AboutDialog About x64dbg Website: <a href="https://x64dbg.com">https://x64dbg.com</a> Version: Icons: <html><head/><body><a href="https://p.yusukekamiyamane.com">Yusuke Kamiyamane</a> <a href="https://github.com/mrfearless">mrfearless</a></body></html> An open-source x64/x32 debugger for windows. Check for Updates <h3>Donations</h3> Please consider donating using the Bitcoin address on the right or by going to <a href="https://donate.x64dbg.com">donate.x64dbg.com</a>. AbstractStdTable &Line Cropped &Table &Full Table Line, To Log Cropped Table, To Log Full Table, To Log &Export Table &Copy & Kopi AbstractTableView Edit columns Rediger kolonner AppearanceDialog Appearance Utseende Colors Farger Properties Egenskaper Color Farge #FFFFFF #FFFFFF Open color selector Background Color Bakgrunnsfarge Transparent X X Example Text Font Skrifttype General Tables: Generell Tabell: Normal Vanlig Bold Fet Italic Kursiv Bold + Italic Fet + kursiv 6 6 7 7 8 8 9 9 10 10 11 11 12 12 14 14 16 16 18 18 20 20 22 22 Disassembly: Disassembly: HexDump: HexDump: Stack: Stack: Registers: Register: HexEdit: HexEdit: Log: Logg: &Application Font* & Program skrift * Courier New Courier New &Defaults & Standarder *Setting requires restarting the application to take effect. &Save & Lagre &Cancel & Avbryt Settings saved! Innstillinger lagret! Background Bakgrunn Selection Utvalg Header Text Tekst Separators Skilletegn EIP EIP RIP RIP Addresses Selected Addresses Breakpoints Breakpoints Hardware Breakpoints Labels Etiketter Bytes Bytes Modified Bytes Modifiserte Bytes Restored Bytes Gjenopprettede Bytes Bookmarks Bokmerker Comments Kommentarer Automatic Comments Mnemonic Brief Comments Relocation underline Conditional Jump Lines (jump) Conditional Jump Lines (no jump) Unconditional Jump Lines Traced line Spores linje Function Lines Loop Lines SideBar: Register Labels Conditional Jump Backwards Lines (jump) Conditional Jump Backwards Lines (no jump) Unconditional Jump Lines (jump) Unconditional Jump Backwards Lines (jump) Unconditional Jump Lines (no jump) Unconditional Jump Backwards Lines (no jump) Code Folding Checkbox Color Bullets Breakpoint bullets Disabled Breakpoint bullets Bookmark bullets Register Names Argument Register Names Modified Registers Highlight Read Highlight Write Highlight Read+Write Extra Information Instructions: Mnemonics Push/Pops Calls Calls Returns Conditional Jumps Unconditional Jumps NOPs FAR INT3s Unusual Instructions Prefixes Values Commas General Registers FPU Registers MMX Registers XMM Registers YMM Registers ZMM Registers Memory Sizes Memory Segments Memory Brackets Memory Stack Brackets Memory Base Registers Memory Index Registers Memory Scales Memory Operators (+/-/*) Highlighting 0x00 Bytes 0x7F Bytes 0xFF Bytes IsPrint Bytes User Code Pointer Highlight Color User Data Pointer Highlight Color System Code Pointer Highlight Color System Data Pointer Highlight Color Unknown Code Pointer Highlight Color Unknown Data Pointer Highlight Color ESP RSP User Stack Frame Line System Stack Frame Line Inactive Text Return To Comment SEH Chain Comment Wildcards Graph: Breakpoint Disabled Breakpoint Node Current node shadow Terminal node shadow Indirect call shadow Unconditional branch line True branch line False branch line Log Logg Log Link Color Other: Background Flicker Color Search Highlight Color Patch located in relocation region Current Thread Watch (When Watchdog is Triggered) Memory Map Breakpoint Memory Map %1 Memory Map Section Text Struct text Struct primary background Struct secondary background Breakpoint Summary Parentheses Breakpoint Summary Keywords Breakpoint Summary Strings Symbol User Module Text Symbol System Module Text Symbol Unloaded Text Symbol Loading Text Symbol Loaded Text Link color NOT FOUND IN CONFIG! &Default Value &Current Setting Select Color Velg Farge AssembleDialog 0 0 Keep &Size Holde & størrelse &Fill with NOP's & Fyld med NOP'S &XEDParse & XEDParse &asmjit OK Ok Cancel Avbryt Instruction decoding error instruksjon dekodingsfeil empty instruction Instruction encoding error: %1 Instruction bigger by %1 %2... instruksjon ved %1 %2... byte byte bytes bytes Bytes: %1 Instruction smaller by %1 %2... instruksjon mindre %1 %2... Instruction is same size! instruksen er samme størrelse Instruction encoded successfully! instruksen avkodet med suksess! AttachDialog Attach Feste <a href="https://faq.x64dbg.com">Why is process X not shown?</a> Refresh Gjenoppfrisk Find Window... &Attach & Feste &Cancel &Avbryt PID PID Name Navn Title Path Sti Command Line Arguments Find Window Enter window title or class name here. Cannot find window "%1". Retry? The PID of the window "%1" is %2, but it's hidden in the process list. Do you want to attach to it immediately? GetWindowThreadProcessId() failed. Cannot get the PID of the window. BreakpointsView Type Type Address Address Module/Label/Exception State Tilstand Disassembly Disassembly Hits Summary Follow breakpoint &Remove &Fjerne Disable Deaktiver Enable &Edit & Redigere Reset hit count Tilbakestill antall treff Enable all (%1) Disable all (%1) Remove all (%1) Add DLL breakpoint Add exception breakpoint Copy breakpoint conditions Paste breakpoint conditions &Copy & Kopi Inactive Inactive One-time Enabled Aktivert Disabled Deaktivert byte byte word dword qword access write execute read load unload all firstchance secondchance anychance breakif fastresume logif log cmdif cmd Cannot follow this breakpoint. Enter the module name Example: mydll.dll Eksempel: mydll.dll Enter the exception code Example: EXCEPTION_ACCESS_VIOLATION Software Program Hardware Maskinvare Memory Minne DLL Exception Bridge The data has been copied to clipboard. References Referanser BrowseDialog Dialog Dialog Please input the file path. Path: &Browse... &OK &OK &Cancel & Avbryt CPUArgumentWidget Arguments Unlocked Låst opp Refresh is automatic. [Formatting Error] Follow %1 in %2 Følg %1 i %2 Disassembler Disassembler Dump Dumpe Stack Stack &Copy & Kopi Default (x64 fastcall) Standard (x 64 fastcall) Default (stdcall) Standard (stdcall) Default (stdcall, EBP stack) Standard (stdcall, EBP Stack) thiscall thiscall fastcall Delphi (Borland fastcall) Delphi (Borland fastcall) Locked Låst Refresh is disabled. Calls Calls Refresh is only done when executing a CALL instruction. CPUDisassembly &Selected Address & Valgte adresse &Address: & Adresse: &Constant: & Konstant: &Value: & Verdi: Jump table%1: Address: Adresse: Constant: Konstant: &Edit & Redigere &Fill... & Fylle... Fill with &NOPs Fyll med & NOPs &Copy & Kopi &Paste &Lim inn Paste (&Ignore Size) Lime (& Ignorer størrelse) &Binary & Binære &Selection & Utvalg Selection to &File Selection (Bytes only) Selection (&No Bytes) Utvalg (& ingen byte) Selection to File (No Bytes) &Address &Adresse &RVA & RVA &File Offset &Header VA Disassembly Disassembly &Restore selection & Gjenopprett valgt &Follow in Dump & Følge i Dump &Follow in Disassembler & Følge i Disassembler Open Source File Åpne kildefil Help on Symbolic Name Hjelp på symbolsk navn Help on mnemonic Hjelp på mnemonic Show mnemonic brief Vis mnemonic kort Hide mnemonic brief Skjule mnemonic kort &Highlighting mode &Highlighting modus Edit columns... Label Current Address Gjeldende adresse for etikett Label Etikett Disable Deaktiver Bit Bit Byte Byte Word Ord Start trace recording Trace coverage Stop trace recording Function Funksjon Analyze module Analyser modul Add function Legge til funksjon Delete function Slett funksjon Argument Add argument Delete argument Add loop Delete loop Analyze single function Analysere enkelt funksjon Remove type analysis from module Remove type analysis from selection Treat selection &head as Treat from &selection as Analysis Analyse Download Symbols for This Module Assemble Assemble Patches Patches Previous Foregående Next Neste Expression Uttrykk File Offset Fil Offset Start of Page Begynnelsen av siden End of Page Slutten av siden Start of Function End of Function Previous Reference Next Reference Go to Gå til xrefs... xrefs... C&ommand C&ommand &Constant & Konstant &String references & Strengreferanser &Intermodular calls & Intermodular calls &Pattern &Mønster &GUID &Names Current Region Gjeldende område Current Module Gjeldende modul Current Function All User Modules All System Modules All Modules Alle moduler &Search for € Søk etter &Selected Address(es) & Valgte adresse(n) Find &references to Finn & referanser til Copy token &text Copy token &value Add label at Legge til en etikett på The label may be in use The label "%1" may be an existing label or a valid expression. Using such label might have undesired effects. Do you still want to continue? Error! Feil! DbgSetLabelAt failed! DbgSetLabelAt mislyktes! Assemble at %1 Assemble på %1 Failed to assemble instruction " %1 " (%2) Kan ikke assemble instruksjonen "%1" (%2) Not inside a module... Ikke inne i en modul... Goto File Offset in Gå Til Offset i Enter Constant Find Pattern... Finn mønsteret... Edit code at %1 Fill code at %1 Size Størrelse Open File Åpne Fil Text Files (*.txt) Tekstfiler (*.txt) Error Feil Could not open file Kunne ikke åpne fil Selection not in a module... Selection not in a file... Start from &Selection Failed to assemble instruction " Failed to enable trace coverage for page %1. Failed to disable trace coverage for page %1. CPUDump &Edit & Redigere &Fill... &Fylle... &Copy &Kopi &Paste &Lim inn Paste (&Ignore Size) Lim inn (& Ignorer størrelse) Save To a File Lagre til en fil B&inary B&inary &File Offset &Restore selection & Gjenopprett valgt &Modify Value & Endre verdi &Byte & Byte &Word & Word &Dword & Dword &Qword & Qword Hardware, &Access Maskinvare, & tilgang Hardware, &Write Maskinvare, & skrive Hardware, &Execute Maskinvare, & kjøre Remove &Hardware Fjerne maskinvare &Singleshoot & Singleshoot &Restore on hit & Gjenopprette på hit Memory, Access Minne, tilgang Memory, Read Memory, Write Minne, skrive Memory, Execute Minne, kjøre Remove &Memory Fjern & minne &Breakpoint Stoppunkt &Find Pattern... & Finne mønster... Find &References Finne & referanser &Sync with expression & Sync med uttrykk Allocate Memory &Expression & Uttrykk File Offset Fil Offset Start of Page Begynnelsen av siden End of Page Slutten av siden Previous Foregående Next Neste Previous Reference Next Reference &Go to & Gå til &ASCII & ASCII &Extended ASCII &Codepage... & Codepage... &Hex & Hex &Text & Tekst Signed byte (8-bit) Signed short (16-bit) Signert short (16-biters) Signed long (32-bit) Signert long (32-bit) Signed long long (64-bit) Signed long long (64-bit) Unsigned byte (8-bit) Unsigned short (16-bit) Unsigned short (16-bit) Unsigned long (32-bit) Unsigned long (32-bit) Unsigned long long (64-bit) Unsigned long long (64-bit) Hex short (16-bit) Hex kort (16-biters) Hex long (32-bit) Hex long (32-bit) Hex long long (64-bit) Hex long long (64-bit) &Integer &Integer &Float (32-bit) &Double (64-bit) &Long double (80-bit) &Half float (16-bit) &Float &Float &Address &Adresse &Disassembly &Disassembly System Code System Data User Code User Data (Real4) (Real8) (BYTE) (WORD) (DWORD) (QWORD) (String) (Unknown String) Modify value Endre verdien Error Feil The input text is not a number! Enter expression to follow in Dump... Error! Feil! Not inside a module... Ikke inne i en modul... Goto File Offset in %1 Hex Hex ASCII ASCII UNICODE UNICODE Float (32-bit) Float (32-bit) Double (64-bit) Double (64-bit) Long double (80-bit) Long double (80-bit) Half float (16-bit) Value Comments Kommentarer Edit data at %1 Redigere data på %1 Fill data at %1 Fyll ut data på %1 Save to file Lagre til fil All files (*.*) Alle filer (*.