AboutDialog About x64dbg Website: <a href="https://x64dbg.com">https://x64dbg.com</a> Version: Icons: <html><head/><body><a href="https://p.yusukekamiyamane.com">Yusuke Kamiyamane</a> <a href="https://github.com/mrfearless">mrfearless</a></body></html> An open-source x64/x32 debugger for windows. Check for Updates <h3>Donations</h3> Please consider donating using the Bitcoin address on the right or by going to <a href="https://donate.x64dbg.com">donate.x64dbg.com</a>. AbstractStdTable &Line Cropped &Table &Full Table Line, To Log Cropped Table, To Log Full Table, To Log &Export Table &Copy AbstractTableView Edit columns Redigera kolumner AppearanceDialog Appearance Utseende Colors Färger Properties Egenskaper Color Färg #FFFFFF #FFFFFF Open color selector Background Color Bakgrundsfärg Transparent X X Example Text Font Teckensnitt General Tables: Normal Bold Italic Bold + Italic 6 7 8 9 10 11 12 14 16 18 20 22 Disassembly: HexDump: Stack: Registers: HexEdit: Log: &Application Font* Courier New &Defaults *Setting requires restarting the application to take effect. &Save &Cancel Settings saved! Background Selection Header Text Separators EIP RIP Addresses Selected Addresses Breakpoints Hardware Breakpoints Labels Bytes Modified Bytes Restored Bytes Bookmarks Comments Automatic Comments Mnemonic Brief Comments Relocation underline Conditional Jump Lines (jump) Conditional Jump Lines (no jump) Unconditional Jump Lines Traced line Function Lines Loop Lines SideBar: Register Labels Conditional Jump Backwards Lines (jump) Conditional Jump Backwards Lines (no jump) Unconditional Jump Lines (jump) Unconditional Jump Backwards Lines (jump) Unconditional Jump Lines (no jump) Unconditional Jump Backwards Lines (no jump) Code Folding Checkbox Color Bullets Breakpoint bullets Disabled Breakpoint bullets Bookmark bullets Register Names Argument Register Names Modified Registers Highlight Read Highlight Write Highlight Read+Write Extra Information Instructions: Mnemonics Push/Pops Calls Returns Conditional Jumps Unconditional Jumps NOPs FAR INT3s Unusual Instructions Prefixes Values Commas General Registers FPU Registers MMX Registers XMM Registers YMM Registers ZMM Registers Memory Sizes Memory Segments Memory Brackets Memory Stack Brackets Memory Base Registers Memory Index Registers Memory Scales Memory Operators (+/-/*) Highlighting 0x00 Bytes 0x7F Bytes 0xFF Bytes IsPrint Bytes User Code Pointer Highlight Color User Data Pointer Highlight Color System Code Pointer Highlight Color System Data Pointer Highlight Color Unknown Code Pointer Highlight Color Unknown Data Pointer Highlight Color ESP RSP User Stack Frame Line System Stack Frame Line Inactive Text Return To Comment SEH Chain Comment Wildcards Graph: Breakpoint Disabled Breakpoint Node Current node shadow Terminal node shadow Indirect call shadow Unconditional branch line True branch line False branch line Log Log Link Color Other: Background Flicker Color Search Highlight Color Patch located in relocation region Current Thread Watch (When Watchdog is Triggered) Memory Map Breakpoint Memory Map %1 Memory Map Section Text Struct text Struct primary background Struct secondary background Breakpoint Summary Parentheses Breakpoint Summary Keywords Breakpoint Summary Strings Symbol User Module Text Symbol System Module Text Symbol Unloaded Text Symbol Loading Text Symbol Loaded Text Link color NOT FOUND IN CONFIG! &Default Value &Current Setting Select Color AssembleDialog 0 Keep &Size &Fill with NOP's &XEDParse &asmjit OK Cancel Instruction decoding error empty instruction Instruction encoding error: %1 Instruction bigger by %1 %2... byte bytes Bytes: %1 Instruction smaller by %1 %2... Instruction is same size! Instruction encoded successfully! AttachDialog Attach <a href="https://faq.x64dbg.com">Why is process X not shown?</a> Refresh Find Window... &Attach &Cancel PID Name Title Path Command Line Arguments Find Window Enter window title or class name here. Cannot find window "%1". Retry? The PID of the window "%1" is %2, but it's hidden in the process list. Do you want to attach to it immediately? GetWindowThreadProcessId() failed. Cannot get the PID of the window. BreakpointsView Type Address Module/Label/Exception State Disassembly Hits Summary Follow breakpoint &Remove Disable Enable &Edit Reset hit count Enable all (%1) Disable all (%1) Remove all (%1) Add DLL breakpoint Add exception breakpoint Copy breakpoint conditions Paste breakpoint conditions &Copy Inactive One-time Enabled Disabled byte word dword qword access write execute read load unload all firstchance secondchance anychance breakif fastresume logif log cmdif cmd Cannot follow this breakpoint. Enter the module name Example: mydll.dll Enter the exception code Example: EXCEPTION_ACCESS_VIOLATION Software Hardware Memory DLL Exception Bridge The data has been copied to clipboard. References BrowseDialog Dialog Please input the file path. Path: &Browse... &OK &Cancel CPUArgumentWidget Arguments Unlocked Refresh is automatic. [Formatting Error] Follow %1 in %2 Disassembler Dump Stack &Copy Default (x64 fastcall) Default (stdcall) Default (stdcall, EBP stack) thiscall fastcall Delphi (Borland fastcall) Locked Refresh is disabled. Calls Refresh is only done when executing a CALL instruction. CPUDisassembly &Selected Address &Address: &Constant: &Value: Jump table%1: Address: Constant: &Edit &Fill... Fill with &NOPs &Copy &Paste Paste (&Ignore Size) &Binary &Selection Selection to &File Selection (Bytes only) Selection (&No Bytes) Selection to File (No Bytes) &Address &RVA &File Offset &Header VA Disassembly &Restore selection &Follow in Dump &Follow in Disassembler Open Source File Help on Symbolic Name Help on mnemonic Show mnemonic brief Hide mnemonic brief &Highlighting mode Edit columns... Label Current Address Label Disable Bit Byte Word Start trace recording Trace coverage Stop trace recording Function Analyze module Add function Delete function Argument Add argument Delete argument Add loop Delete loop Analyze single function Remove type analysis from module Remove type analysis from selection Treat selection &head as Treat from &selection as Analysis Download Symbols for This Module Assemble Patches Previous Next Expression File Offset Start of Page End of Page Start of Function End of Function Previous Reference Next Reference Go to xrefs... C&ommand &Constant &String references &Intermodular calls &Pattern &GUID &Names Current Region Current Module Current Function All User Modules All System Modules All Modules &Search for &Selected Address(es) Find &references to Copy token &text Copy token &value Add label at The label may be in use The label "%1" may be an existing label or a valid expression. Using such label might have undesired effects. Do you still want to continue? Error! DbgSetLabelAt failed! Assemble at %1 Failed to assemble instruction " %1 " (%2) Not inside a module... Goto File Offset in Enter Constant Find Pattern... Edit code at %1 Fill code at %1 Size Open File Text Files (*.txt) Error Could not open file Selection not in a module... Selection not in a file... Start from &Selection Failed to assemble instruction " Failed to enable trace coverage for page %1. Failed to disable trace coverage for page %1. CPUDump &Edit &Fill... &Copy &Paste Paste (&Ignore Size) Save To a File B&inary &File Offset &Restore selection &Modify Value &Byte &Word &Dword &Qword Hardware, &Access Hardware, &Write Hardware, &Execute Remove &Hardware &Singleshoot &Restore on hit Memory, Access Memory, Read Memory, Write Memory, Execute Remove &Memory &Breakpoint &Find Pattern... Find &References &Sync with expression Allocate Memory &Expression File Offset Start of Page End of Page Previous Next Previous Reference Next Reference &Go to &ASCII &Extended ASCII &Codepage... &Hex &Text Signed byte (8-bit) Signed short (16-bit) Signed long (32-bit) Signed long long (64-bit) Unsigned byte (8-bit) Unsigned short (16-bit) Unsigned long (32-bit) Unsigned long long (64-bit) Hex short (16-bit) Hex long (32-bit) Hex long long (64-bit) &Integer &Float (32-bit) &Double (64-bit) &Long double (80-bit) &Half float (16-bit) &Float &Address &Disassembly System Code System Data User Code User Data (Real4) (Real8) (BYTE) (WORD) (DWORD) (QWORD) (String) (Unknown String) Modify value Error The input text is not a number! Enter expression to follow in Dump... Error! Not inside a module... Goto File Offset in %1 Hex ASCII UNICODE Float (32-bit) Double (64-bit) Long double (80-bit) Half float (16-bit) Value Comments Edit data at %1 Fill data at %1 Save to file All files (*.