Actions -> Zero Register Actions -> Set Register to One Actions -> Toggle Register Value Actions -> Copy Actions -> Copy Address Actions -> Copy Symbol Actions -> Load Script Actions -> Reload Script Actions -> Unload Script Actions -> Run Script Actions -> Toggle Script Breakpoint Actions -> Run Script to Cursor Actions -> Step Script Actions -> Abort Script Actions -> Execute Script Command Actions -> Refresh DataCopyDialog Data Copy Copy EditBreakpointDialog Edit breakpoint &Log Text: &Break Condition: Lo&g Condition: &Name: &Command Text: &Hit Count: C&ommand Condition: &Fast Resume &Save C&ancel EditFloatRegister Dialog Double: Short: Float: Byte: Int64: Long: High: 0-1 2-3 4-5 6-7 8-9 A-B C-D E-F Low: &Hexadecimal &Signed &Unsigned Unified hex value follows memory byte order. &OK &Cancel EntropyDialog Entropy ExceptionRangeDialog Range Start: End: OK Cancel FavouriteTools Favourites Tools &Add... &Remove De&scription... &Up &Down Script Command Shortcut &OK &Cancel Path Description Enter the description Select script Script files (*.txt *.scr);;All files (*.*) Enter the command that you want to create a shortcut for : GotoDialog Enter expression to follow... &OK &Cancel Not debugging... Invalid expression... Empty expression... Correct expression! -> Invalid file offset... Invalid memory address... Memory out of range... HandlesView Type Type number Handle Access Name Remote address Local address State TcpConnection Privilege State Privilege &Refresh Close handle Disable Privilege: Enable Privilege: Disable all privileges Enable all privileges TCP Connection enumeration is only available on Windows Vista or greater. &Copy Unknown Enabled Disabled HexDump &Selection &Address HexEditDialog HexEdit &ASCII: &UNICODE: &Hex: &Keep Size &OK &Entire Block &Cancel &Codepage... Enter text to convert... LineEditDialog Dialog CheckBox &OK &Cancel CT: %1%2 LogView Clea&r &Copy Select &All &Save Disable &Logging Enable &Logging Error, log have not been saved. Log have been saved as %1 MHTabBar &Detach &Delete MainWindow x64dbg &File &Recent Files &View &Debug Trace record &Help &Plugins &Options Favourites toolBar &Open E&xit &Run &Pause Re&start &Close Step &into Step &over Co&mmand E&xecute till return &Memory Map &Log Window &About Scylla &Breakpoints Step into (skip exceptions) Step over (skip exceptions) Run (&skip exceptions) Execute till return (skip exceptions) &Script Script Run &until selection Run until selection &CPU CPU Symbol &Info Symbol Info &References References &Threads Threads &Preferences Settings &Find Strings Find Strings &Appearance Find Intermodular Calls Patches Comments Labels Bookmarks Functions Check for &Updates Call Stack Shortcuts &Donate Donate Calculator Attach Detach Change Command &Line Skip next instruction Topmost Topmost Window &Report Bug Report Bug &Source Source &Manual &FAQ FAQ SEH Chain Hide debugger (PEB) Reload style.css Notes Snowman Handles Trace over until condition Trace into until condition Bit Byte Word Trace into beyond trace record Trace over beyond trace record Trace into into trace record Trace over into trace record None Run to &user code Run until e&xpression Undo last instruction Generate crash dump &Manage Favourite Tools... Log Symbols Breakpoints Memory Map SEH Command: Ready Enter trace into finishing condition. Enter trace over finishing condition. About x64dbg About x32dbg Open file Executables (*.exe *.dll);;All files (*.*) Enter expression to run to... Error! Patches cannot be shown when not debugging... All the money will go to x64dbg development. You will be taken to a website where you can report a bug. Make sure to fill in as much information as possible. This action will crash the debugger and generate a crash dump. You will LOSE ALL YOUR DATA. Do you really want to continue? Change Command Line Cannot get remote command line, use the 'getcmdline' command for more information. Could not set command line! New command line: Manage Favourite Tools MemoryMapView Address Size Info Page Information Type Allocation Type Protection Current Protection Initial Allocation Protection &Follow in Dump Follow in &Disassembler Set Page Memory Rights &Switch View Memory &Breakpoint Access &Singleshoot &Restore Write Execute &Remove &Allocate memory &Free memory Find address &page Entropy... &Find Pattern... &Dump Memory to File &Copy Entropy (Address: %1, Size: %2) Error Warning You're trying to allocate a zero-sized buffer just now. The size of buffer you're trying to allocate exceeds 1GB. Please check your expression to ensure nothing is wrong. Memory allocation failed! Find Pattern... All files (*.