*) Find Pattern... Finn mønsteret... Selection not in a file... Dump Dumpe Enter expression to sync with... Size Størrelse Warning You're trying to allocate a zero-sized buffer just now. The size of buffer you're trying to allocate exceeds 1GB. Please check your expression to ensure nothing is wrong. Memory allocation failed! CPUInfoBox Address Adresse RVA RVA File Offset Fil Offset Copy Line Jump is taken Hopp er tatt Jump is not taken Hopp er ikke tatt Jump from Call from Reference from Accessed %n time(s) Modify Value &Address: &Adresse: &Constant: & Konstant: &Value: &Verdi: &Selected Address &Valgte adresse &Follow in Dump &Følg i Dump &Modify Value & Endre verdi &Watch &Show References &Copy &Kopi CPUMultiDump Dump Dump Watch Locals Change Tab %1 Name Endre Fane %1 navn Tab Name Fane navn Disassembly Disassembly CPURegistersView Modify value Endre verdien Increment value Decrement value Zero value Toggle Aktiver/Deaktiver Undo Follow in Disassembler Følge i Disassembler Follow in Dump Følg i Dump Follow in Stack Følg i stack Follow in Memory Map &Remove hardware breakpoint Increment x87 Stack Increment x87 Stack Decrement x87 Stack Decrement x87 Stack Highlight Edit %1 Edit Rediger Edit %1 register Edit FPU register ERROR CONVERTING TO HEX Set Last Error Set Last Status Follow in &Dump Følg i & dump Copy old value: %1 Set Hardware Breakpoint on %1 CPUSideBar Cannot fold selection. Click to unfold, right click to delete. Click to fold, right click to delete. Click to fold. Breakpoint Enabled Breakpoint aktivert Breakpoint Disabled Breakpoint deaktivert Breakpoint Not Set Breakpoint ikke angitt CPUStack Comments Kommentarer Align Stack Pointer Modify Modifiser &Edit &Redigere &Fill... &Fylle... &Copy &Kopi &Paste &Lim inn Paste (&Ignore Size) Lim inn (& Ignorer størrelse) B&inary B&inary &DWORD &QWORD &Comments Hardware, Access Maskinvare, tilgang &Byte &Byte &Word &Word &Dword &Dword &Qword &Qword Hardware, Write Maskinvare, skriv Remove &Hardware Fjern &maskinvare Memory, Access Minne, tilgang &Singleshoot & Singleshoot &Restore on hit & Gjenopprette på hit Memory, Write Minne, skrive Remove &Memory Fjern & minne Brea&kpoint Brea & kpoint &Restore selection & Gjenopprettingsvalg &Find Pattern... & Finne mønster... Follow E&SP Følg R&SP Follow R&SP Følg R&SP Follow E&BP Følg R&BP Follow R&BP Følg R&BP Go to &Expression Gå til & uttrykk Go to Base of Stack Frame Go to Previous Stack Frame Go to Next Stack Frame Go to Previous Gå til forrige Go to Next Gå til neste &Go to & Gå til Freeze the stack Fryse stakken Follow DWORD in &Stack Følg DWORD i & stack Follow QWORD in &Stack Følg QWORD i & stack &Follow DWORD in Disassembler &Følge DWORD i Disassembler &Follow QWORD in Disassembler &Følge QWORD i Disassembler Edit columns... Unfreeze the stack Frigi stacken Enter expression to follow in Stack... Angi uttrykket å følge i stacken... Edit data at %1 Redigere data på %1 Fill data at %1 Fyll ut data på %1 Find Pattern... Finn mønsteret... CPUWidget Form Skjema Goto Gå Til Ctrl+G Ctrl + G Disassembly Disassembly Stack Stack Registers Dump Dumpe Arguments Sidebar InfoBox Graph CalculatorDialog Calculator Kalkulator Signed: Signert: Unsigned: Usignert: Unicode: Unicode: Octal: Octal: Expression: Uttrykk: Binary: Binær: ASCII: ASCII: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 Hexadecimal: Heksdesimal: 0000000000000000 0000000000000000 Bytes: Bytes: &Follow in Disassembler & Følge i Disassembler Follow in &Dump Følg i & dump Follow in Memory Map &Close & Lukk CallStackView Thread ID Address Address To Til From Fra Size Størrelse Party Comment Kommentar Follow &Address Følg & adresse Follow &To Følg &til Follow &From Følg &fra Download Symbols for This Thread Show Suspected Call Stack Frame Show Active Call Stack Frame Follow in Threads Rename Thread &Copy & Kopi User System Thread name - %1 CloseDialog Closing Debugger... Lukker Debugger... CodepageSelectionDialog Select Codepage... Velg kodesiden... &OK &OK &Cancel &Avbryt ColumnReorderDialog Dialog Dialog Displayed Vist <- &Add <- &Legge &Hide -> &Skjul-> &Up &Opp &Down &Ned << A&dd all << A&dd alle Available Tilgjengelig &Ok &Ok &Cancel &Avbryt Error Feil There isn't anything to display yet! Det er ikke noe å vise ennå! ComboBoxDialog Dialog Dialog CheckBox Avmerkingsboksen &OK &OK &Cancel & Avbryt CommandLineEdit Commands are comma separated (like assembly instructions): mov eax, ebx CommonActions Follow in Disassembler Følge i Disassembler Show this address in disassembler. Equivalent command "d address". &Follow DWORD in Disassembler &Følge DWORD i Disassembler &Follow QWORD in Disassembler &Følge QWORD i Disassembler Follow in Dump Følg i Dump Show the address in dump. Equivalent command "dump address". &Follow DWORD in Current Dump &Følge DWORD i gjeldende Dump &Follow QWORD in Current Dump &Følge QWORD i gjeldende Dump Dump %1 Dump %1 Follow DWORD in Dump Følg DWORD i Dump Follow QWORD in Dump Følg QWORD i Dump Follow in Stack Følg i stack Show this address in stack view. Equivalent command "sdump address". Follow in Memory Map Show this address in memory map view. Equivalent command "memmapdump address". Graph Show the control flow graph of this function in CPU view. Equivalent command "graph address". Toggle Aktiver/Deaktiver Edit Rediger Set Hardware on Execution Angi maskinvare på gjennomføring Remove Hardware Fjerne maskinvare Replace Slot %1 (Unknown) Breakpoint Stoppunkt Set Conditional Breakpoint Replace Slot %1 (0x%2) Erstatte Slot %1 (0x%2) Label Current Address Gjeldende adresse for etikett Comment Kommentar Toggle Bookmark Veksle bokmerke Set a bookmark here, or remove bookmark. Equivalent command "bookmarkset address"/"bookmarkdel address". Set %1 Here Set the next executed instruction to this address. Equivalent command "mov cip, address". Create New Thread Here Opprett ny tråd her Create a new thread at this address. Equivalent command "createthread address, argument". &Watch DWORD &Watch QWORD Add the address in the watch view. Equivalent command "AddWatch [address], "uint"". Cannot follow %1. Address is invalid. Kan ikke følge %1. Adressen er ugyldig. Add label at Legge til en etikett på The label may be in use The label "%1" may be an existing label or a valid expression. Using such label might have undesired effects. Do you still want to continue? Error! Feil! DbgSetLabelAt failed! DbgSetLabelAt mislyktes! Add comment at Legg til kommentar på DbgSetCommentAt failed! DbgSetCommentAt mislyktes! DbgSetBookmarkAt failed! DbgSetBookmarkAt mislyktes! Address %1 is not executable Setting software breakpoint here may result in crash. Do you really want to continue? Setting new origin here may result in crash. Do you really want to continue? Creating new thread here may result in crash. Do you really want to continue? Argument for the new thread Configuration File Fil Open Attach Feste Detach Koble fra Save database Restore backup database Reload database Clear database Import database Export database Restart as Admin Exit View CPU CPU Log Logg Breakpoints Breakpoints Memory Map Memory Map Call Stack Call Stack Notes Notater SEH SEH Script Script Symbol Info Symbol Info Modules Source Kilde References Referanser Threads Threads Patches Patches Comments Kommentarer Labels Etiketter Bookmarks Bokmerker Functions Funksjoner Variables Handles Håndtak Graph Previous Tab Next Tab Previous View Next View Hide Tab Debug Run Run (pass exception) Run (swallow exception) Run until selection Kjøre inntil utvalg Run until expression Pause Restart Close Step into Step into (pass exception) Step into (swallow exception) Step into (source) Step over Step over (pass exception) Step over (swallow exception) Step over (source) Execute till return Execute till return (pass exception) Run to user code Skip next instruction Hopp over neste instruksjon Command Kommando Trace into... Trace over... Trace coverage Bit Bit None Undo instruction Animate into Animate over Animate command Step into until reaching uncovered code Step over until reaching uncovered code Step into until reaching covered code Step over until reaching covered code Plugins Scylla Scylla Favourites Manage Favourite Tools Options Preferences Appearance Utseende Hotkeys Topmost Øverste Reload style.css Last inn igen style.css Help Hjelp About Blog Donate Doner Calculator Kalkulator Report Bug Rapporter feil Manual Generate Crash Dump Actions Find Strings Finn strenge Find Strings in Current Module Find Intermodular Calls Finn Intermodular Calls Toggle Breakpoint Set Conditional Breakpoint Toggle Bookmark Delete Breakpoint Enable/Disable Breakpoint Reset breakpoint hit count Enable all breakpoints Disable all breakpoints Remove all breakpoints Binary Edit Binary Fill Binary Fill NOPs Binary Copy Binary Paste Binary Paste (Ignore Size) Binary Save Undo Selection Set Label Set Label for the Operand Set Comment Toggle Function Add Loop Delete Loop Toggle Argument Assemble Assemble Set %1 Here Goto Origin Goto EBP/RBP Goto Previous Goto Next Goto Expression Goto Start of Page Goto End of Page Goto Start of Function Goto End of Function Goto File Offset Find References to Selected Address Find Pattern Find Pattern in Current Module Find Names in Current Module Find References xrefs... xrefs... Analyze Single Function Analyze Module Help on Mnemonic Toggle Mnemonic Brief Highlighting Mode Enable/Disable Branch Destination Preview Find Find in Current Module Enable/Disable Logging Allocate Memory Free Memory Sync Copy All Registers Mark As User Module Mark As System Module Mark As Party Set Hardware Breakpoint (Execute) Remove Hardware Breakpoint Remove Type Analysis From Module Remove Type Analysis From Selection Treat Selection As Code Byte Byte Word Ord Dword Fword Qword Tbyte Oword Float Double LongDouble ASCII ASCII UNICODE UNICODE MMWord XMMWord YMMWord Treat Selection Head As Toggle Register Value Clear Copy Kopier Copy Address Copy RVA Copy Symbol Copy Line Load Script Load Script Reload Script Unload Script Edit Script Run Script Toggle Script Breakpoint Run Script to Cursor Step Script Abort Script Execute Script Command Refresh Gjenoppfrisk Zoom to cursor Fit To Window Follow in disassembler Save as image Toggle overview Toggle summary Increment x87 Stack Increment x87 Stack Decrement x87 Stack Decrement x87 Stack Redirect Log Browse in Explorer Download Symbols for This Module Download Symbols for All Modules Create New Thread Here Open Source File Åpne kildefil Follow in Memory Map Follow in Stack Følg i stack Follow in Disassembler Følge i Disassembler Follow DWORD/QWORD in Disassembler Follow DWORD/QWORD in Dump Freeze the stack Fryse stakken Go to Base of Stack Frame Go to Previous Stack Frame Go to Next Stack Frame Go to Previous Reference Go to Next Reference Modify value Endre verdien Watch DWORD/QWORD Copy File Offset Start/Stop trace recording Copy -> Cropped Table Copy -> Table Copy -> Line, To Log Copy -> Cropped Table, To Log Copy -> Table, To Log Copy -> Export Table NOT FOUND IN CONFIG! CustomizeMenuDialog Dialog Dialog Customize which menu item will be shown in the "More commands" submenu Disselect All &OK &OK &Cancel & Avbryt Disassembler Disassembler Dump Dumpe Watch Call Stack Call Stack Threads Threads Graph Xref Browser Struct Stack Stack Source Kilde File Fil Debug Option Favourite Help Hjelp View Trace disassembler Trace dump DBG Trace recording has stopped unexpectedly because WriteFile() failed. GetLastError() = %s. Trace recording failed to start because the file header cannot be written. Started trace recording to file: %s Cannot create trace recording file. GetLastError() = %s. Trace recording stopped. breakif fastresume() logif log cmdif cmd %u functions Indirect pointer: 0x%p 0x%p %u functions discovered! This kind of analysis doesn't work on x32 executables... Animation started. Use the "pause" command to stop animation. Non-executable memory region Assembled branch does not point to an executable memory region! Error while writing process memory Delete breakpoint failed (DeleteBPX): %p Error setting breakpoint at %p! (SetBPX) Delete memory breakpoint failed (RemoveMemoryBPX): %p Could not enable memory breakpoint %p (SetMemoryBPXEx) Not enough arguments! At least %d argument(s) must be specified. Arguments are <a href="https://help.x64dbg.com/en/latest/commands/index.html">comma-separated</a>. The command "%s" is debug-only Error allocating memory for cmdline Error converting UNICODE cmdline Error reading PEB base addres Error reading PEB -> ProcessParameters -> CommandLine UNICODE_STRING Error reading PEB -> ProcessParameters pointer address Error Getting remote PEB address Error Getting command line base address Error checking the pattern of the commandline stored Error writing the new command line stored Error getting getcommandline Error allocating the page with UNICODE and ANSI command lines Error writing the ANSI command line in the page Error writing the UNICODE command line in the page Error writing command line UNICODE in PEB Error getting cmdline (Address: %p) Invalid parameter [base]! Invalid memory address! Invalid parameter [size] Failed to load module (ModLoad)... Virtual module "%s" loaded on %p[%p]! This may take very long, depending on your network connection and data in the debug directory... Done! See symbol log for more information Invalid module "%s"! Symbol download failed... See symbol log for more information File does not exist! Symbol load failed... See symbol log for more information Done! Invalid argument Image information for %s Characteristics (0x%X): None IMAGE_FILE_RELOCS_STRIPPED: Relocation info stripped from file. IMAGE_FILE_EXECUTABLE_IMAGE: File is executable (i.e. no unresolved externel references). IMAGE_FILE_LINE_NUMS_STRIPPED: Line numbers stripped from file. IMAGE_FILE_LOCAL_SYMS_STRIPPED: Local symbols stripped from file. IMAGE_FILE_AGGRESIVE_WS_TRIM: Agressively trim working set IMAGE_FILE_LARGE_ADDRESS_AWARE: App can handle >2gb addresses IMAGE_FILE_BYTES_REVERSED_LO: Bytes of machine word are reversed. IMAGE_FILE_32BIT_MACHINE: 32 bit word machine. IMAGE_FILE_DEBUG_STRIPPED: Debugging info stripped from file in .DBG file IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP: If Image is on removable media, copy and run from the swap file. IMAGE_FILE_NET_RUN_FROM_SWAP: If Image is on Net, copy and run from the swap file. IMAGE_FILE_SYSTEM: System File. IMAGE_FILE_DLL: File is a DLL. IMAGE_FILE_UP_SYSTEM_ONLY: File should only be run on a UP machine IMAGE_FILE_BYTES_REVERSED_HI: Bytes of machine word are reversed. DLL Characteristics (0x%X): IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE: DLL can move. IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY: Code Integrity Image IMAGE_DLLCHARACTERISTICS_NX_COMPAT: Image is NX compatible IMAGE_DLLCHARACTERISTICS_NO_ISOLATION: Image understands isolation and doesn't want it IMAGE_DLLCHARACTERISTICS_NO_SEH: Image does not use SEH. No SE handler may reside in this image IMAGE_DLLCHARACTERISTICS_NO_BIND: Do not bind this image. IMAGE_DLLCHARACTERISTICS_WDM_DRIVER: Driver uses WDM model. IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE: Remote Desktop Services aware. Not enough arguments! Invalid relocation table! Relocation table size: %X Failed to get SEH (disabled?) Failed to get VEH (loaded symbols for ntdll.dll?) Failed to get VCH (loaded symbols for ntdll.dll?) Failed to get UnhandledExceptionFilter (loaded symbols for kernelbase.dll?) Failed to get UnhandledExceptionFilter (loaded symbols for kernel32.dll?) Delete breakpoint failed (BpDelete): %p Could not enable breakpoint %p (SetBPX) Could not enable breakpoint %p (BpEnable) Could not disable breakpoint %p (BpEnable) Could not disable breakpoint %p (DeleteBPX) Invalid addr: "%s" Breakpoint already set! Error setting breakpoint at %p! (IsBPXEnabled) Error setting breakpoint at %p! (memread) Error setting breakpoint at %p! (bpnew) Error handling invalid breakpoint at %p! (bpdel) Breakpoint at %p (%s) set! Breakpoint at %p set! No breakpoints to delete! All breakpoints deleted! Delete breakpoint failed (bpdel): %p No such breakpoint "%s" Breakpoint deleted! No breakpoints to enable! All breakpoints enabled! Breakpoint already enabled! Breakpoint enabled! No breakpoints to disable! All breakpoints disabled! Breakpoint already disabled! Breakpoint disabled! Delete hardware breakpoint failed (BpDelete): %p Delete hardware breakpoint failed (DeleteHardwareBreakPoint): %p Did not enable hardware breakpoint %p (all slots full) Could not enable hardware breakpoint %p (BpEnable) Could not enable hardware breakpoint %p (SetHardwareBreakPoint) Could not disable hardware breakpoint %p (BpEnable) Could not disable hardware breakpoint %p (DeleteHardwareBreakPoint) Invalid type, assuming 'x' Invalid size, using 1 Address not aligned to %d You can only set 4 hardware breakpoints Hardware breakpoint already set! Error setting hardware breakpoint (bpnew)! Error setting hardware breakpoint (TitanEngine)! Hardware breakpoint at %p set! No hardware breakpoints to delete! All hardware breakpoints deleted! Delete hardware breakpoint failed: %p (BpDelete) Delete hardware breakpoint failed: %p (DeleteHardwareBreakPoint) No such hardware breakpoint "%s" Hardware breakpoint deleted! No hardware breakpoints to enable! All hardware breakpoints enabled! Hardware breakpoint already enabled! Could not enable hardware breakpoint %p (SetHardwareBreakpoint) Hardware breakpoint enabled! No hardware breakpoints to disable! All hardware breakpoints disabled! Hardware breakpoint already disabled! Could not disable hardware breakpoint %p (DeleteHardwareBreakpoint) Hardware breakpoint disabled! Delete memory breakpoint failed (BpDelete): %p Could not enable memory breakpoint %p (BpEnable) Could not disable memory breakpoint %p (BpEnable) Could not disable memory breakpoint %p (RemoveMemoryBPX) Invalid type (argument ignored) Memory breakpoint already set! Error setting memory breakpoint! (BpNew) Error setting memory breakpoint! (SetMemoryBPXEx) Memory breakpoint at %p[%p] set! Invalid type specified! No memory breakpoints to delete! All memory breakpoints deleted! Delete memory breakpoint failed: %p (BpDelete) Delete memory breakpoint failed: %p (RemoveMemoryBPX) No such memory breakpoint "%s" Memory breakpoint deleted! No memory breakpoints to enable! All memory breakpoints enabled! Memory breakpoint already enabled! Memory breakpoint enabled! No memory breakpoints to disable! All memory breakpoints disabled! Memory breakpoint already disabled! Memory breakpoint disabled! Could not delete DLL breakpoint %s (BpDelete) Could not delete DLL breakpoint %s (LibrarianRemoveBreakPoint) Could not enable DLL breakpoint %s (BpEnable) Could not enable DLL breakpoint %s (LibrarianSetBreakPoint) Could not disable DLL breakpoint %s (BpEnable) Could not disable DLL breakpoint %s (LibrarianRemoveBreakPoint) Error creating Dll breakpoint! (BpNewDll) Error creating Dll breakpoint! (LibrarianSetBreakPoint) Dll breakpoint set on "%s"! No DLL breakpoints to delete! All DLL breakpoints deleted! Failed to find DLL breakpoint '%s'... Failed to remove DLL breakpoint (BpDelete)... Failed to remove DLL breakpoint (dbgdeletedllbreakpoint)... DLL breakpoint removed! No DLL breakpoints to enable! All DLL breakpoints enabled! No such DLL breakpoint "%s" DLL breakpoint already enabled! DLL breakpoint enable! No DLL breakpoints to disable! All DLL breakpoints disabled! DLL breakpoint already disabled! DLL breakpoint disabled! Could not delete exception breakpoint %p (BpEnable) Could not enable exception breakpoint %p (BpEnable) Could not disable exception breakpoint %p (BpEnable) Invalid exception code: %s. Exception breakpoint %X (%s) already exists! Invalid exception type! Failed to set exception breakpoint! (BpNew) No exception breakpoints to delete! All exception breakpoints deleted! Delete exception breakpoint failed (bpdel): %p No such exception breakpoint "%s" Exception breakpoint deleted! No exception breakpoints to enable! All exception breakpoints enabled! Exception breakpoint already enabled! Exception breakpoint enabled! No exception breakpoints to disable! All exception breakpoints disabled! Exception breakpoint already disabled! Exception breakpoint disabled! argument count mismatch! Something went wrong... Default breakpoint type set to: %s Can't set %s on breakpoint "%s" breakpoint name break condition logging text logging condition command on hit command condition log file Can't set fast resume on breakpoint "%s" Can't set singleshoot on breakpoint "%s" Can't set silent on breakpoint "%s" Can't set hit count on breakpoint "%s" Skipped INT3! Resolved shortcut "%s" -> "%s" Resolved arguments from shortcut "%s" Resolved working directory from shortcut "%s" Could not open file! Debugging: %s Invalid PE file! Use x32dbg to debug this file! Use x64dbg to debug this file! Finalizing the debugger thread took more than 10 seconds. This can happen if you are loading large symbol files or saving a large database. The debuggee did not stop after 10 seconds of requesting termination. The debugger state may be corrupted. It is recommended to restart x64dbg. Could not open process %X! Process is already being debugged! IsWow64Process failed! Use x32dbg to debug this process! Use x64dbg to debug this process! Could not get module filename %X! DetachDebuggerEx failed... Detached! Not debugging! Program is not running The active thread is suspended, switch to a running thread to pause the process Error resuming thread Exception will be swallowed Exception will be thrown in the program Invalid variable "%s" Variable size not supported. invalid argument "%s"! Invalid dest "%s" Invalid hex string "%s" Invalid destination "%s" Failed to write to %p Invalid src "%s" Failed to read (all) memory... Failed to read register context... Usage: movdqu xmm0, [address] / movdqu [address], xmm0 / movdqu xmm0, xmm1 Invalid thread %s Invalid address "%s"! Invalid stack address! Invalid address %p! No graph generated... Stack is now frozen Stack is now unfrozen Script Script Address Address Data Invalid argument 1 : %s Invalid argument 2 : %s Address "%s" doesn't belong to any module! VirtualAllocEx failed User-allocated memory $lastalloc is zero, provide a page address VirtualFreeEx failed Invalid address specified Memset failed Memory %p (size: %.8X) set to %.2X Error: using an address as arg1 Error getting rights of page: %s Page: %p, Rights: %s Error: Using an address as arg1 and as arg2: Execute, ExecuteRead, ExecuteReadWrite, ExecuteWriteCopy, NoAccess, ReadOnly, ReadWrite, WriteCopy. You can add a G at first for add PAGE GUARD, example: GReadOnly Error: Set rights of %p with Rights: %s New rights of %p: %s Failed to write file... %p[%llX] written to "%s" ! %p[%X] written to "%s" ! Cannot dump while running... Dump saved! MiniDumpWriteDump failed. GetLastError() = %s. Directory '%s' doesn't exist Current directory changed! Debugger hidden Something went wrong Error: you must specify the name of the DLL to load Error: couldn't get kernel32:LoadLibraryW Error: couldn't allocate memory in debuggee Error: couldn't write process memory Error: couldn't SetBPX Error: the specified address does not point inside a module Error: couldn't get kernel32:FreeLibrary Invalid expression: "%s"! Invalid address: %p! Failed to assemble "%s" (%s) Error run the debugger as Admin to setjit Error setting JIT %s Error there is no old JIT entry stored. New OLD JIT stored: %s Unknown JIT entry type. Use OLD, x64 or x32 as parameter. Error using x64 arg. The debugger is not a WOW64 process Error unknown parameters. Use old, oldsave, restore, x86 or x64 as parameter. New JIT %s: %s Error getting JIT %s OLD JIT entry stored: %s JIT %s: %s Error getting JIT auto %s Unknown JIT auto entry type. Use x64 or x32 as parameter. Error using x64 arg the debugger is not a WOW64 process JIT auto %s: %s Error run the debugger as Admin to setjitauto Error setting JIT Auto. Use ON:1 or OFF:0 arg or x64/x32, ON:1 or OFF:0. Error unknown parameters. Use ON:1 or OFF:0 Error setting