*) Find Pattern... Selection not in a file... Dump Enter expression to sync with... Size Warning You're trying to allocate a zero-sized buffer just now. The size of buffer you're trying to allocate exceeds 1GB. Please check your expression to ensure nothing is wrong. Memory allocation failed! CPUInfoBox Address RVA File Offset Copy Line Jump is taken Jump is not taken Jump from Call from Reference from Accessed %n time(s) Modify Value &Address: &Constant: &Value: &Selected Address &Follow in Dump &Modify Value &Watch &Show References &Copy CPUMultiDump Dump Watch Locals Change Tab %1 Name Tab Name Disassembly CPURegistersView Modify value Increment value Decrement value Zero value Toggle Undo Follow in Disassembler Follow in Dump Follow in Stack Follow in Memory Map &Remove hardware breakpoint Increment x87 Stack Decrement x87 Stack Highlight Edit %1 Edit Edit %1 register Edit FPU register ERROR CONVERTING TO HEX Set Last Error Set Last Status Follow in &Dump Copy old value: %1 Set Hardware Breakpoint on %1 CPUSideBar Cannot fold selection. Click to unfold, right click to delete. Click to fold, right click to delete. Click to fold. Breakpoint Enabled Breakpoint Disabled Breakpoint Not Set CPUStack Comments Align Stack Pointer Modify &Edit &Fill... &Copy &Paste Paste (&Ignore Size) B&inary &DWORD &QWORD &Comments Hardware, Access &Byte &Word &Dword &Qword Hardware, Write Remove &Hardware Memory, Access &Singleshoot &Restore on hit Memory, Write Remove &Memory Brea&kpoint &Restore selection &Find Pattern... Follow E&SP Follow R&SP Follow E&BP Follow R&BP Go to &Expression Go to Base of Stack Frame Go to Previous Stack Frame Go to Next Stack Frame Go to Previous Go to Next &Go to Freeze the stack Follow DWORD in &Stack Follow QWORD in &Stack &Follow DWORD in Disassembler &Follow QWORD in Disassembler Edit columns... Unfreeze the stack Enter expression to follow in Stack... Edit data at %1 Fill data at %1 Find Pattern... CPUWidget Form Goto Ctrl+G Disassembly Stack Registers Dump Arguments Sidebar InfoBox Graph CalculatorDialog Calculator Signed: Unsigned: Unicode: Octal: Expression: Binary: ASCII: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 Hexadecimal: 0000000000000000 Bytes: &Follow in Disassembler Follow in &Dump Follow in Memory Map &Close CallStackView Thread ID Address To From Size Party Comment Follow &Address Follow &To Follow &From Download Symbols for This Thread Show Suspected Call Stack Frame Show Active Call Stack Frame Follow in Threads Rename Thread &Copy User System Thread name - %1 CloseDialog Closing Debugger... CodepageSelectionDialog Select Codepage... &OK &Cancel ColumnReorderDialog Dialog Displayed <- &Add &Hide -> &Up &Down << A&dd all Available &Ok &Cancel Error There isn't anything to display yet! ComboBoxDialog Dialog CheckBox &OK &Cancel CommandLineEdit Commands are comma separated (like assembly instructions): mov eax, ebx CommonActions Follow in Disassembler Show this address in disassembler. Equivalent command "d address". &Follow DWORD in Disassembler &Follow QWORD in Disassembler Follow in Dump Show the address in dump. Equivalent command "dump address". &Follow DWORD in Current Dump &Follow QWORD in Current Dump Dump %1 Follow DWORD in Dump Follow QWORD in Dump Follow in Stack Show this address in stack view. Equivalent command "sdump address". Follow in Memory Map Show this address in memory map view. Equivalent command "memmapdump address". Graph Show the control flow graph of this function in CPU view. Equivalent command "graph address". Toggle Edit Set Hardware on Execution Remove Hardware Replace Slot %1 (Unknown) Breakpoint Set Conditional Breakpoint Replace Slot %1 (0x%2) Label Current Address Comment Toggle Bookmark Set a bookmark here, or remove bookmark. Equivalent command "bookmarkset address"/"bookmarkdel address". Set %1 Here Set the next executed instruction to this address. Equivalent command "mov cip, address". Create New Thread Here Create a new thread at this address. Equivalent command "createthread address, argument". &Watch DWORD &Watch QWORD Add the address in the watch view. Equivalent command "AddWatch [address], "uint"". Cannot follow %1. Address is invalid. Add label at The label may be in use The label "%1" may be an existing label or a valid expression. Using such label might have undesired effects. Do you still want to continue? Error! DbgSetLabelAt failed! Add comment at DbgSetCommentAt failed! DbgSetBookmarkAt failed! Address %1 is not executable Setting software breakpoint here may result in crash. Do you really want to continue? Setting new origin here may result in crash. Do you really want to continue? Creating new thread here may result in crash. Do you really want to continue? Argument for the new thread Configuration File Open Attach Detach Save database Restore backup database Reload database Clear database Import database Export database Restart as Admin Exit View CPU Log Breakpoints Memory Map Call Stack Notes SEH Script Symbol Info Modules Source References Threads Patches Comments Labels Bookmarks Functions Variables Handles Graph Previous Tab Next Tab Previous View Next View Hide Tab Debug Run Run (pass exception) Run (swallow exception) Run until selection Run until expression Pause Restart Close Step into Step into (pass exception) Step into (swallow exception) Step into (source) Step over Step over (pass exception) Step over (swallow exception) Step over (source) Execute till return Execute till return (pass exception) Run to user code Skip next instruction Command Trace into... Trace over... Trace coverage Bit None Undo instruction Animate into Animate over Animate command Step into until reaching uncovered code Step over until reaching uncovered code Step into until reaching covered code Step over until reaching covered code Plugins Scylla Favourites Manage Favourite Tools Options Preferences Appearance Utseende Hotkeys Topmost Reload style.css Help About Blog Donate Calculator Report Bug Manual Generate Crash Dump Actions Find Strings Find Strings in Current Module Find Intermodular Calls Toggle Breakpoint Set Conditional Breakpoint Toggle Bookmark Delete Breakpoint Enable/Disable Breakpoint Reset breakpoint hit count Enable all breakpoints Disable all breakpoints Remove all breakpoints Binary Edit Binary Fill Binary Fill NOPs Binary Copy Binary Paste Binary Paste (Ignore Size) Binary Save Undo Selection Set Label Set Label for the Operand Set Comment Toggle Function Add Loop Delete Loop Toggle Argument Assemble Set %1 Here Goto Origin Goto EBP/RBP Goto Previous Goto Next Goto Expression Goto Start of Page Goto End of Page Goto Start of Function Goto End of Function Goto File Offset Find References to Selected Address Find Pattern Find Pattern in Current Module Find Names in Current Module Find References xrefs... Analyze Single Function Analyze Module Help on Mnemonic Toggle Mnemonic Brief Highlighting Mode Enable/Disable Branch Destination Preview Find Find in Current Module Enable/Disable Logging Allocate Memory Free Memory Sync Copy All Registers Mark As User Module Mark As System Module Mark As Party Set Hardware Breakpoint (Execute) Remove Hardware Breakpoint Remove Type Analysis From Module Remove Type Analysis From Selection Treat Selection As Code Byte Word Dword Fword Qword Tbyte Oword Float Double LongDouble ASCII UNICODE MMWord XMMWord YMMWord Treat Selection Head As Toggle Register Value Clear Copy Copy Address Copy RVA Copy Symbol Copy Line Load Script Reload Script Unload Script Edit Script Run Script Toggle Script Breakpoint Run Script to Cursor Step Script Abort Script Execute Script Command Refresh Zoom to cursor Fit To Window Follow in disassembler Save as image Toggle overview Toggle summary Increment x87 Stack Decrement x87 Stack Redirect Log Browse in Explorer Download Symbols for This Module Download Symbols for All Modules Create New Thread Here Open Source File Follow in Memory Map Follow in Stack Follow in Disassembler Follow DWORD/QWORD in Disassembler Follow DWORD/QWORD in Dump Freeze the stack Go to Base of Stack Frame Go to Previous Stack Frame Go to Next Stack Frame Go to Previous Reference Go to Next Reference Modify value Watch DWORD/QWORD Copy File Offset Start/Stop trace recording Copy -> Cropped Table Copy -> Table Copy -> Line, To Log Copy -> Cropped Table, To Log Copy -> Table, To Log Copy -> Export Table NOT FOUND IN CONFIG! CustomizeMenuDialog Dialog Customize which menu item will be shown in the "More commands" submenu Disselect All &OK &Cancel Disassembler Dump Watch Call Stack Threads Graph Xref Browser Struct Stack Source File Debug Option Favourite Help View Trace disassembler Trace dump DBG Trace recording has stopped unexpectedly because