*) Save Memory Region Address %0 not found in memory map... Enter the address to find... NotesManager Global Debuggee PageMemoryRights Set Page Memory Rights Rights NO ACCESS READ ONLY READ WRITE EXECUTE EXECUTE READ FULL ACCESS WRITE COPY EXECUTE WRITE COPY Set Rights Select ALL Deselect ALL Press CTRL or SHIFT key to select multiple pages PAGE GUARD Pages Rights Changed to: Error setting rights, read the MSDN to learn the valid rights of: PatchDialog Patches &Patches &Modules &Select All &Deselect All &Restore Selected Pick &Groups &Patch File &Import &Export Information Nothing to patch! Error! Failed to get module filename... Save file All files (*.*) Failed to save patched file (%1) %1/%2 patch(es) applied! Open patch Patch files (*.1337) The patch file is empty... Patch file format is incorrect... No patches to apply in the current process. Question Some patches are already applied. Do you want to remove these patches? Some bytes do not match the original in the patch file. Do you want to apply these patches anyway? Save patch No patches to export. %1 patch(es) exported! PatchDialogGroupSelector Group Selector 0000000000000000 &Toggle &Previous &Next ReferenceManager Close All Tabs ReferenceView &Follow in Disassembler Follow in &Dump Follow &API Address Toggle Breakpoint Toggle Bookmark Set breakpoint on all commands Remove breakpoint on all commands Set breakpoint on all api calls Remove breakpoint on all api calls Total Progress %1% Set breakpoint on all calls to %1 Remove breakpoint on all calls to %1 Error! DbgSetBookmarkAt failed! RegistersView Increment Decrement Zero Set to 1 Modify value Toggle Copy value to clipboard Copy Symbol Value to Clipboard Copy all registers Follow in Disassembler Follow in Dump Increment x87 Stack Decrement x87 Stack Change view Hide FPU Show FPU Edit YMM register Edit XMM register Set Hardware Breakpoint on %1 SEHChainView Address Handler Module/Label Comment Follow &Address Follow Handler &Copy ScriptView Line Text Info Load Script Open... Reload Script Unload Script Run Toggle BP Run until selection Step Abort Execute Command... Continue here... Error on line Script Error! Select script Script files (*.txt *.scr);;All files (*.*) Execute Script Command... SearchListView Type here to filter results... Regex Search: Search... &Copy SelectFields Dialog SettingsDialog Settings Events System Breakpoint* Break on: DLL Load Attach Breakpoint DLL Entry Entry Breakpoint* DLL Unload TLS Callbacks* Thread End Thread Entry Debug Strings Thread Start Engine Calculation Type &Signed &Unsigned Default Breakpoint Type INT3 Long INT3 UD2 Undecorate Symbol Names Enable Debug &Privilege Enable Source Debugging Disable Database Compression Save Database in Program Directory Enable Trace Record Recording during a Trace Exceptions Ignored Exceptions: Add &Range &Delete Range Add &Last Disasm Argument Spaces Tab between mnemonic and arguments Memory Spaces Uppercase Autocomments only on CIP GUI Show FPU registers as little endian Save column order and width Misc Symbol Store: Symbol Path: Set x64dbg as Just In Time Debugger JIT: Confirm before attaching DIE SCUM! Enable Load/Save Tab Order Save Cancel ERROR NOT FOUND OLD JIT NOT FOUND OLD JIT ENTRY STORED, USE SETJIT COMMAND Question ShortcutsDialog Shortcuts Shortcut &Save &Cancel Instruction StatusLabel Initialized Paused Running Terminated StdTable &Line Cropped &Table &Full Table &Copy SymbolView Form Base Module Party Address Type Symbol Symbol (undecorated) &Follow in Disassembler Follow in &Dump Toggle Breakpoint Toggle Bookmark Follow &Entry Point in Disassembler &Download Symbols for This Module Download Symbols for &All Modules Copy File &Path &Yara Memory... &Yara File... Entropy... Mark as &user module Mark as &system module Mark as &party... Import Export User System Party: %1 &Copy Error! DbgSetBookmarkAt failed! Entropy (%1) Mark the party of the module as Error The party number can only be an integer ThreadView &Copy Normal AboveNormal TimeCritical Idle BelowNormal Highest Lowest Switch Thread Suspend Thread Resume Thread Kill Thread Set Priority Above Normal Below Normal Time Critical Go to Thread Entry Number ID Entry TEB RIP EIP Suspend Count Priority Wait Reason Last Error Name Unknown TimeWastedCounter %1 events/s Time Wasted Debugging: WatchView Name Expression Value Type Watchdog Mode ID %1 is not readable. Disabled Changed Is true Is false Not changed &Add... &Delete Rename &Edit... Watchdog Enter the expression to watch Enter the name of the watch variable WordEditDialog Edit Signed: Unsigned: Bytes: Expression: XrefBrowseDialog Dialog xrefs at %1 YaraRuleSelectionDialog Yara Directory... &File... &Select &Cancel