JIT auto x64 Error setting JIT auto x32 Error unknown parameters. Use x86 or x64 and ON:1 or OFF:0 Error getting JIT auto x64 Error getting JIT auto x32 Error unknown parameters use x86 or x64, ON/1 or OFF/0 New JIT auto %s: %s Command line: %s Error: write the arg1 with the new command line of the process debugged New command line: %s No description or empty description Error: Configuration not found. Error updating configuration. Could not find the specified privilege: %s DuplicateHandle failed: %s Handle %llX closed! Handle %X closed! Error loading Scylla.dll! Could not find export 'ScyllaStartGui' inside Scylla.dll Scylla is already loaded Press OK to reload the plugin... Reload No call stack. %llu call stack frames (RIP = %p , RSP = %p , RBP = %p ): %u call stack frames (EIP = %p , ESP = %p , EBP = %p ): Failed to transform pattern! Invalid memory address %p! Failed to read memory! Pattern: %s Disassembly Disassembly [Error disassembling] %d occurrences found in %ums MemFindInMap failed! Failed to assemble "%s" (%s)! Command: "%s" %u result(s) in %ums Constant: %p Range: %p-%p %u reference(s) in %ums String Address String Follow in Disassembly and Dump Follow string in Dump Function pointer Label Etikett Strings %u string(s) in %ums Function pointers %u function pointer(s) in %ums Destination Calls Calls %u call(s) in %ums GUID ProgId Path Sti Description RegOpenKeyExW() failed. Cannot enumerate GUIDs. %u GUID(s) in %ums Invalid expression: "%s" Create thread failed! Thread %s created at %s %p(Argument=%llX) Thread %s created at %s %p(Argument=%X) Thread switched! Error suspending thread Thread suspended Thread resumed! Thread terminated Error terminating thread! %d/%d thread(s) suspended %d/%d thread(s) resumed Unknown priority value, read the help! Error setting thread priority Thread priority changed! Failed to change the name for thread %s Thread name set to "%s"! Thread name changed from "%s" to "%s"! Trace already active Cannot start a trace when running, pause execution first. Invalid expression "%s" Run to party is busy. EncodeMapSetType failed... AddType failed AddStruct failed AddUnion failed AddMember failed AppendMember failed Unknown calling convention "%s" AddFunction failed AddArg failed AppendArg failed SizeofType failed VisitType failed RemoveType failed Type %s removed LoadTypes failed Types loaded No such variable "%s"! Failed to set variable "%s"! Variable "%s" is not a string! Failed to get variable size "%s"! Failed to get variable data "%s"! MemPatch failed! String written! Database cleared! Error setting comment Error deleting comment Comments Kommentarer Comment Kommentar No comments Delete %d comment(s) listed in Reference View All comments deleted! Error setting label Error deleting label Labels Etiketter No labels %d label(s) listed in Reference View All labels deleted! Failed to set bookmark! Bookmark set! Failed to delete bookmark! Bookmark deleted! Bookmarks Bokmerker No bookmarks found %d bookmark(s) listed All bookmarks deleted! Failed to add function Function added! Failed to delete function Function deleted! Functions Funksjoner Start End Size Størrelse Disassembly (Start) No functions %d function(s) listed All functions deleted! Failed to add argument Argument added! Failed to delete argument Argument deleted! Arguments Label/Comment No arguments %d argument(s) listed All arguments deleted! Failed to add loop Loop added! Failed to delete loop Loop deleted! Loops Depth Parent No loops %d loop(s) listed All loops deleted! Invalid variable name "%s" Invalid value "%s" Error creating variable "%s" Could not delete variable "%s" Deleted variable "%s" No variables! Error listing variables! Variables Value (Hex) Variable Value (Decimal) Property User Variable System Variable Read Only Variable No enough arguments for addwatch No enough arguments for delwatch Error expression in argument 1. Unknown watchdog mode. No enough arguments for SetWatchType Unknown watch type. No enough arguments for SetWatchExpression No enough arguments for SetWatchName Saving database to %s Failed to write database file !(GetLastError() = %s) %ums Loading commandline... Loading database from %s (migrating breakpoints) Invalid database file! Failed to read database file !(GetLastError() = %s) Invalid database file (JSON)! Warning: Failed to create database folder '%s'. GetLastError() = %s Cannot write to the program directory (GetLastError() = %s), try running x64dbg as admin... Database file: %s WARNING: The database has a checksum that is different from the module you are debugging. It is possible that your debuggee has been modified since last session. The content of this database may be incorrect. Missing operand Failed to convert operand Operand value too big Invalid operand (FromHex failed) Invalid size (expected %llu, got %llu) Invalid size (expected %u, got %u) 80bit extended float is not supported Invalid string literal String too long Dest buffer too small Thread switched from %X to %X ! Module: %s - Modul: %s- (switched from %s) %s - PID: %s - %sThread: %s%s%s %s breakpoint "%s" at %s! %s breakpoint at %s! execute read/write write Hardware breakpoint (%s%s) "%s" at %s! Hardware breakpoint (%s%s) at %s! (read) (write) (execute) (read/write/execute) Memory breakpoint%s "%s" at %s, exception address: %s! Memory breakpoint%s at %s, exception address: %s! DLL Load DLL Load DLL Unload DLL Unload DLL Load and unload DLL Breakpoint %s (%s): Module %s DLL Breakpoint (%s): Module %s Exception Breakpoint %s (%p) at %p! paused! Breakpoint reached not in list! Error when evaluating break condition. Error when evaluating log condition. Error when evaluating command condition. Failed to open breakpoint log: %s (%s) User code reached at %s Breakpoint %p has been disabled because the bytes don't match! Expected: %02X %02X, Found: %02X %02X Could not set breakpoint %p! (SetBPX) MemRead failed on breakpoint address %p! Could not set memory breakpoint %p! (SetMemoryBPXEx) Could not set hardware breakpoint %p! (SetHardwareBreakPoint) Set hardware breakpoint on %p! Could not delete breakpoint %p! (DeleteBPX) Could not delete memory breakpoint %p! (RemoveMemoryBPX) Could not delete hardware breakpoint %p! (DeleteHardwareBreakPoint) Trace finished after %llu steps! Trace finished after %u steps! ??? (GetFileNameFromHandle failed) Process Started: %p %s TLS Callback %d %d invalid TLS callback addresses... entry breakpoint Process stopped with exit code %s Thread %s created, Entry: %s, Parameter: %s Thread Entry Thread Entry Thread %s Stack No threads left to switch to (bug?) Thread %s exit Error: Cannot load global initialization script. Error: Cannot load debuggee initialization script. System breakpoint reached! It has been detected that the debuggee entry point is in the MZ header of the executable. This will cause strange behavior, so the system breakpoint has been enabled regardless of your setting. Be careful! TLS Callback Waiting until ntdll.dll symbols are loaded... Set LdrpDebugFlags to 0x%08X successfully! Failed to write to LdrpDebugFlags Symbol 'LdrpDebugFlags' not found! Failed to find LdrpDebugFlags (you need to load symbols for ntdll.dll) DLL Loaded: %p %s DLL Unloaded: %p %s DebugString: "%s" SetThreadName exception on %p (%X, "%s") First chance exception on %p (%.8X, %s)! First chance exception on %p (%.8X)! Last chance exception on %p (%.8X, %s)! Last chance exception on %p (%.8X)! Attached to process! Error debugging DLL (failed to copy loader) Error debugging DLL (loaddll.exe not found) The executable you are trying to debug requires elevation. Restart as admin? Elevation Error starting process (CreateProcess, %s)! Attach to process failed: %s Debugging stopped! Drivers known to interfere with x64dbg's operation have been detected. List of drivers: %s Do you want to continue debugging? Invalid line in exception database: "%s" Failed to convert number in exception database "%s" invalid dest "%s" Expression evaluated to a string: "%s" No such expression function '%s' number string any invalid Bad argument count for expression function %s (expected %s, got %d)! Expression function %s argument %d/%d (%s) type mismatch (expected %s, got %s)! Expression function %s errored! Expression function %s returned an invalid value! Invalid argument... Too much data (10MB max)... Failed to read memory... Invalid size... Debuggee Debuggee Cannot restore last instruction. History record is empty Reserved (%p) Reserved TEB (%s) WoW64 TEB (%s) Stack (%s) Failed to read mnemonic help database... Failed to load mnemonic help database... Mnemonic help database loaded! Invalid mnemonic! Too many redirections... invalid instruction Invalid relocation block for module %s%s! Invalid relocation entry for module %s%s! Illegal relocation type 0x%02X for module %s%s! Unknown CodeView signature %08X for module %s%s... Skipping unsupported debug type %s in module %s%s... Did not find any supported debug types in module %s%s! Exception while getting module info (%s), please report... Module %s%s: invalid PE file! No patches to apply Not all patches are in module %s Failed to get base of module %s Failed to get module path of module %s Failed to make a copy of the original file (patch target is in use?) Unable to obtain attributes for copied file StaticFileLoad failed StaticFileUnload failed [PLUGIN] %s already loaded [PLUGIN] Cannot find plugin: %s [PLUGIN] Failed to load plugin: %s [PLUGIN] Export "pluginit" not found in plugin: %s [PLUGIN] pluginit failed for plugin: %s [PLUGIN] %s is incompatible with this SDK version [PLUGIN] %s v%d Loaded! [PLUGIN] GuiMenuAdd(%d) failed for plugin: %s [PLUGIN] %s unloaded [PLUGIN] %s not found [PLUGIN] Ignoring top-level plugin in favor of the directory 'plugins\%s' [PLUGIN] Invalid plugin handle %d... [PLUGIN, %s] Command "%s" failed to register... [PLUGIN, %s] Command "%s" registered! [PLUGIN, %s] Command "%s" unregistered! [PLUGIN, %s] Command "%s" failed to unregister... [PLUGIN, %s] Expression function "%s" failed to register... [PLUGIN, %s] Expression function "%s" registered! [PLUGIN, %s] Expression function "%s" unregistered! [PLUGIN, %s] Expression function "%s" failed to unregister... [PLUGIN, %s] Format function "%s" failed to register... [PLUGIN, %s] Format function "%s" registered! [PLUGIN, %s] Format function "%s" unregistered! [PLUGIN, %s] Format function "%s" failed to unregister... Invalid memory page 0x%p %s (Region %s) %s (Region %p) Region Search Couldn't locate module for 0x%p Module Search Couldn't get module list User Modules (%s) System Modules (%s) All Modules (%s) FileHelper::ReadAllText failed... Empty label detected on line %d! Duplicate label "%s" detected on lines %d and %d! Invalid branch label "%s" detected on line %d! Script finished! Error executing command! The script is too busy. Would you like to terminate it now? Script is terminated by user. Debugger must be paused to run a script! Pointer to SEH_Record[%d] End of SEH Chain return to %s from %s [Formatting Error] Module not found... Module has no symbol information... No symbol path specified... Symbol file '%s' exists but could not be loaded! No symbol store URL specified... Downloading symbol %s Signature: %s Destination: %s URL: %s Failed to create destination file (%s)... InternetOpen failed (%s)... InternetOpenUrl failed (%s)... Connection succeeded, but download failed (status code: %d)... Download interrupted... Download incomplete... Finished downloading symbol %s in %.03fs Main Thread Failed to suspend thread 0x%X... Failed to add %s %s; Failed to add typedef %s %s; Failed to add function %s %s() Failed to add member %s %s.%s; Failed to add argument %s %s.