WriteFile() failed. GetLastError() = %s. Trace recording failed to start because the file header cannot be written. Started trace recording to file: %s Cannot create trace recording file. GetLastError() = %s. Trace recording stopped. breakif fastresume() logif log cmdif cmd %u functions Indirect pointer: 0x%p 0x%p %u functions discovered! This kind of analysis doesn't work on x32 executables... Animation started. Use the "pause" command to stop animation. Non-executable memory region Assembled branch does not point to an executable memory region! Error while writing process memory Delete breakpoint failed (DeleteBPX): %p Error setting breakpoint at %p! (SetBPX) Delete memory breakpoint failed (RemoveMemoryBPX): %p Could not enable memory breakpoint %p (SetMemoryBPXEx) Not enough arguments! At least %d argument(s) must be specified. Arguments are <a href="https://help.x64dbg.com/en/latest/commands/index.html">comma-separated</a>. The command "%s" is debug-only Error allocating memory for cmdline Error converting UNICODE cmdline Error reading PEB base addres Error reading PEB -> ProcessParameters -> CommandLine UNICODE_STRING Error reading PEB -> ProcessParameters pointer address Error Getting remote PEB address Error Getting command line base address Error checking the pattern of the commandline stored Error writing the new command line stored Error getting getcommandline Error allocating the page with UNICODE and ANSI command lines Error writing the ANSI command line in the page Error writing the UNICODE command line in the page Error writing command line UNICODE in PEB Error getting cmdline (Address: %p) Invalid parameter [base]! Invalid memory address! Invalid parameter [size] Failed to load module (ModLoad)... Virtual module "%s" loaded on %p[%p]! This may take very long, depending on your network connection and data in the debug directory... Done! See symbol log for more information Invalid module "%s"! Symbol download failed... See symbol log for more information File does not exist! Symbol load failed... See symbol log for more information Done! Invalid argument Image information for %s Characteristics (0x%X): None IMAGE_FILE_RELOCS_STRIPPED: Relocation info stripped from file. IMAGE_FILE_EXECUTABLE_IMAGE: File is executable (i.e. no unresolved externel references). IMAGE_FILE_LINE_NUMS_STRIPPED: Line numbers stripped from file. IMAGE_FILE_LOCAL_SYMS_STRIPPED: Local symbols stripped from file. IMAGE_FILE_AGGRESIVE_WS_TRIM: Agressively trim working set IMAGE_FILE_LARGE_ADDRESS_AWARE: App can handle >2gb addresses IMAGE_FILE_BYTES_REVERSED_LO: Bytes of machine word are reversed. IMAGE_FILE_32BIT_MACHINE: 32 bit word machine. IMAGE_FILE_DEBUG_STRIPPED: Debugging info stripped from file in .DBG file IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP: If Image is on removable media, copy and run from the swap file. IMAGE_FILE_NET_RUN_FROM_SWAP: If Image is on Net, copy and run from the swap file. IMAGE_FILE_SYSTEM: System File. IMAGE_FILE_DLL: File is a DLL. IMAGE_FILE_UP_SYSTEM_ONLY: File should only be run on a UP machine IMAGE_FILE_BYTES_REVERSED_HI: Bytes of machine word are reversed. DLL Characteristics (0x%X): IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE: DLL can move. IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY: Code Integrity Image IMAGE_DLLCHARACTERISTICS_NX_COMPAT: Image is NX compatible IMAGE_DLLCHARACTERISTICS_NO_ISOLATION: Image understands isolation and doesn't want it IMAGE_DLLCHARACTERISTICS_NO_SEH: Image does not use SEH. No SE handler may reside in this image IMAGE_DLLCHARACTERISTICS_NO_BIND: Do not bind this image. IMAGE_DLLCHARACTERISTICS_WDM_DRIVER: Driver uses WDM model. IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE: Remote Desktop Services aware. Not enough arguments! Invalid relocation table! Relocation table size: %X Failed to get SEH (disabled?) Failed to get VEH (loaded symbols for ntdll.dll?) Failed to get VCH (loaded symbols for ntdll.dll?) Failed to get UnhandledExceptionFilter (loaded symbols for kernelbase.dll?) Failed to get UnhandledExceptionFilter (loaded symbols for kernel32.dll?) Delete breakpoint failed (BpDelete): %p Could not enable breakpoint %p (SetBPX) Could not enable breakpoint %p (BpEnable) Could not disable breakpoint %p (BpEnable) Could not disable breakpoint %p (DeleteBPX) Invalid addr: "%s" Breakpoint already set! Error setting breakpoint at %p! (IsBPXEnabled) Error setting breakpoint at %p! (memread) Error setting breakpoint at %p! (bpnew) Error handling invalid breakpoint at %p! (bpdel) Breakpoint at %p (%s) set! Breakpoint at %p set! No breakpoints to delete! All breakpoints deleted! Delete breakpoint failed (bpdel): %p No such breakpoint "%s" Breakpoint deleted! No breakpoints to enable! All breakpoints enabled! Breakpoint already enabled! Breakpoint enabled! No breakpoints to disable! All breakpoints disabled! Breakpoint already disabled! Breakpoint disabled! Delete hardware breakpoint failed (BpDelete): %p Delete hardware breakpoint failed (DeleteHardwareBreakPoint): %p Did not enable hardware breakpoint %p (all slots full) Could not enable hardware breakpoint %p (BpEnable) Could not enable hardware breakpoint %p (SetHardwareBreakPoint) Could not disable hardware breakpoint %p (BpEnable) Could not disable hardware breakpoint %p (DeleteHardwareBreakPoint) Invalid type, assuming 'x' Invalid size, using 1 Address not aligned to %d You can only set 4 hardware breakpoints Hardware breakpoint already set! Error setting hardware breakpoint (bpnew)! Error setting hardware breakpoint (TitanEngine)! Hardware breakpoint at %p set! No hardware breakpoints to delete! All hardware breakpoints deleted! Delete hardware breakpoint failed: %p (BpDelete) Delete hardware breakpoint failed: %p (DeleteHardwareBreakPoint) No such hardware breakpoint "%s" Hardware breakpoint deleted! No hardware breakpoints to enable! All hardware breakpoints enabled! Hardware breakpoint already enabled! Could not enable hardware breakpoint %p (SetHardwareBreakpoint) Hardware breakpoint enabled! No hardware breakpoints to disable! All hardware breakpoints disabled! Hardware breakpoint already disabled! Could not disable hardware breakpoint %p (DeleteHardwareBreakpoint) Hardware breakpoint disabled! Delete memory breakpoint failed (BpDelete): %p Could not enable memory breakpoint %p (BpEnable) Could not disable memory breakpoint %p (BpEnable) Could not disable memory breakpoint %p (RemoveMemoryBPX) Invalid type (argument ignored) Memory breakpoint already set! Error setting memory breakpoint! (BpNew) Error setting memory breakpoint! (SetMemoryBPXEx) Memory breakpoint at %p[%p] set! Invalid type specified! No memory breakpoints to delete! All memory breakpoints deleted! Delete memory breakpoint failed: %p (BpDelete) Delete memory breakpoint failed: %p (RemoveMemoryBPX) No such memory breakpoint "%s" Memory breakpoint deleted! No memory breakpoints to enable! All memory breakpoints enabled! Memory breakpoint already enabled! Memory breakpoint enabled! No memory breakpoints to disable! All memory breakpoints disabled! Memory breakpoint already disabled! Memory breakpoint disabled! Could not delete DLL breakpoint %s (BpDelete) Could not delete DLL breakpoint %s (LibrarianRemoveBreakPoint) Could not enable DLL breakpoint %s (BpEnable) Could not enable DLL breakpoint %s (LibrarianSetBreakPoint) Could not disable DLL breakpoint %s (BpEnable) Could not disable DLL breakpoint %s (LibrarianRemoveBreakPoint) Error creating Dll breakpoint! (BpNewDll) Error creating Dll breakpoint! (LibrarianSetBreakPoint) Dll breakpoint set on "%s"! No DLL breakpoints to delete! All DLL breakpoints deleted! Failed to find DLL breakpoint '%s'... Failed to remove DLL breakpoint (BpDelete)... Failed to remove DLL breakpoint (dbgdeletedllbreakpoint)... DLL breakpoint removed! No DLL breakpoints to enable! All DLL breakpoints enabled! No such DLL breakpoint "%s" DLL breakpoint already enabled! DLL breakpoint enable! No DLL breakpoints to disable! All DLL breakpoints disabled! DLL breakpoint already disabled! DLL breakpoint disabled! Could not delete exception breakpoint %p (BpEnable) Could not enable exception breakpoint %p (BpEnable) Could not disable exception breakpoint %p (BpEnable) Invalid exception code: %s. Exception breakpoint %X (%s) already exists! Invalid exception type! Failed to set exception breakpoint! (BpNew) No exception breakpoints to delete! All exception breakpoints deleted! Delete exception breakpoint failed (bpdel): %p No such exception breakpoint "%s" Exception breakpoint deleted! No exception breakpoints to enable! All exception breakpoints enabled! Exception breakpoint already enabled! Exception