%s; Not debugging valfromstring_noexpr failed on %s Failed to read memory Invalid value: "%s"! Failed to write memory Watchdog %s (expression "%s") is triggered at %p ! Original value: %p, New value: %p Watch %u command cut at ~%d characters [Script DLL] Calling export "AsyncStart"... [Script DLL] "AsyncStart" returned! [Script DLL] Calling FreeLibrary... success! failure (%s)... [Script DLL] Loading Script DLL "%s"... [Script DLL] DLL loaded on 0x%p! [Script DLL] Creating thread to call the export "AsyncStart"... [Script DLL] Calling export "Start"... [Script DLL] "Start" returned! [Script DLL] Failed to find the exports "AsyncStart" or "Start" (%s)! [Script DLL] LoadLibary failed (%s)! Retrieving syscall indices... Syscall indices loaded! Failed to load syscall indices... Error codes database loaded! Failed to load error codes... Exception codes database loaded! Failed to load exception codes... NTSTATUS codes database loaded! Failed to load NTSTATUS codes... Windows constant database loaded! Failed to load Windows constants... Reading notes file... Reading notes failed... File read thread finished! Initializing wait objects... Initializing debugger... Initializing debugger functions... Setting JSON memory management functions... Getting directory information... Start file read thread... It is strongly discouraged to use symbol servers in your path directly (use the store option instead). Do you want me to fix this? Symbol Path: %s Allocating message stack... Initializing global script variables... Registering debugger commands... Registering GUI command handler... Registering expression functions... Registering format functions... Default Registering Script DLL command handler... Script DLL Starting command loop... Initialization successful! Loading plugins... Handling command line... Stopping command thread... Stopping running debuggee... Aborting scripts... Unloading plugins... Cleaning up allocated data... Cleaning up wait objects... Cleaning up debugger threads... Saving notes... Exit signal processed successfully! %1 occurrence(s) in %2ms DebugStatusLabel Initialized Paused Running Terminated DisassemblerGraphView Use Graph command or menu action to draw control flow graph here... Large number of nodes The graph you are trying to render has a large number of nodes (%1). This can cause x64dbg to hang or crash. It is recommended to save your data before you continue. Do you want to continue rendering this graph? Follow in &Disassembler Følg i Disassembler Xrefs... Expression Uttrykk Previous Foregående Next Neste &Address: & Adresse: &Constant: & Konstant: &Value: & Verdi: Block incoming: %1 Block exit %1 Go to Gå til Help on mnemonic Hjelp på mnemonic &Highlighting mode &Highlighting modus &Zoom 100% &Fit to window &Overview S&ummary &Sync with %1 &Refresh &Oppdatere &Save as image Narrow Medium Wide Layout Detach Koble fra Copy token &text Copy token &value Save as image PNG file (*.png);;WebP file (*.webp);;BMP file (*.bmp);;TIFF file (*.tif) Error Feil Image saving failed! Disassembly Address Address Bytes Bytes Disassembly Disassembly Mnemonic brief Comments Kommentarer EditBreakpointDialog Edit breakpoint Redigere breakpoint <html><head/><body>This text will be logged whenever the log condition is true.String formatting can be used to print variables.</body></html> &Log Text: & Logg tekst: <html><head/><body>If this expression is evaluated to 1 the breakpoint will break.Set to 0 for a breakpoint that never breaks, but can still do logging and execute command.</body></html> &Break Condition: &Break tilstand: Example: arg(0) == 123 (numbers are hex by default) <html><head/><body>String logging is enabled whenever this expression is evaluated to 1.</body></html> Lo&g Condition: Lo&gg tilstand: &Name: &Navn: <html><head/><body>This command will be executed whenever command condition is true.Currently certain commands, for example, stepping from breakpoint command are not supported.</body></html> &Command Text: &Kommando tekst: <html><head/><body>The number of times the breakpoint is hit.</body></html> &Hit Count: &Antall treff: <html><head/><body>If this expression is evaluated to 1 the command specified above is executed when the breakpoint is hit.Set the expression to 1 to always execute the command.</body></html> C&ommand Condition: C&ommand Condition: Log F&ile... <html><head/><body>Remove the breakpoint once it pauses the debuggee.</body></html> Singlesho&ot <html><head/><body>Don't print the default breakpoint log.</body></html> &Silent <html><head/><body>Don't enable extended conditional breakpoint features and plugins.</body></html> &Fast Resume &Raskt gjenoppta &Save &Lagre C&ancel C & ancel Edit DLL Breakpoint %1 Edit Breakpoint %1 Edit Hardware Breakpoint %1 Edit Memory Breakpoint %1 Edit Exception Breakpoint %1 Breakpoint log file Enter the path to the log file. Log Files (*.txt *.log);;All Files (*.*) EditFloatRegister Dialog Dialog Double: Dobbel: Word: Float: Float: Byte: Byte: Qword: Dword: High: High: 10-11 12-13 14-15 16-17 18-19 1A-1B 1C-1D 1E-1F Low: Lav: 0-1 0-1 2-3 2-3 4-5 4-5 6-7 6-7 8-9 8-9 A-B A-B C-D C-D E-F E-F &Hexadecimal &Hexadecimal &Signed &Signed &Unsigned &Unsigned &OK &OK &Cancel &Avbryt Error, register size %1 is not supported. ExceptionRangeDialog Range Rekkevidde Start: Start: End: Slutt: OK Ok Cancel Avbryt ExportCSV Export data in CSV format Enter the CSV file name to export CSV files (*.csv);;All files (*.*) CSV export error Saved CSV data at %1 FavouriteTools Favourites Tools &Add... &Edit & Redigere &Remove &Fjerne De&scription... &Up &Opp &Down &Ned Script Script Command Kommando Shortcut Snarvei Clear &OK &OK &Cancel & Avbryt Path Sti Description Browse tool Enter the path of the tool. Executable Files (*.exe);;All Files (*.*) Enter the description This string will appear in the menu. Select script Velg skript Script files (*.txt *.scr);;All files (*.*) Skript filer (*.txt *.scr); Alle filer (*.*) Enter the command you want to favourite Example: bphws csp Enter a new command Example: bphws ESP GotoDialog Enter expression to follow... Angi uttrykket å følge... &OK &OK &Cancel &Avbryt Not debugging... Not debugging... Invalid expression... Invalid expression... File offset Shortcuts: Correct expression! -> rette uttrykk! -> Invalid file offset... ugyldig Filforskyvning... Invalid memory address... ugyldig minneadresse... Memory out of range... minne utenfor området... HandlesView Type Type Type number Type nummer Handle Håndtere Access Tilgang Name Navn Proc Title Class Thread Style StyleEx Parent Size Størrelse Enable Remote address Ekstern adresse Local address Lokal adresse State Tilstand Privilege Privilegier Windows Handles Håndtak TCP Connections Privileges &Refresh &Oppdatere Close handle Lukk håndtaket Disable Privilege: Deaktivere privilegium: Enable Privilege: Aktiver privilegium: Disable all privileges Deaktiver alle rettigheter Enable all privileges Aktiver alle rettigheter Enable window Disable window Follow Proc in Disassembler Follow in Threads Toggle Breakpoint in Proc Message Breakpoint TCP Connection enumeration is only available on Windows Vista or greater. TCP-tilkobling enumeration er bare tilgjengelig på Windows Vista eller senere. Enabled Aktivert Unknown Ukjent &Copy &Kopi (Desktop window) Disabled Deaktivert HexDump &Selected lines &Address &Adresse Error! Feil! Selection not in a module... Address Address HexEditDialog HexEdit HexEdit Hex Hex Warning: Data cannot be represented in selected codepage. ASCII ASCII &UNICODE: &UNICODE: Last &Codepage: Code&page... &Hex: &Hex: String Convert to Windows style line ending. CR LF Copy data Copy Kopier Items per line: &Keep Size &Bevar Størrelsen &Entire Block &Hele blokken Start from &Selection &OK &OK &Cancel &Avbryt C-Style BYTE (Hex) C-Style WORD (Hex) C-Style DWORD (Hex) C-Style QWORD (Hex) C-Style String C-Style Unicode String C-Style Shellcode String ASM-Style BYTE (Hex) ASM-Style WORD (Hex) ASM-Style DWORD (Hex) ASM-Style QWORD (Hex) ASM-Style String Pascal BYTE (Hex) Pascal WORD (Hex) Pascal DWORD (Hex) Pascal QWORD (Hex) Python 3 BYTE (Hex) Unicode String UTF8 String UCS4 String Hex Stream GUID IP Address (IPv4) IP Address (IPv6) Base64 LabeledSplitter &Detach &Collapse &Expand LineEditDialog Dialog Dialog CheckBox Avmerkingsboksen &OK &OK &Cancel &Avbryt CT: %1%2 LocalVarsView Name Navn Expression Uttrykk Value &Follow in Dump & Følge i Dump Follow DWORD in Dump Follow QWORD in Dump Follow in Stack Følg i stack Follow DWORD in Stack Follow QWORD in Stack Follow in Memory Map &Modify Value & Endre verdi &Rename &Copy & Kopi Base Register Local%1 Arg%1 Rename local variable "%1" Edit %1 at %2 LogView Find For Clea&r Clea&r &Copy &Kopi &Paste &Lim inn Select &All Velg &Alle &Save &Lagre Disable &Logging Deaktiver &Logging &Redirect Log... Auto Scrolling Copy To Notes &Global &Debuggee Find Find Next Occurance Find Previous Occurance Enable &Logging Aktiver &Logging Stop &Redirection Invalid address! The address %1 is not a valid memory location... Url is not valid! The Url %1 is not supported fwrite() failed (GetLastError()= %1 ). Log redirection stopped. Log redirection is stopped. Log is not redirected. _wfopen() failed. Log will not be redirected to %1. Log will be redirected to %1. Redirect log to file Enter the file to which you want to redirect log messages. Log files (*.txt);;All files (*.*) Logging will be enabled. Logging will be disabled. Error, log have not been saved. Feil, Logg er ikke lagret. Log have been saved as %1 MHTabBar &Detach &Close & Lukk MainWindow x64dbg x64dbg &File &Fil &Recent Files &Siste filer Database &View &Visning &Debug &Debug Advanced &Help &Hjelp &Plugins &Plugins &Options & Alternativer &Theme Favour&ites Traci&ng Trace &coverage Toolbar CommandBar &Open &Åpne Run the file and start debugging. E&xit &Avslutt Exit x64dbg. &Run &Kjør Run the debuggee or restart debugging. &Pause &Pause Pause the execution of debuggee to debug it, or stop animate into/animate over. Re&start Re&start Stop the debuggee and restart it, or restart the last debugged file. &Close &Lukk Terminate the debuggee and stop debugging. Step &into Trin &inntil Execute a single instruction Step &over Trinn &over Execute a single instruction without entering the CALL instruction Co&mmand Co&mmand Focus on the command bar E&xecute till return E&xecute till return Trace over until the RET instruction would be executed and stack pointer is less than or equal to current value. &Memory Map &Memory Map Show the Memory Map tab. &Log Window & Logg vindu Show the Log tab. &About &Om Display information about x64dbg Scylla Scylla &Breakpoints %Breakpoints Show the Breakpoints tab. Step into (pass all exceptions) Execute a single instruction, pass exceptions to the debuggee. Step over (pass all exceptions) Run (pass all exceptions) Run the debuggee and pass all exceptions to the debuggee without pausing. Execute till return (pass all exceptions) &Script &Script Script Script Show the Script tab. Run &until selection Kjør & inntil utvalg Run until selection Kjøre inntil utvalg Put a breakpoint on selection and run the debuggee. &CPU &CPU CPU CPU Show the CPU tab to display the disassembly. Symbol &Info Symbol &Info Symbol Info Symbol Info Show the Symbols tab. &References &Referanser References Referanser Show the References tab. &Threads &Threads Threads Threads Show the Threads tab. &Preferences &Innstillinger Preferences Opem the Preferences dialog. &Find Strings &Søk strenge Find Strings Finn strenge Find possible strings in the current module. Equivalent command "strref" &Appearance &Utseende Open the Appearance dialog to adjust color and font settings. Find Intermodular Calls Finn Intermodular Calls Find intermodular calls in the current module. Equivalent command "modcallfind" Patch file... Patches Patches Open the patch dialog. Comments Kommentarer Show a list of comments. Equivalent command "commentlist" Labels Etiketter Show a list of labels. Equivalent command "labellist" Bookmarks Bokmerker Show a list of bookmarks. Equivalent command "bookmarklist" Functions Funksjoner Show a list of functions. Equivalent