breakpoint enabled! No exception breakpoints to disable! All exception breakpoints disabled! Exception breakpoint already disabled! Exception breakpoint disabled! argument count mismatch! Something went wrong... Default breakpoint type set to: %s Can't set %s on breakpoint "%s" breakpoint name break condition logging text logging condition command on hit command condition log file Can't set fast resume on breakpoint "%s" Can't set singleshoot on breakpoint "%s" Can't set silent on breakpoint "%s" Can't set hit count on breakpoint "%s" Skipped INT3! Resolved shortcut "%s" -> "%s" Resolved arguments from shortcut "%s" Resolved working directory from shortcut "%s" Could not open file! Debugging: %s Invalid PE file! Use x32dbg to debug this file! Use x64dbg to debug this file! Finalizing the debugger thread took more than 10 seconds. This can happen if you are loading large symbol files or saving a large database. The debuggee did not stop after 10 seconds of requesting termination. The debugger state may be corrupted. It is recommended to restart x64dbg. Could not open process %X! Process is already being debugged! IsWow64Process failed! Use x32dbg to debug this process! Use x64dbg to debug this process! Could not get module filename %X! DetachDebuggerEx failed... Detached! Not debugging! Program is not running The active thread is suspended, switch to a running thread to pause the process Error resuming thread Exception will be swallowed Exception will be thrown in the program Invalid variable "%s" Variable size not supported. invalid argument "%s"! Invalid dest "%s" Invalid hex string "%s" Invalid destination "%s" Failed to write to %p Invalid src "%s" Failed to read (all) memory... Failed to read register context... Usage: movdqu xmm0, [address] / movdqu [address], xmm0 / movdqu xmm0, xmm1 Invalid thread %s Invalid address "%s"! Invalid stack address! Invalid address %p! No graph generated... Stack is now frozen Stack is now unfrozen Script Address Data Invalid argument 1 : %s Invalid argument 2 : %s Address "%s" doesn't belong to any module! VirtualAllocEx failed User-allocated memory $lastalloc is zero, provide a page address VirtualFreeEx failed Invalid address specified Memset failed Memory %p (size: %.8X) set to %.2X Error: using an address as arg1 Error getting rights of page: %s Page: %p, Rights: %s Error: Using an address as arg1 and as arg2: Execute, ExecuteRead, ExecuteReadWrite, ExecuteWriteCopy, NoAccess, ReadOnly, ReadWrite, WriteCopy. You can add a G at first for add PAGE GUARD, example: GReadOnly Error: Set rights of %p with Rights: %s New rights of %p: %s Failed to write file... %p[%llX] written to "%s" ! %p[%X] written to "%s" ! Cannot dump while running... Dump saved! MiniDumpWriteDump failed. GetLastError() = %s. Directory '%s' doesn't exist Current directory changed! Debugger hidden Something went wrong Error: you must specify the name of the DLL to load Error: couldn't get kernel32:LoadLibraryW Error: couldn't allocate memory in debuggee Error: couldn't write process memory Error: couldn't SetBPX Error: the specified address does not point inside a module Error: couldn't get kernel32:FreeLibrary Invalid expression: "%s"! Invalid address: %p! Failed to assemble "%s" (%s) Error run the debugger as Admin to setjit Error setting JIT %s Error there is no old JIT entry stored. New OLD JIT stored: %s Unknown JIT entry type. Use OLD, x64 or x32 as parameter. Error using x64 arg. The debugger is not a WOW64 process Error unknown parameters. Use old, oldsave, restore, x86 or x64 as parameter. New JIT %s: %s Error getting JIT %s OLD JIT entry stored: %s JIT %s: %s Error getting JIT auto %s Unknown JIT auto entry type. Use x64 or x32 as parameter. Error using x64 arg the debugger is not a WOW64 process JIT auto %s: %s Error run the debugger as Admin to setjitauto Error setting JIT Auto. Use ON:1 or OFF:0 arg or x64/x32, ON:1 or OFF:0. Error unknown parameters. Use ON:1 or OFF:0 Error setting JIT auto x64 Error setting JIT auto x32 Error unknown parameters. Use x86 or x64 and ON:1 or OFF:0 Error getting JIT auto x64 Error getting JIT auto x32 Error unknown parameters use x86 or x64, ON/1 or OFF/0 New JIT auto %s: %s Command line: %s Error: write the arg1 with the new command line of the process debugged New command line: %s No description or empty description Error: Configuration not found. Error updating configuration. Could not find the specified privilege: %s DuplicateHandle failed: %s Handle %llX closed! Handle %X closed! Error loading Scylla.dll! Could not find export 'ScyllaStartGui' inside Scylla.dll Scylla is already loaded Press OK to reload the plugin... Reload No call stack. %llu call stack frames (RIP = %p , RSP = %p , RBP = %p ): %u call stack frames (EIP = %p , ESP = %p , EBP = %p ): Failed to transform pattern! Invalid memory address %p! Failed to read memory! Pattern: %s Disassembly [Error disassembling] %d occurrences found in %ums MemFindInMap failed! Failed to assemble "%s" (%s)! Command: "%s" %u result(s) in %ums Constant: %p Range: %p-%p %u reference(s) in %ums String Address String Follow in Disassembly and Dump Follow string in Dump Function pointer Label Strings %u string(s) in %ums Function pointers %u function pointer(s) in %ums Destination Calls %u call(s) in %ums GUID ProgId Path Description RegOpenKeyExW() failed. Cannot enumerate GUIDs. %u GUID(s) in %ums Invalid expression: "%s" Create thread failed! Thread %s created at %s %p(Argument=%llX) Thread %s created at %s %p(Argument=%X) Thread switched! Error suspending thread Thread suspended Thread resumed! Thread terminated Error terminating thread! %d/%d thread(s) suspended %d/%d thread(s) resumed Unknown priority value, read the help! Error setting thread priority Thread priority changed! Failed to change the name for thread %s Thread name set to "%s"! Thread name changed from "%s" to "%s"! Trace already active Cannot start a trace when running, pause execution first. Invalid expression "%s" Run to party is busy. EncodeMapSetType failed... AddType failed AddStruct failed AddUnion failed AddMember failed AppendMember failed Unknown calling convention "%s" AddFunction failed AddArg failed AppendArg failed SizeofType failed VisitType failed RemoveType failed Type %s removed LoadTypes failed Types loaded No such variable "%s"! Failed to set variable "%s"! Variable "%s" is not a string! Failed to get variable size "%s"! Failed to get variable data "%s"! MemPatch failed! String written! Database cleared! Error setting comment Error deleting comment Comments Comment No comments Delete %d comment(s) listed in Reference View All comments deleted! Error setting label Error deleting label Labels No labels %d label(s) listed in Reference View All labels deleted! Failed to set bookmark! Bookmark set! Failed to delete bookmark! Bookmark deleted! Bookmarks No bookmarks found %d bookmark(s) listed All bookmarks deleted! Failed to add function Function added! Failed to delete function Function deleted! Functions Start End Size Disassembly (Start) No functions %d function(s) listed All functions deleted! Failed to add argument Argument added! Failed to delete argument Argument deleted! Arguments Label/Comment No arguments %d argument(s) listed All arguments deleted! Failed to add loop Loop added! Failed to delete loop Loop deleted! Loops Depth Parent No loops %d loop(s) listed All loops deleted! Invalid variable name "%s" Invalid value "%s" Error creating variable "%s" Could not delete variable "%s" Deleted variable "%s" No variables! Error listing variables! Variables Value (Hex) Variable Value (Decimal) Property User Variable System Variable Read Only Variable No enough arguments for addwatch No enough arguments for delwatch Error expression in argument 1. Unknown watchdog mode. No enough arguments for SetWatchType Unknown watch type. No enough arguments for SetWatchExpression No enough arguments for SetWatchName Saving database to %s Failed to write database file !(GetLastError() = %s) %ums Loading commandline... Loading database from %s (migrating breakpoints) Invalid database file! Failed to read database file !