command "functionlist" Check for &Updates Sjekk for &Oppdateringer Connect to Github to check for updates Call Stack Call Stack Show the Call Stack tab. Hotkeys Open the Hotkeys dialog to customize keyboard hotkeys. &Donate &Donere Donate Doner Open https://donate.x64dbg.com Åpne https://donate.x64dbg.com Calculator Kalkulator Open the Calculator dialog. Attach Feste Attach the debugger to a process to debug it. Detach Koble fra Detach from the debuggee so that it continues running without being debugged. Change Command &Line Endre kommandoen &Linje Set the command line of the debuggee. Skip next instruction Hopp over neste instruksjon Topmost Øverste Topmost Window Øverste vindu Make x64dbg topmost &Report Bug &Rapportere feil Report Bug Rapporter feil Open https://report.x64dbg.com Åpne https://report.x64dbg.com &Source &Kilde Source Kilde Show the Source tab. &Manual &Manual Open the CHM manual or online documentation at https://help.x64dbg.com &FAQ &FAQ FAQ FAQ Open https://faq.x64dbg.com Åpne https://faq.x64dbg.com SEH Chain SEH kjede Hide debugger (PEB) Skjul debugger (PEB) Modifies the PEB to hide debugger. Reload style.css Last inn igen style.css Read style.css from disk to apply theme changes. Notes Notater Show the Notes tab. Handles Håndtak Show the Handles tab. Trace over... Step over until a condition becomes true, and optionally log and execute commands when tracing. Equivalent command "tocnd" Trace into... Step into until a condition becomes true, and optionally log and execute commands when tracing. Equivalent command "ticnd" Bit Bit Enable trace coverage with 1 bit (whether an instruction was executed or not) Byte Byte Enable trace coverage with 1 byte to record how many times an instruction has been executed. Word Ord Enable trace coverage with 1 word to record how many times an instruction has been executed. Step into until reaching uncovered code Step into until reaching an instruction that was not covered before. Equivalent command "tibt" Step over until reaching uncovered code Step over until reaching an instruction that was not covered before. Equivalent command "tobt" Step into until reaching covered code Step into until reaching an instruction that has been covered before. Equivalent command "tiit" Step over until reaching covered code Step over until reaching an instruction that has been covered before. Equivalent command "toit" Disable Deaktiver Disable trace coverage Run to &user code Trace over until user code would be executed. Run until e&xpression Undo last instruction Generate crash dump &Manage Favourite Tools... Step over (source) Execute a single line of source code without entering the subroutine. Equivalent to "TraceOverConditional src.line(cip) && !src.disp(cip)" Step into (source) Execute a single source code line. Equivalent to "TraceIntoConditional src.line(cip) && !src.disp(cip)" &Graph Show the CPU tab and switch to Graph mode. Step into (swallow exception) Step over (swallow exception) Run (swallow exception) Run the debuggee and ignore all exceptions so the debuggee will not process the exception. Blog Open https://blog.x64dbg.com Åpne https://blog.x64dbg.com Animate into Execute the step into command at a fixed pace Animate over Execute the step over command at a fixed pace Animate command... Execute a command at a fixed pace System breakpoint scripts Set the script file to run automatically when the system breakpoint is reached. Import settings... Import settings from an external file Customize menus Open the Customize Menus dialog to hide infrequently used menu items into the "more commands" submenu. &Import database Open an external database file to import data. &Export database Previous Tab Show the tab on the left. Next Tab Show the tab on the right. Previous View Show the tab history popup window and select more recently used tab. Next View Show the tab history popup window and select previously viewed tab. Hide Tab Hide the current tab. The hidden tab can be reopened from the View menu. &Variables Show a list of x64dbg variables. Equivalent command "varlist" Restart as Admin Restart x64dbg under Administrator privilege. Plugins Open https://plugins.x64dbg.com Åpne https://plugins.x64dbg.com Trace Show the Trace tab. Modules Show the Symbols tab. Note that the Modules list is in the symbols tab. &Default &Save database Save all data. The database will be automatically saved when debugging is stopped. Re&load database Discard all modifications and read all data from disk. &Restore backup database Read data from the backup database to recover from database corruption. &Clear database Clear all data. About Qt Display information about Qt Mnemonic Help Output the detailed help information about an assembly mnemonic to the log. Equivalent command "mnemonichelp name". %1 (%2) %1 [Elevated] Log Logg Symbols Symboler Breakpoints Breakpoints Memory Map Memory Map SEH SEH Favourite Toolbox Command: Kommando: Ready Klar Languages Dark Always stop the debuggee and exit The debuggee is still running and will be terminated if you exit. What do you want to do? Debuggee is still running &Exit Stop the debuggee and exit x64dbg. &Detach and exit Detach from the debuggee (leaving it running) and exit x64dbg. &Restart debugging Restart the debuggee and keep x64dbg open. &Continue debugging Close this dialog and continue where you left off. Unsupported system You are running x64dbg in ARM64 emulation mode. This system is not supported by x64dbg and will cause unexpected behavior. Analyzing malware in this environment is dangerous and you should switch to an actual Intel/AMD CPU. For more information, see the <a href="%1">FAQ</a>. You are running x64dbg on an unsupported operating system version. Future updates will completely stop running on this system. For more information, see the official <a href="%1">announcement</a>. Error Feil Cannot start a trace when running, pause execution first. Open file Åpne fil Executables (*.exe *.dll);;All files (*.*) Kjørbare filer (*.exe *.dll); Alle filer (*. *) Disassembly Disassembly Dump Dumpe Stack Stack Enter expression to run to... Error! Feil! Patches can only be shown while debugging... All the money will go to x64dbg development. Alle pengene går til x64dbg's utvikling. You will visit x64dbg's official blog. You will be taken to a website where you can report a bug. Make sure to fill in as much information as possible. Du kommer til et nettsted der du kan sende en feilrapport. Husk å fylle ut så mye informasjon som mulig. This action will crash the debugger and generate a crash dump. You will LOSE ALL YOUR UNSAVED DATA. Do you really want to continue? Have fun debugging the debugger! Debugger detected! Mnemonic help Change Command Line Endre kommandolinje Cannot get remote command line, use the 'getcmdline' command for more information. Kan ikke få ekstern kommandolinje, bruk kommandoen "getcmdline" for mer informasjon. Could not set command line! Kan ikke angi kommandolinjen! New command line: Manual cannot be opened. Please check if x64dbg.chm exists and ensure there is no other problems with your system. Do you want to open online manual at https://help.x64dbg.com ? Vil du åpne online manual på https://help.x64dbg.com ? Open the Favourites dialog to manage the favourites menu Starting tool %1 The translation is nearly empty. Do you still want to use this language? New language setting will take effect upon restart. Animate command Example: StepInto Customize Menus Settings (*.ini);;All files (*.*) Import database Databases (%1);;Database backup (%1.bak);;All files (*.*) Export database Databases (%1);;All files (*.*) More Commands MemoryMapView Address Adresse Size Størrelse Party Info Info Page Information Sideinformasjon Content Content of section Type Type Allocation Type Allocation type Protection Beskyttelse Current Protection Gjeldende beskyttelse Initial Innledende Allocation Protection Allocation beskyttelse &Follow in Dump &Følg i Dump Follow in &Disassembler Følg i Disassembler &Follow in Symbols Set Page Memory Rights Angi siden minne rettigheter Memory &Breakpoint Minne &Breakpoint Access Tilgang &Singleshoot &Singleshoot &Restore &Gjenopprette Read Write Skrive Execute Execute &Remove &Fjerne &Allocate memory &Free memory Go to Gå til Expression Uttrykk &Find Pattern... &Finn mønster... &Dump Memory to File &Dump minnet til fil &Overwrite with Data from File Add virtual module Find references to region &Comment &Copy &Kopi Section &view Region &view User System Uninitialized data Initialized data Export tables Import tables Exception information Read-only initialized data Base relocations Resources Executable code Thread-local storage Warning You're trying to allocate a zero-sized buffer just now. Error Feil The size of buffer you're trying to allocate exceeds 1GB. Please check your expression to ensure nothing is wrong. Memory allocation failed! Find Pattern... Finn mønsteret... Dumping non-consecutive memory ranges is not supported! Save Memory Region Binary files (*.bin);;All files (*.*) Load Memory Region Address %0 not found in memory map... Enter the address to find... Add comment at Legg til kommentar på Error! Feil! DbgSetCommentAt failed! DbgSetCommentAt mislyktes! MenuBuilder More commands MessagesBreakpoints Message Breakpoint Messages: Break on any window Break on current window only (Invalid for next session) Use TranslateMessage OK Ok Cancel Avbryt ModuleStdTable Unloaded Loading Loaded NotesManager Global Global Debuggee Debuggee PageMemoryRights Set Page Memory Rights Angi sidens minne rettigheter Select ALL Velg alle Deselect ALL Fjern Alle Rights Rettigheter NO ACCESS INGEN TILGANG READ ONLY SKRIVE BESKYTTET READ WRITE LESE SKRIVE EXECUTE EXECUTE EXECUTE READ EXECUTE LESE FULL ACCESS FULL TILGANG WRITE COPY WRITE COPY EXECUTE WRITE COPY EXECUTE SKRIV TIL KOPI Set Rights Angi rettigheter PAGE GUARD PAGE GUARD Press CTRL or SHIFT key to select multiple pages Trykk CTRL eller SHIFT-tasten for å velge flere sider &Cancel & Avbryt Address Address Pages Rights Changed to: Sider rettigheter endret til: Error setting rights, read the MSDN to learn the valid rights of: Feil innstilling rettigheter, les MSDN og lær de gyldige rettigheter til: PatchDialog Patches Patches &Modules &Modules &Import &Import &Export &Eksport P&atches &Select All &Velg alle &Deselect All %Opphev alle &Restore Selected &Restaurere valgt Pick &Groups Plukk&Grupper &Patch File &Patch Filen Byte is located in relocation region Information Informasjon Nothing to patch! Ingenting å Patche! Error! Feil! Failed to get module filename... Kan ikke hente modulens filnavn... Save file Lagre filen All files (*.*) Alle filer (*.*) Failed to save patched file (%1) Kan ikke lagre Patched fil (%1) %1/%2 patch(es) applied! %1/%2 patch(es) brukt! Open patch Åpen Patch Patch files (*.1337) Patch filer (*.1337) The patch file is empty... Patch Filen er tom... Patch file format is incorrect... Patch filformat er feil... No patches to apply in the current process. Ingen Patches at tilføye gjelder i den gjeldende prosess. Question Spørsmål Some patches are already applied. Do you want to remove these patches? Vil du fjerne disse Patches? Some bytes do not match the original in the patch file. Do you want to apply these patches anyway? Noen byte samsvarer ikke med originalen i oppdateringfilen. Vil du tilføye Patchene allikevel? Save patch Gem Patch No patches to export. Ingen Patches at eksportere. %1 patch(es) exported! %1 patch(es) eksportert! Patches overlap with relocation regions Your patches overlap with relocation regions. This can cause your code to become corrupted when you load the patched executable. Do you want to continue? PatchDialogGroupSelector Group Selector Gruppevelger 0000000000000000 0000000000000000 &Toggle & Aktiver/Deaktiver &Previous &Tidligere &Next &Neste QObject DbgInit Error! ReferenceManager Close All Tabs ReferenceView &Follow in Disassembler & Følge i Disassembler Follow in &Dump Følg i & dump Follow &API Address Toggle Breakpoint Toggle Bookmark Set breakpoint on all commands Remove breakpoint on all commands Set breakpoint on all api calls Remove breakpoint on all api calls Total Progress %1% Set breakpoint on all calls to %1 Remove breakpoint on all calls to %1 Error! Feil! DbgSetBookmarkAt failed! DbgSetBookmarkAt mislyktes! RegistersView Copy value Copy floating point value Copy Symbol Value Copy all registers Change view Change SIMD Register Display Mode Display ST(x) Display x87rX Display MMX Hexadecimal Float Double Signed Word Signed Dword Signed Qword Unsigned Word Unsigned Dword Unsigned Qword Hexadecimal Word Hexadecimal Dword Hexadecimal Qword CF (Carry flag) PF (Parity flag) AF (Auxiliary Carry flag) ZF (Zero flag) SF (Sign flag) TF (Trap flag) IF (Interrupt enable flag) DF (Direction flag) OF (Overflow flag) Bit # Mask Flag <table cellspacing='7'> <thead>%1</thead> <tbody>%2</tbody></table> CF (bit 0) : Carry flag - Set if an arithmetic operation generates a carry or a borrow out of the most-significant bit of the result; cleared otherwise. This flag indicates an overflow condition for unsigned-integer arithmetic. It is also used in multiple-precision arithmetic. PF (bit 2) : Parity flag - Set if the least-significant byte of the result contains an even number of 1 bits; cleared otherwise. AF (bit 4) : Auxiliary Carry flag - Set if an arithmetic operation generates a carry or a borrow out of bit 3 of the result; cleared otherwise. This flag is used in binary-coded decimal (BCD) arithmetic. ZF (bit 6) : Zero flag - Set if the result is zero; cleared otherwise. SF (bit 7) : Sign flag - Set equal to the most-significant bit of the result, which is the sign bit of a signed integer. (0 indicates a positive value and 1 indicates a negative value.) OF (bit 11) : Overflow flag - Set if the integer result is too large a positive number or too small a negative number (excluding the sign-bit) to fit in the destination operand; cleared otherwise. This flag indicates an overflow condition for signed-integer (two’s complement) arithmetic. DF (bit 10) : The direction flag controls string instructions (MOVS, CMPS, SCAS, LODS, and STOS). Setting the DF flag causes the string instructions to auto-decrement (to process strings from high addresses to low addresses). Clearing the DF flag causes the string instructions to auto-increment (process strings from low addresses to high addresses). TF (bit 8) : Trap flag - Set to enable single-step mode for debugging; clear to disable single-step mode. IF (bit 9) : Interrupt enable flag - Controls the response of the processor to maskable interrupt requests. Set to respond to maskable interrupts; cleared to inhibit maskable interrupts. The 16-bit x87 FPU control word controls the precision of the x87 FPU and rounding method used. It also contains the x87 FPU floating-point exception mask bits. The 16-bit x87 FPU status register indicates the current state of the x87 FPU. The 16-bit tag word indicates the contents of each the 8 registers in the x87 FPU data-register stack (one 2-bit tag per register). The precision-control (PC) field (bits 8 and 9 of the x87 FPU control word) determines the precision (64, 53, or 24 bits) of floating-point calculations made by the x87 FPU The rounding-control (RC) field of the x87 FPU control register (bits 10 and 11) controls how the results of x87 FPU floating-point instructions are rounded. The infinity control flag (bit 12 of the x87 FPU control word) is provided for compatibility with the Intel 287 Math Coprocessor; it is not meaningful for later version x87 FPU coprocessors or IA-32 processors. The invalid operation exception mask (bit 0). When the mask bit is set, its corresponding exception is blocked from being generated. The denormal-operand exception mask (bit 2). When the mask bit is set, its corresponding exception is blocked from being generated. The floating-point divide-by-zero exception mask (bit 3). When the mask bit is set, its corresponding exception is blocked from being generated. The floating-point numeric overflow exception mask (bit 4). When the mask bit is set, its corresponding exception is blocked from being generated. The potential floating-point numeric underflow condition mask (bit 5). When the mask bit is set, its corresponding exception is blocked from being generated. The inexact-result/precision exception mask (bit 6). When the mask bit is set, its corresponding exception is blocked from being generated. The busy flag (bit 15) indicates if the FPU is busy (B=1) while executing an instruction, or is idle (B=0). The B-bit (bit 15) is included for 8087 compatibility only. It reflects the contents of the ES flag. The C%1 condition code flag (bit %2) is used to indicate the results of floating-point comparison and arithmetic operations. The error/exception summary status flag (bit 7) is set when any of the unmasked exception flags are set. The stack fault flag (bit 6 of the x87 FPU status word) indicates that stack overflow or stack underflow has occurred with data in the x87 FPU data register stack. A pointer to the x87 FPU data register that is currently at the top of the x87 FPU register stack is contained in bits 11 through 13 of the x87 FPU status word. This pointer, which is commonly referred to as TOP (for top-of-stack), is a binary value from 0 to 7. The processor reports an invalid operation exception (bit 0) in response to one or more invalid arithmetic operands. The processor reports the denormal-operand exception (bit 2) if an arithmetic instruction attempts to operate on a denormal operand. The processor reports the floating-point divide-by-zero exception (bit 3) whenever an instruction attempts to divide a finite non-zero operand by 0. The processor reports a floating-point numeric overflow exception (bit 4) whenever the rounded result of an instruction exceeds the largest allowable finite value that will fit into the destination operand. The processor detects a potential floating-point numeric underflow condition (bit 5) whenever the result of rounding with unbounded exponent is non-zero and tiny. The inexact-result/precision exception (bit 6) occurs if the result of an operation is not exactly representable in the destination format. The 32-bit MXCSR register contains control and status information for SIMD floating-point operations. Bit 0 (IE) : Invalid Operation Flag; indicate whether a SIMD floating-point exception has been detected. Bit 1 (DE) : Denormal Flag; indicate whether a SIMD floating-point exception has been detected. Bit 2 (ZE) : Divide-by-Zero Flag; indicate whether a SIMD floating-point exception has been detected. Bit 3 (OE) : Overflow Flag; indicate whether a SIMD floating-point exception has been detected. Bit 4 (UE) : Underflow Flag; indicate whether a SIMD floating-point exception has been detected. Bit 5 (PE) : Precision Flag; indicate whether a SIMD floating-point exception has been detected. Bit 7 (IM) : Invalid Operation Mask. When the mask bit is set, its corresponding exception is blocked from being generated. Bit 8 (DM) : Denormal Mask. When the mask bit is set, its corresponding exception is blocked from being generated. Bit 9 (ZM) : Divide-by-Zero Mask. When the mask bit is set, its corresponding exception is blocked from being generated. Bit 10 (OM) : Overflow Mask. When the mask bit is set, its corresponding exception is blocked from being generated. Bit 11 (UM) : Underflow Mask. When the mask bit is set, its corresponding exception is blocked from being generated. Bit 12 (PM) : Precision Mask. When the mask bit is set, its corresponding exception is blocked from being generated. Bit 15 (FZ) of the MXCSR register enables the flush-to-zero mode, which controls the masked response to a SIMD floating-point underflow condition. Bit 6 (DAZ) of the MXCSR register enables the denormals-are-zeros mode, which controls the processor’s response to a SIMD floating-point denormal operand condition. Bits 13 and 14 of the MXCSR register (the rounding control [RC] field) control how the results of SIMD floating-point instructions are rounded. The value of GetLastError(). This value is stored in the TEB. The NTSTATUS in the LastStatusValue field of the TEB. The TEB of the current thread can be accessed as an offset of segment register GS (x64). The TEB can be used to get a lot of information on the process without calling Win32 API. The TEB of the current thread can be accessed as an offset of segment register FS (x86). The TEB can be used to get a lot of information on the process without calling Win32 API. Hide FPU Skjule FPU Show FPU Vis FPU Unknown Ukjent RegistersView_ConstantsOfRegisters Nonzero Zero Zero Special Empty Toward Zero Toward Positive Toward Negative Round Near Truncate Round Up Round Down Real4 Not Used Real8 Real10 SEHChainView Address Adresse Handler Handler/håndtak Module/Label Modul/etikett Comment Kommentar Follow &Address Følg &Adresse Follow Handler Følg Handler/håndtak &Copy &Kopi ScriptView Line Linje Text Tekst Info Info Execute Script Command... Kjør skript kommando... &Open... &Paste &Lim inn Load Script Load Script Re&load Script &Unload Script &Edit Script Toggle &BP Ru&n until selection &Step &Run &Kjør &Abort &Continue here... Copy Kopier E&xecute Command... Error on line Feil på linjen Script Error! Skriptfeil! Select script Velg skript Script files (*.txt *.scr);;All files (*.*) Skript filer (*.txt *.scr); Alle filer (*.*) Error! Feil! File open failed! Please open the file yourself... Error setting script breakpoint! Error executing command! Message Question Spørsmål SearchListView Type here to filter results... Regex Lock Search: Search... &Copy & Kopi Use case sensitive regular expression Use case insensitive regular expression SelectFields Dialog Dialog &OK &OK &Cancel & Avbryt SettingsDialog Preferences Events Events User DLL Load Thread Create Exit Breakpoint* SetThreadName exceptions System DLL Load Thread Entry Thread Entry Debug Strings Debug Strings Thread Exit System TLS Callbacks* System DLL Unload Break on: Break på: User DLL Unload User TLS Callbacks* System Breakpoint* System Breakpoint* Entry Breakpoint* Entry Breakpoint* System DLL Entry User DLL Entry * Requires debuggee restart Engine Motor Calculation Type Beregnings type &Signed &Signed &Unsigned &Unsigned Debug Engine* TitanEngine GleeBug Default Breakpoint Type Standard Breakpoint Type INT3 INT3 Long INT3 Long INT3 UD2 UD2 Undecorate Symbol Names Undecorate Symbol navn Enable Debug &Privilege Aktiver Debug &Privilegium Enable Source Debugging Aktiver kilde Debug Disable Database Compression Deaktivere Database komprimering Save Database in Program Directory Lagre Databasen i Programmets Mappe Skip INT3 stepping No Script Timeout Warning &Ignore inconsistent breakpoints Log If the Thread Has Switched Enable Verbose Exception Logging Disable WOW64 Single Step Workaround Disable ASLR Default maximum trace &count Animation per-step interval (ms) <html><head/><body>The debugger sleeps for a certain time in order to keep the interval between animation steps constant as specified in this setting.If you want to animate as fast as possible set this to 0.