(GetLastError() = %s) Invalid database file (JSON)! Warning: Failed to create database folder '%s'. GetLastError() = %s Cannot write to the program directory (GetLastError() = %s), try running x64dbg as admin... Database file: %s WARNING: The database has a checksum that is different from the module you are debugging. It is possible that your debuggee has been modified since last session. The content of this database may be incorrect. Missing operand Failed to convert operand Operand value too big Invalid operand (FromHex failed) Invalid size (expected %llu, got %llu) Invalid size (expected %u, got %u) 80bit extended float is not supported Invalid string literal String too long Dest buffer too small Thread switched from %X to %X ! Module: %s - (switched from %s) %s - PID: %s - %sThread: %s%s%s %s breakpoint "%s" at %s! %s breakpoint at %s! execute read/write write Hardware breakpoint (%s%s) "%s" at %s! Hardware breakpoint (%s%s) at %s! (read) (write) (execute) (read/write/execute) Memory breakpoint%s "%s" at %s, exception address: %s! Memory breakpoint%s at %s, exception address: %s! DLL Load DLL Unload DLL Load and unload DLL Breakpoint %s (%s): Module %s DLL Breakpoint (%s): Module %s Exception Breakpoint %s (%p) at %p! paused! Breakpoint reached not in list! Error when evaluating break condition. Error when evaluating log condition. Error when evaluating command condition. Failed to open breakpoint log: %s (%s) User code reached at %s Breakpoint %p has been disabled because the bytes don't match! Expected: %02X %02X, Found: %02X %02X Could not set breakpoint %p! (SetBPX) MemRead failed on breakpoint address %p! Could not set memory breakpoint %p! (SetMemoryBPXEx) Could not set hardware breakpoint %p! (SetHardwareBreakPoint) Set hardware breakpoint on %p! Could not delete breakpoint %p! (DeleteBPX) Could not delete memory breakpoint %p! (RemoveMemoryBPX) Could not delete hardware breakpoint %p! (DeleteHardwareBreakPoint) Trace finished after %llu steps! Trace finished after %u steps! ??? (GetFileNameFromHandle failed) Process Started: %p %s TLS Callback %d %d invalid TLS callback addresses... entry breakpoint Process stopped with exit code %s Thread %s created, Entry: %s, Parameter: %s Thread Entry Thread %s Stack No threads left to switch to (bug?) Thread %s exit Error: Cannot load global initialization script. Error: Cannot load debuggee initialization script. System breakpoint reached! It has been detected that the debuggee entry point is in the MZ header of the executable. This will cause strange behavior, so the system breakpoint has been enabled regardless of your setting. Be careful! TLS Callback Waiting until ntdll.dll symbols are loaded... Set LdrpDebugFlags to 0x%08X successfully! Failed to write to LdrpDebugFlags Symbol 'LdrpDebugFlags' not found! Failed to find LdrpDebugFlags (you need to load symbols for ntdll.dll) DLL Loaded: %p %s DLL Unloaded: %p %s DebugString: "%s" SetThreadName exception on %p (%X, "%s") First chance exception on %p (%.8X, %s)! First chance exception on %p (%.8X)! Last chance exception on %p (%.8X, %s)! Last chance exception on %p (%.8X)! Attached to process! Error debugging DLL (failed to copy loader) Error debugging DLL (loaddll.exe not found) The executable you are trying to debug requires elevation. Restart as admin? Elevation Error starting process (CreateProcess, %s)! Attach to process failed: %s Debugging stopped! Drivers known to interfere with x64dbg's operation have been detected. List of drivers: %s Do you want to continue debugging? Invalid line in exception database: "%s" Failed to convert number in exception database "%s" invalid dest "%s" Expression evaluated to a string: "%s" No such expression function '%s' number string any invalid Bad argument count for expression function %s (expected %s, got %d)! Expression function %s argument %d/%d (%s) type mismatch (expected %s, got %s)! Expression function %s errored! Expression function %s returned an invalid value! Invalid argument... Too much data (10MB max)... Failed to read memory... Invalid size... Debuggee Cannot restore last instruction. History record is empty Reserved (%p) Reserved TEB (%s) WoW64 TEB (%s) Stack (%s) Failed to read mnemonic help database... Failed to load mnemonic help database... Mnemonic help database loaded! Invalid mnemonic! Too many redirections... invalid instruction Invalid relocation block for module %s%s! Invalid relocation entry for module %s%s! Illegal relocation type 0x%02X for module %s%s! Unknown CodeView signature %08X for module %s%s... Skipping unsupported debug type %s in module %s%s... Did not find any supported debug types in module %s%s! Exception while getting module info (%s), please report... Module %s%s: invalid PE file! No patches to apply Not all patches are in module %s Failed to get base of module %s Failed to get module path of module %s Failed to make a copy of the original file (patch target is in use?) Unable to obtain attributes for copied file StaticFileLoad failed StaticFileUnload failed [PLUGIN] %s already loaded [PLUGIN] Cannot find plugin: %s [PLUGIN] Failed to load plugin: %s [PLUGIN] Export "pluginit" not found in plugin: %s [PLUGIN] pluginit failed for plugin: %s [PLUGIN] %s is incompatible with this SDK version [PLUGIN] %s v%d Loaded! [PLUGIN] GuiMenuAdd(%d) failed for plugin: %s [PLUGIN] %s unloaded [PLUGIN] %s not found [PLUGIN] Ignoring top-level plugin in favor of the directory 'plugins\%s' [PLUGIN] Invalid plugin handle %d... [PLUGIN, %s] Command "%s" failed to register... [PLUGIN, %s] Command "%s" registered! [PLUGIN, %s] Command "%s" unregistered! [PLUGIN, %s] Command "%s" failed to unregister... [PLUGIN, %s] Expression function "%s" failed to register... [PLUGIN, %s] Expression function "%s" registered! [PLUGIN, %s] Expression function "%s" unregistered! [PLUGIN, %s] Expression function "%s" failed to unregister... [PLUGIN, %s] Format function "%s" failed to register... [PLUGIN, %s] Format function "%s" registered! [PLUGIN, %s] Format function "%s" unregistered! [PLUGIN, %s] Format function "%s" failed to unregister... Invalid memory page 0x%p %s (Region %s) %s (Region %p) Region Search Couldn't locate module for 0x%p Module Search Couldn't get module list User Modules (%s) System Modules (%s) All Modules (%s) FileHelper::ReadAllText failed... Empty label detected on line %d! Duplicate label "%s" detected on lines %d and %d! Invalid branch label "%s" detected on line %d! Script finished! Error executing command! The script is too busy. Would you like to terminate it now? Script is terminated by user. Debugger must be paused to run a script! Pointer to SEH_Record[%d] End of SEH Chain return to %s from %s [Formatting Error] Module not found... Module has no symbol information... No symbol path specified... Symbol file '%s' exists but could not be loaded! No symbol store URL specified... Downloading symbol %s Signature: %s Destination: %s URL: %s Failed to create destination file (%s)... InternetOpen failed (%s)... InternetOpenUrl failed (%s)... Connection succeeded, but download failed (status code: %d)... Download interrupted... Download incomplete... Finished downloading symbol %s in %.03fs Main Thread Failed to suspend thread 0x%X... Failed to add %s %s; Failed to add typedef %s %s; Failed to add function %s %s() Failed to add member %s %s.%s; Failed to add argument %s %s.%s; Not debugging valfromstring_noexpr failed on %s Failed to read memory Invalid value: "%s"! Failed to write memory Watchdog %s (expression "%s") is triggered at %p ! Original value: %p, New value: %p Watch %u command cut at ~%d characters [Script DLL] Calling export "AsyncStart"... [Script DLL] "AsyncStart" returned! [Script DLL] Calling FreeLibrary... success! failure (%s)... [Script DLL] Loading Script DLL "%s"... [Script DLL] DLL loaded on 0x%p! [Script DLL] Creating thread to call the export "AsyncStart"... [Script DLL] Calling export "Start"... [Script DLL] "Start" returned! [Script DLL] Failed to find the exports "AsyncStart" or "Start" (%s)! [Script DLL] LoadLibary failed (%s)! Retrieving syscall indices... Syscall indices loaded! Failed to load syscall indices... Error codes database loaded! Failed to load error codes... Exception codes database loaded! Failed to load exception codes... NTSTATUS codes database loaded! Failed to load NTSTATUS codes... Windows constant database loaded! Failed to load Windows constants... Reading notes file... Reading notes failed... File read thread finished! Initializing wait objects... Initializing debugger... Initializing debugger functions... Setting JSON memory management functions... Getting directory information... Start file read thread... It is strongly discouraged to use symbol servers in your path directly (use the store option instead). Do you want me to fix this? Symbol Path: %s Allocating message stack... Initializing global script variables... Registering debugger commands... Registering GUI command handler... Registering expression functions... Registering format functions... Default Registering Script DLL command handler... Script DLL Starting command loop... Initialization successful! Loading plugins... Handling command line... Stopping command thread... Stopping running debuggee... Aborting scripts... Unloading plugins... Cleaning up allocated data... Cleaning up wait objects... Cleaning up debugger threads... Saving notes... Exit signal processed successfully! %1 occurrence(s) in %2ms DebugStatusLabel Initialized Paused Running Terminated DisassemblerGraphView Use Graph command or menu action to draw control flow graph here... Large number of nodes The graph you are trying to render has a large number of nodes (%1). This can cause x64dbg to hang or crash. It is recommended to save your data before you continue. Do you want to continue rendering this graph? Follow in &Disassembler Xrefs... Expression Previous Next &Address: &Constant: &Value: Block incoming: %1 Block exit %1 Go to Help on mnemonic &Highlighting mode &Zoom 100% &Fit to window &Overview S&ummary &Sync with %1 &Refresh &Save as image Narrow Medium Wide Layout Detach Copy token &text Copy token &value Save as image PNG file (*.png);;WebP file (*.webp);;BMP file (*.bmp);;TIFF file (*.tif) Error Image saving failed! Disassembly Address Bytes Disassembly Mnemonic brief Comments EditBreakpointDialog Edit breakpoint <html><head/><body>This text will be logged whenever the log condition is true.String formatting can be used to print variables.</body></html> &Log Text: <html><head/><body>If this expression is evaluated to 1 the breakpoint will break.Set to 0 for a breakpoint that never breaks, but can still do logging and execute command.</body></html> &Break Condition: Example: arg(0) == 123 (numbers are hex by default) <html><head/><body>String logging is enabled whenever this expression is evaluated to 1.</body></html> Lo&g Condition: &Name: <html><head/><body>This command will be executed whenever command condition is true.Currently certain commands, for example, stepping from breakpoint command are not supported.</body></html> &Command Text: <html><head/><body>The number of times the breakpoint is hit.</body></html> &Hit Count: <html><head/><body>If this expression is evaluated to 1 the command specified above is executed when the breakpoint is hit.Set the expression to 1 to always execute the command.</body></html> C&ommand Condition: Log F&ile... <html><head/><body>Remove the breakpoint once it pauses the debuggee.</body></html> Singlesho&ot <html><head/><body>Don't print the default breakpoint log.</body></html> &Silent <html><head/><body>Don't enable extended conditional breakpoint features and plugins.</body></html> &Fast Resume &Save C&ancel Edit DLL Breakpoint %1 Edit Breakpoint %1 Edit Hardware Breakpoint %1 Edit Memory Breakpoint %1 Edit Exception Breakpoint %1 Breakpoint log file Enter the path to the log file. Log Files (*.txt *.log);;All Files (*.*) EditFloatRegister Dialog Double: Word: Float: Byte: Qword: Dword: High: 10-11 12-13 14-15 16-17 18-19 1A-1B 1C-1D 1E-1F Low: 0-1 2-3 4-5 6-7 8-9 A-B C-D E-F &Hexadecimal &Signed &Unsigned &OK &Cancel Error, register size %1 is not supported. ExceptionRangeDialog Range Start: End: OK Cancel ExportCSV Export data in CSV format Enter the CSV file name to export CSV files (*.csv);;All files (*.*) CSV export error Saved CSV data at %1 FavouriteTools Favourites Tools &Add... &Edit &Remove De&scription... &Up &Down Script Command Shortcut Clear &OK &Cancel Path Description Browse tool Enter the path of the tool. Executable Files (*.exe);;All Files (*.*) Enter the description This string will appear in the menu. Select script Script files (*.txt *.scr);;All files (*.*) Enter the command you want to favourite Example: bphws csp Enter a new command Example: bphws ESP GotoDialog Enter expression to follow... &OK &Cancel Not debugging... Invalid expression... File offset Shortcuts: Correct expression! -> Invalid file offset... Invalid memory address... Memory out of range... HandlesView Type Type number Handle Access Name Proc Title Class Thread Style StyleEx Parent Size Enable Remote address Local address State Privilege Windows Handles TCP Connections Privileges &Refresh Close handle Disable Privilege: Enable Privilege: Disable all privileges Enable all privileges Enable window Disable window Follow Proc in Disassembler Follow in Threads Toggle Breakpoint in Proc Message Breakpoint TCP Connection enumeration is only available on Windows Vista or greater. Enabled Unknown &Copy (Desktop window) Disabled HexDump &Selected lines &Address Error! Selection not in a module... Address HexEditDialog HexEdit Hex Warning: Data cannot be represented in selected codepage. ASCII &UNICODE: Last &Codepage: Code&page... &Hex: String Convert to Windows style line ending. CR LF Copy data Copy Items per line: &Keep Size &Entire Block Start from &Selection &OK &Cancel C-Style BYTE (Hex) C-Style WORD (Hex) C-Style DWORD (Hex) C-Style QWORD (Hex) C-Style String C-Style Unicode String C-Style Shellcode String ASM-Style BYTE (Hex) ASM-Style WORD (Hex) ASM-Style DWORD (Hex) ASM-Style QWORD (Hex) ASM-Style String Pascal BYTE (Hex) Pascal WORD (Hex) Pascal DWORD (Hex) Pascal QWORD (Hex) Python 3 BYTE (Hex) Unicode String UTF8 String UCS4 String Hex Stream GUID IP Address (IPv4) IP Address (IPv6) Base64 LabeledSplitter &Detach &Collapse &Expand LineEditDialog Dialog CheckBox &OK &Cancel CT: %1%2 LocalVarsView Name Expression Value &Follow in Dump Follow DWORD in Dump Follow QWORD in Dump Follow in Stack Follow DWORD in Stack Follow QWORD in Stack Follow in Memory Map &Modify Value &Rename &Copy Base Register Local%1 Arg%1 Rename local variable "%1" Edit %1 at %2 LogView Find For Clea&r &Copy &Paste Select &All &Save Disable &Logging &Redirect Log... Auto Scrolling Copy To Notes &Global &Debuggee Find Find Next Occurance Find Previous Occurance Enable &Logging Stop &Redirection Invalid address! The address %1 is not a valid memory location... Url is not valid! The Url %1 is not supported fwrite() failed (GetLastError()= %1 ). Log redirection stopped. Log redirection is stopped. Log is not redirected. _wfopen() failed. Log will not be redirected to %1. Log will be redirected to %1. Redirect log to file Enter the file to which you want to redirect log messages. Log files (*.txt);;All files (*.*) Logging will be enabled. Logging will be disabled. Error, log have not been saved. Log have been saved as %1 MHTabBar &Detach &Close MainWindow x64dbg &File &Recent Files Database &View &Debug Advanced &Help &Plugins &Options &Theme Favour&ites Traci&ng Trace &coverage Toolbar CommandBar &Open Run the file and start debugging. E&xit Exit x64dbg. &Run Run the debuggee or restart debugging. &Pause Pause the execution of debuggee to debug it, or stop animate into/animate over. Re&start Stop the debuggee and restart it, or restart the last debugged file. &Close Terminate the debuggee and stop debugging. Step &into Execute a single instruction Step &over Execute a single instruction without entering the CALL instruction Co&mmand Focus on the command bar E&xecute till return Trace over until the RET instruction would be executed and stack pointer is less than or equal to current value. &Memory Map Show the Memory Map tab. &Log Window Show the Log tab. &About Display information about x64dbg Scylla &Breakpoints Show the Breakpoints tab. Step into (pass all exceptions) Execute a single instruction, pass exceptions to the debuggee. Step over (pass all exceptions) Run (pass all exceptions) Run the debuggee and pass all exceptions to the debuggee without pausing. Execute till return (pass all exceptions) &Script Script Show the Script tab. Run &until selection Run until selection Put a breakpoint on selection and run the debuggee. &CPU CPU Show the CPU tab to display the disassembly. Symbol &Info Symbol Info Show the Symbols tab. &References References Show the References tab. &Threads Threads Show the Threads tab. &Preferences Preferences Opem the Preferences dialog. &Find Strings Find Strings Find possible strings in the current module. Equivalent command "strref" &Appearance Open the Appearance dialog to adjust color and font settings. Find Intermodular Calls Find intermodular calls in the current module. Equivalent command "modcallfind" Patch file... Patches Open the patch dialog. Comments Show a list of comments. Equivalent command "commentlist" Labels Show a list of labels. Equivalent command "labellist" Bookmarks Show a list of bookmarks. Equivalent command "bookmarklist" Functions Show a list of functions. Equivalent command "functionlist" Check for &Updates Connect to Github to check for updates Call Stack Show the Call Stack tab. Hotkeys Open the Hotkeys dialog to customize keyboard hotkeys. &Donate Donate Open https://donate.x64dbg.com Calculator Open the Calculator dialog. Attach