</body></html> * Requires debugger restart Exceptions Unntak Exception Filters: Ignore &Range &Delete Range &Slett Range Ignore &Last Ignore all first-chance exceptions, don't print log, pass them to the debuggee and only break on second-chance exceptions. Ignore First-Chance Break On First chance Second chance Do not break Logging Log exception Exception handled by Debugger Debuggee Debuggee Disasm Disasm Argument Spaces Argument Spaces Tab between mnemonic and arguments Fane mellom mnemonic og arguments Hide pointer sizes Only show FS/GS segments Memory Spaces Hukommelse mellomrom Uppercase Store bokstaver Autocomments only on CIP Automatiske kommentarer kun på CIP Don't highlight operands Hide module name for local memory addresses Permanent highlighting mode Disable branch disassembly preview 0x prefix for values Don't show source lines in comments Assemble instruction on double-click Maximum module name size GUI GUI Show FPU registers as little endian Vis FPU registrerer som liten endian Save GUI layout and column orders Don't show close dialog Enable Load/Save Tab Order Aktiver Last inn/lagre fane rekkefølge Show Watch Labels in Side Bar Do not call SetForegroundWindow Show RVA addresses in graph view Graph zoom mode Auto follow operand in stack Show exit confirmation dialog Disable auto completion in goto dialog Hide seasonal icons Disabling this option will tell Windows that x64dbg is DPI unaware. This might result in blurry results in some configurations. Qt High DPI Scaling Full executable path in title Disable icons* Dump in trace view consumes significant memory. It is used by many features in trace view that need to search for access to memory. If disabled, it will not be loaded by default. The user can always load the dump manually. Dump in already opened trace tabs are not disabled until you close them. Automatically load dump in trace view Misc Diverse Symbol Store: Symbol Store: Symbol Path: Symbol bane: Set x64dbg as Just In Time Debugger Angi x64dbg som bare i tid Debugger JIT: JIT: DIE SCUM! Dø AVSKUM! Search Engine URL UTF-16 Log Redirect* Use local help file (x64dbg.chm) Query process cookie* Query working set before reading memory Transparent exception stepping* Save Lagre Cancel Avbryt Warning: Run the debugger as Admin to enable JIT. Settings saved! ERROR NOT FOUND OLD JIT FEIL IKKE FUNNET GAMLE JIT NOT FOUND OLD JIT ENTRY STORED, USE SETJIT COMMAND IKKE FUNNET GAMLE JIT-OPPFØRING SOM ER LAGRET, BRUK SETJIT-KOMMANDOEN Question Spørsmål Are you sure you want to add %.8X? ShortcutsDialog Hotkeys Action filter Hotkey Clear Save Lagre Cancel Avbryt Action Settings saved! SimpleTraceDialog Hint: History is available in every text field with the Up/Down arrows! Lo&g Condition: Lo&gg tilstand: &Command Text: &Kommando tekst: &Break Condition: &Break tilstand: &Record trace Log &File... &OK &OK C&ancel C & ancel C&ommand Condition: C&ommand Condition: &Maximum trace count: &Log Text: & Logg tekst: Example: %1 (numbers are hex by default) Example: %1 Trace log file It appears you have set the log file, but not the log text. This will result in an empty log. Do you really want to continue? Error Feil Trace recording was requested, but not enabled. Failed to set log text/condition! Failed to set command text/condition! Failed to set log file! Failed to start trace! Enter the path to the log file. Log Files (*.txt *.log);;All Files (*.*) Trace recording already started SourceView Address Address Line Linje Code Go to line Line (decimal): Open source file Show source file in directory &Copy & Kopi Error Feil Failed to open file! Failed to parse file! SourceViewerManager Close All Tabs StructWidget Struct Field Offset Address Address Size Størrelse Value &Follow address in Dump Follow value in Dump Follow value in Disassembler Change address Display type Load JSON Parse header Remove Clear &Refresh &Oppdatere &Copy & Kopi Error Feil No types loaded yet, parse a header first... Type to display Address to display %1 at JSON files (*.json);;All files (*.*) Header files (*.h *.hpp);;All files (*.*) SymbolView Form Skjema Base Module Modul Party Path Sti Status &Follow in Disassembler & Følge i Disassembler Follow in &Dump Følg i & dump Follow &imported address Toggle Breakpoint Toggle Bookmark Help on Symbolic Name Hjelp på symbolsk navn Follow &Entry Point in Disassembler Follow in Memory Map &Download Symbols for This Module Download Symbols for &All Modules Copy File &Path Browse in Explorer Load library... Free library Mark as &user module Mark as &system module Mark as &party... User System Party: %1 Import &Copy & Kopi Select DLL Enter the path of a DLL to load in the debuggee. DLL Files (*.dll);;All Files (*.*) Are you sure you want to free the module: %1? This could introduce unexpected behaviour to your debugging session... Free Library Error! Feil! DbgSetBookmarkAt failed! DbgSetBookmarkAt mislyktes! Mark the party of the module as 0 is user module, 1 is system module. Error Feil The party number can only be 0 or 1 SystemBreakpointScriptDialog System breakpoint scripts 1. System breakpoint script for every process Path: Browse Open 2. System breakpoint script for a specific process (debug a process to specify) 2. System breakpoint script for %1 Create Script files (*.txt *.scr);;All files (*.*) Skript filer (*.txt *.scr); Alle filer (*.*) File not found Would you like to create a new script? Error! Feil! File open failed! Please open the file yourself... ThreadView Switch Thread Bytt tråd Suspend Thread Suspender tråden Resume Thread Fortsett tråden Suspend All Threads Resume All Threads Kill Thread Stop tråden Set Name Idle Above Normal Below Normal Highest Lowest Normal Vanlig Time Critical AboveNormal TimeCritical BelowNormal Set Priority Angi prioritet Go to Thread Entry Gå til trådens Entry &Copy &Kopi Number Nummer ID ID Entry Entry TEB TEB EIP EIP RIP RIP Suspend Count Suspender teller Priority Prioritet Wait Reason Vent Grunn Last Error Siste feil User Time Kernel Time Creation Time CPU Cycles Name Navn Main Unknown Ukjent Thread name - %1 TimeWastedCounter %1 events/s Time Wasted Debugging: Tid Sølet bort med Debugging: TraceBrowser Index Address Address Bytes Bytes Disassembly Disassembly Registers Memory Minne Comments Kommentarer Start trace recording Trace recording file Trace recordings (*%1);;All files (*.*) Error Feil File name contains invalid character. An error occurred when reading trace file (reason: %1). &Selection & Utvalg Selection to &File Selection (&No Bytes) Utvalg (& ingen byte) Selection to File (No Bytes) &Export Table &RVA & RVA &File Offset &Copy & Kopi &Follow in Dump & Følge i Dump &Highlighting mode &Highlighting modus Help on mnemonic Hjelp på mnemonic Show mnemonic brief Vis mnemonic kort Hide mnemonic brief Skjule mnemonic kort Expression Uttrykk Function return Previous Foregående Next Neste Go to Gå til xrefs... xrefs... Address/Constant Memory Reference &Search Information Informasjon Sync with CPU Start recording Stop recording Close recording Close the trace file tab, and stop recording trace. Delete recording Delete the trace file from disk, and stop recording trace. Browse in Explorer Open the trace file in Explorer. Open trace recording Trace recording Trace recordings (*.%1);;All files (*.*) Are you sure you want to delete this recording? Address not found in trace The address %1 is not found in trace. Do you want to follow in CPU instead? Open File Åpne Fil Text Files (*.txt) Tekstfiler (*.txt) Could not open file Kunne ikke åpne fil Error! Feil! Selection not in a module... Selection not in a file... Constant %1 result(s) in %2ms References Referanser TraceDump &Copy & Kopi Save To a File Lagre til en fil B&inary B&inary &File Offset &Find Pattern... & Finne mønster... &Expression & Uttrykk Previous Foregående Next Neste &Go to & Gå til xrefs... xrefs... &ASCII & ASCII &Extended ASCII &Codepage... & Codepage... &Hex & Hex &Text & Tekst Signed byte (8-bit) Signed short (16-bit) Signert short (16-biters) Signed long (32-bit) Signert long (32-bit) Signed long long (64-bit) Signed long long (64-bit) Unsigned byte (8-bit) Unsigned short (16-bit) Unsigned short (16-bit) Unsigned long (32-bit) Unsigned long (32-bit) Unsigned long long (64-bit) Unsigned long long (64-bit) Hex short (16-bit) Hex kort (16-biters) Hex long (32-bit) Hex long (32-bit) Hex long long (64-bit) Hex long long (64-bit) &Integer &Integer &Float (32-bit) &Double (64-bit) &Long double (80-bit) &Half float (16-bit) &Float &Float &Address &Adresse &Disassembly &Disassembly Enter expression to follow in Dump... Hex Hex ASCII ASCII UNICODE UNICODE Float (32-bit) Float (32-bit) Double (64-bit) Double (64-bit) Long double (80-bit) Long double (80-bit) Half float (16-bit) Value Comments Kommentarer Save to file Lagre til fil All files (*.*) Alle filer (*.*) Find Pattern... Finn mønsteret... Error! Feil! Selection not in a file... Dump Dumpe TraceFileSearch Constant: %1 Range: %1-%2 Address Address Index Disassembly Disassembly Follow index in trace Reference Pattern: %1 Start Index End Index Follow start index in trace Follow end index in trace TraceInfoBox Jump is taken Hopp er tatt Jump is not taken Hopp er ikke tatt Copy Line &Follow in Dump & Følge i Dump &Copy & Kopi TraceManager Close All Tabs Open trace recording Trace recording Trace recordings (*.%1);;All files (*.*) Start recording Stop trace recording Start trace recording Open Recent Files TraceRegisters Copy floating point value Set as current value Follow in Dump Følg i Dump View YMM register View XMM register View MMX register TraceStack Comments Kommentarer &Copy & Kopi B&inary B&inary &DWORD &QWORD &Comments Follow E&SP Følg R&SP Follow R&SP Følg R&SP Follow E&BP Følg R&BP Follow R&BP Følg R&BP Go to &Expression Gå til & uttrykk Go to Previous Gå til forrige Go to Next Gå til neste &Go to & Gå til xrefs... xrefs... Follow DWORD in &Stack Følg DWORD i & stack Follow QWORD in &Stack Følg QWORD i & stack &Follow DWORD in Disassembler &Følge DWORD i Disassembler &Follow QWORD in Disassembler &Følge QWORD i Disassembler Edit columns... Enter expression to follow in Stack... Angi uttrykket å følge i stacken... TraceWidget Form Skjema Goto Gå Til Ctrl+G Ctrl + G Load dump Disassembly Disassembly Registers Dump Dumpe Stack Stack InfoBox Error Feil Error when opening trace recording (reason: %1) Trace file is recorded for another debuggee Checksum is different for current trace file and the debugee. This probably means you have opened a wrong trace file. This trace file is recorded for "%1" Enabling the trace dump can consume a lot of memory (max ~%1GiB for this trace) and freeze x64dbg for prolonged periods of time. This feature is still experimental, please report any bugs you encounter. Warning Loaded trace dump in %1ms &Selected Address & Valgte adresse &Address: & Adresse: &Old value: &Value: & Verdi: &New value: &Constant: & Konstant: TraceXrefBrowseDialog Dialog Dialog &OK &OK &Cancel & Avbryt xrefs at <%1> Selected xref All xrefs Copy Kopier UpdateChecker Checking for updates... Network Error! Error! Feil! File on server could not be parsed... New build %1 available! Download <a href="%2">here</a> You are now on build %3 You have a development build (%1) of x64dbg! You have the latest build (%1) of x64dbg! Information Informasjon VirtualModDialog Virtual Module Virtuell Modul &Name: &Navn: &Base: &Size: &OK &OK &Cancel & Avbryt WatchView Name Navn Expression Uttrykk Value Type Type Watchdog Mode ID ID %1 is not readable. Disabled Deaktivert Changed Is true Is false Not changed &Add... &Delete Rename &Edit... &Modify... Watchdog Uint Int Float Ascii Unicode &Copy & Kopi Enter the expression to watch Example: [EAX] Enter the name of the watch variable Modify "%1" Cannot modify "%1" It might not possible to assign a value to "%1". WordEditDialog Edit Rediger Expression: Expression: Bytes: Bytes: Unsigned: Unsigned: ASCII: ASCII: Signed: Signed: &OK &OK &Cancel & Avbryt XrefBrowseDialog Dialog Dialog &OK &OK &Cancel & Avbryt xrefs at <%1> Toggle &Breakpoint Hardware, Access Maskinvare, tilgang &Byte & Byte &Word & Word &Dword & Dword &Qword & Qword Hardware, Write Maskinvare, skriv Remove &Hardware Fjerne maskinvare Memory, Access Minne, tilgang &Singleshoot & Singleshoot &Restore on hit & Gjenopprette på hit Memory, Write Minne, skrive Remove &Memory Fjern & minne Brea&kpoint Brea & kpoint Toggle breakpoints on all xrefs Selected xref All xrefs Copy Kopier ZehSymbolTable Address Address Type Type Ordinal Symbol Symbol (undecorated) Import Export