Attach the debugger to a process to debug it. Detach Detach from the debuggee so that it continues running without being debugged. Change Command &Line Set the command line of the debuggee. Skip next instruction Topmost Topmost Window Make x64dbg topmost &Report Bug Report Bug Open https://report.x64dbg.com &Source Source Show the Source tab. &Manual Open the CHM manual or online documentation at https://help.x64dbg.com &FAQ FAQ Open https://faq.x64dbg.com SEH Chain Hide debugger (PEB) Modifies the PEB to hide debugger. Reload style.css Read style.css from disk to apply theme changes. Notes Show the Notes tab. Handles Show the Handles tab. Trace over... Step over until a condition becomes true, and optionally log and execute commands when tracing. Equivalent command "tocnd" Trace into... Step into until a condition becomes true, and optionally log and execute commands when tracing. Equivalent command "ticnd" Bit Enable trace coverage with 1 bit (whether an instruction was executed or not) Byte Enable trace coverage with 1 byte to record how many times an instruction has been executed. Word Enable trace coverage with 1 word to record how many times an instruction has been executed. Step into until reaching uncovered code Step into until reaching an instruction that was not covered before. Equivalent command "tibt" Step over until reaching uncovered code Step over until reaching an instruction that was not covered before. Equivalent command "tobt" Step into until reaching covered code Step into until reaching an instruction that has been covered before. Equivalent command "tiit" Step over until reaching covered code Step over until reaching an instruction that has been covered before. Equivalent command "toit" Disable Disable trace coverage Run to &user code Trace over until user code would be executed. Run until e&xpression Undo last instruction Generate crash dump &Manage Favourite Tools... Step over (source) Execute a single line of source code without entering the subroutine. Equivalent to "TraceOverConditional src.line(cip) && !src.disp(cip)" Step into (source) Execute a single source code line. Equivalent to "TraceIntoConditional src.line(cip) && !src.disp(cip)" &Graph Show the CPU tab and switch to Graph mode. Step into (swallow exception) Step over (swallow exception) Run (swallow exception) Run the debuggee and ignore all exceptions so the debuggee will not process the exception. Blog Open https://blog.x64dbg.com Animate into Execute the step into command at a fixed pace Animate over Execute the step over command at a fixed pace Animate command... Execute a command at a fixed pace System breakpoint scripts Set the script file to run automatically when the system breakpoint is reached. Import settings... Import settings from an external file Customize menus Open the Customize Menus dialog to hide infrequently used menu items into the "more commands" submenu. &Import database Open an external database file to import data. &Export database Previous Tab Show the tab on the left. Next Tab Show the tab on the right. Previous View Show the tab history popup window and select more recently used tab. Next View Show the tab history popup window and select previously viewed tab. Hide Tab Hide the current tab. The hidden tab can be reopened from the View menu. &Variables Show a list of x64dbg variables. Equivalent command "varlist" Restart as Admin Restart x64dbg under Administrator privilege. Plugins Open https://plugins.x64dbg.com Trace Show the Trace tab. Modules Show the Symbols tab. Note that the Modules list is in the symbols tab. &Default &Save database Save all data. The database will be automatically saved when debugging is stopped. Re&load database Discard all modifications and read all data from disk. &Restore backup database Read data from the backup database to recover from database corruption. &Clear database Clear all data. About Qt Display information about Qt Mnemonic Help Output the detailed help information about an assembly mnemonic to the log. Equivalent command "mnemonichelp name". %1 (%2) %1 [Elevated] Log Symbols Breakpoints Memory Map SEH Favourite Toolbox Command: Ready Languages Dark Always stop the debuggee and exit The debuggee is still running and will be terminated if you exit. What do you want to do? Debuggee is still running &Exit Stop the debuggee and exit x64dbg. &Detach and exit Detach from the debuggee (leaving it running) and exit x64dbg. &Restart debugging Restart the debuggee and keep x64dbg open. &Continue debugging Close this dialog and continue where you left off. Unsupported system You are running x64dbg in ARM64 emulation mode. This system is not supported by x64dbg and will cause unexpected behavior. Analyzing malware in this environment is dangerous and you should switch to an actual Intel/AMD CPU. For more information, see the <a href="%1">FAQ</a>. You are running x64dbg on an unsupported operating system version. Future updates will completely stop running on this system. For more information, see the official <a href="%1">announcement</a>. Error Cannot start a trace when running, pause execution first. Open file Executables (*.exe *.dll);;All files (*.*) Disassembly Dump Stack Enter expression to run to... Error! Patches can only be shown while debugging... All the money will go to x64dbg development. You will visit x64dbg's official blog. You will be taken to a website where you can report a bug. Make sure to fill in as much information as possible. This action will crash the debugger and generate a crash dump. You will LOSE ALL YOUR UNSAVED DATA. Do you really want to continue? Have fun debugging the debugger! Debugger detected! Mnemonic help Change Command Line Cannot get remote command line, use the 'getcmdline' command for more information. Could not set command line! New command line: Manual cannot be opened. Please check if x64dbg.chm exists and ensure there is no other problems with your system. Do you want to open online manual at https://help.x64dbg.com ? Open the Favourites dialog to manage the favourites menu Starting tool %1 The translation is nearly empty. Do you still want to use this language? New language setting will take effect upon restart. Animate command Example: StepInto Customize Menus Settings (*.ini);;All files (*.*) Import database Databases (%1);;Database backup (%1.bak);;All files (*.*) Export database Databases (%1);;All files (*.*) More Commands MemoryMapView Address Size Party Info Page Information Content Content of section Type Allocation Type Protection Current Protection Initial Allocation Protection &Follow in Dump Follow in &Disassembler &Follow in Symbols Set Page Memory Rights Memory &Breakpoint Access &Singleshoot &Restore Read Write Execute &Remove &Allocate memory &Free memory Go to Expression &Find Pattern... &Dump Memory to File &Overwrite with Data from File Add virtual module Find references to region &Comment &Copy Section &view Region &view User System Uninitialized data Initialized data Export tables Import tables Exception information Read-only initialized data Base relocations Resources Executable code Thread-local storage Warning You're trying to allocate a zero-sized buffer just now. Error The size of buffer you're trying to allocate exceeds 1GB. Please check your expression to ensure nothing is wrong. Memory allocation failed! Find Pattern... Dumping non-consecutive memory ranges is not supported! Save Memory Region Binary files (*.bin);;All files (*.*) Load Memory Region Address %0 not found in memory map... Enter the address to find... Add comment at Error! DbgSetCommentAt failed! MenuBuilder More commands MessagesBreakpoints Message Breakpoint Messages: Break on any window Break on current window only (Invalid for next session) Use TranslateMessage OK Cancel ModuleStdTable Unloaded Loading Loaded NotesManager Global Debuggee PageMemoryRights Set Page Memory Rights Select ALL Deselect ALL Rights NO ACCESS READ ONLY READ WRITE EXECUTE EXECUTE READ FULL ACCESS WRITE COPY EXECUTE WRITE COPY Set Rights PAGE GUARD Press CTRL or SHIFT key to select multiple pages &Cancel Address Pages Rights Changed to: Error setting rights, read the MSDN to learn the valid rights of: PatchDialog Patches &Modules &Import &Export P&atches &Select All &Deselect All &Restore Selected Pick &Groups &Patch File Byte is located in relocation region Information Nothing to patch! Error! Failed to get module filename... Save file All files (*.*) Failed to save patched file (%1) %1/%2 patch(es) applied! Open patch Patch files (*.1337) The patch file is empty... Patch file format is incorrect... No patches to apply in the current process. Question Some patches are already applied. Do you want to remove these patches? Some bytes do not match the original in the patch file. Do you want to apply these patches anyway? Save patch No patches to export. %1 patch(es) exported! Patches overlap with relocation regions Your patches overlap with relocation regions. This can cause your code to become corrupted when you load the patched executable. Do you want to continue? PatchDialogGroupSelector Group Selector 0000000000000000 &Toggle &Previous &Next QObject DbgInit Error! ReferenceManager Close All Tabs ReferenceView &Follow in Disassembler Follow in &Dump Follow &API Address Toggle Breakpoint Toggle Bookmark Set breakpoint on all commands Remove breakpoint on all commands Set breakpoint on all api calls Remove breakpoint on all api calls Total Progress %1% Set breakpoint on all calls to %1 Remove breakpoint on all calls to %1 Error! DbgSetBookmarkAt failed! RegistersView Copy value Copy floating point value Copy Symbol Value Copy all registers Change view Change SIMD Register Display Mode Display ST(x) Display x87rX Display MMX Hexadecimal Float Double Signed Word Signed Dword Signed Qword Unsigned Word Unsigned Dword Unsigned Qword Hexadecimal Word Hexadecimal Dword Hexadecimal Qword CF (Carry flag) PF (Parity flag) AF (Auxiliary Carry flag) ZF (Zero flag) SF (Sign flag) TF (Trap flag) IF (Interrupt enable flag) DF (Direction flag) OF (Overflow flag) Bit # Mask Flag <table cellspacing='7'> <thead>%1</thead> <tbody>%2</tbody></table> CF (bit 0) : Carry flag - Set if an arithmetic operation generates a carry or a borrow out of the most-significant bit of the result; cleared otherwise. This flag indicates an overflow condition for unsigned-integer arithmetic. It is also used in multiple-precision arithmetic. PF (bit 2) : Parity flag - Set if the least-significant byte of the result contains an even number of 1 bits; cleared otherwise. AF (bit 4) : Auxiliary Carry flag - Set if an arithmetic operation generates a carry or a borrow out of bit 3 of the result; cleared otherwise. This flag is used in binary-coded decimal (BCD) arithmetic. ZF (bit 6) : Zero flag - Set if the result is zero; cleared otherwise. SF (bit 7) : Sign flag - Set equal to the most-significant bit of the result, which is the sign bit of a signed integer. (0 indicates a positive value and 1 indicates a negative value.) OF (bit 11) : Overflow flag - Set if the integer result is too large a positive number or too small a negative number (excluding the sign-bit) to fit in the destination operand; cleared otherwise. This flag indicates an overflow condition for signed-integer (two’s complement) arithmetic. DF (bit 10) : The direction flag controls string instructions (MOVS, CMPS, SCAS, LODS, and STOS). Setting the DF flag causes the string instructions to auto-decrement (to process strings from high addresses to low addresses). Clearing the DF flag causes the string instructions to auto-increment (process strings from low addresses to high addresses). TF (bit 8) : Trap flag - Set to enable single-step mode for debugging; clear to disable single-step mode. IF (bit 9) : Interrupt enable flag - Controls the response of the processor to maskable interrupt requests. Set to respond to maskable interrupts; cleared to inhibit maskable interrupts. The 16-bit x87 FPU control word controls the precision of the x87 FPU and rounding method used. It also contains the x87 FPU floating-point exception mask bits. The 16-bit x87 FPU status register indicates the current state of the x87 FPU. The 16-bit tag word indicates the contents of each the 8 registers in the x87 FPU data-register stack (one 2-bit tag per register). The precision-control (PC) field (bits 8 and 9 of the x87 FPU control word) determines the precision (64, 53, or 24 bits) of floating-point calculations made by the x87 FPU The rounding-control (RC) field of the x87 FPU control register (bits 10 and 11) controls how the results of x87 FPU floating-point instructions are rounded. The infinity control flag (bit 12 of the x87 FPU control word) is provided for compatibility with the Intel 287 Math Coprocessor; it is not meaningful for later version x87 FPU coprocessors or IA-32 processors. The invalid operation exception mask (bit 0). When the mask bit is set, its corresponding exception is blocked from being generated. The denormal-operand exception mask (bit 2). When the mask bit is set, its corresponding exception is blocked from being generated. The floating-point divide-by-zero exception mask (bit 3). When the mask bit is set, its corresponding exception is blocked from being generated. The floating-point numeric overflow exception mask (bit 4). When the mask bit is set, its corresponding exception is blocked from being generated. The potential floating-point numeric underflow condition mask (bit 5). When the mask bit is set, its corresponding exception is blocked from being generated. The inexact-result/precision exception mask (bit 6). When the mask bit is set, its corresponding exception is blocked from being generated. The busy flag (bit 15) indicates if the FPU is busy (B=1) while executing an instruction, or is idle (B=0). The B-bit (bit 15) is included for 8087 compatibility only. It reflects the contents of the ES flag. The C%1 condition code flag (bit %2) is used to indicate the results of floating-point comparison and arithmetic operations. The error/exception summary status flag (bit 7) is set when any of the unmasked exception flags are set. The stack fault flag (bit 6 of the x87 FPU status word) indicates that stack overflow or stack underflow has occurred with data in the x87 FPU data register stack. A pointer to the x87 FPU data register that is currently at the top of the x87 FPU register stack is contained in bits 11 through 13 of the x87 FPU status word. This pointer, which is commonly referred to as TOP (for top-of-stack), is a binary value from 0 to 7. The processor reports an invalid operation exception (bit 0) in response to one or more invalid arithmetic operands. The processor reports the denormal-operand exception (bit 2) if an arithmetic instruction attempts to operate on a denormal operand. The processor reports the floating-point divide-by-zero exception (bit 3) whenever an instruction attempts to divide a finite non-zero operand by 0. The processor reports a floating-point numeric overflow exception (bit 4) whenever the rounded result of an instruction exceeds the largest allowable finite value that will fit into the destination operand. The processor detects a potential floating-point numeric underflow condition (bit 5) whenever the result of rounding with unbounded exponent is non-zero and tiny. The inexact-result/precision exception (bit 6) occurs if the result of an operation is not exactly representable in the destination format. The 32-bit MXCSR register contains control and status information for SIMD floating-point operations. Bit 0 (IE) : Invalid Operation Flag; indicate whether a SIMD floating-point exception has been detected. Bit 1 (DE) : Denormal Flag; indicate whether a SIMD floating-point exception has been detected. Bit 2 (ZE) : Divide-by-Zero Flag; indicate whether a SIMD floating-point exception has been detected. Bit 3 (OE) : Overflow Flag; indicate whether a SIMD floating-point exception has been detected. Bit 4 (UE) : Underflow Flag; indicate whether a SIMD floating-point exception has been detected. Bit 5 (PE) : Precision Flag; indicate whether a SIMD floating-point exception has been detected. Bit 7 (IM) : Invalid Operation Mask. When the mask bit is set, its corresponding exception is blocked from being generated. Bit 8 (DM) : Denormal Mask. When the mask bit is set, its corresponding exception is blocked from being generated. Bit 9 (ZM) : Divide-by-Zero Mask. When the mask bit is set, its corresponding exception is blocked from being generated. Bit 10 (OM) : Overflow Mask. When the mask bit is set, its corresponding exception is blocked from being generated. Bit 11 (UM) : Underflow Mask. When the mask bit is set, its corresponding exception is blocked from being generated. Bit 12 (PM) : Precision Mask. When the mask bit is set, its corresponding exception is blocked from being generated. Bit 15 (FZ) of the MXCSR register enables the flush-to-zero mode, which controls the masked response to a SIMD floating-point underflow condition. Bit 6 (DAZ) of the MXCSR register enables the denormals-are-zeros mode, which controls the processor’s response to a SIMD floating-point denormal operand condition. Bits 13 and 14 of the MXCSR register (the rounding control [RC] field) control how the results of SIMD floating-point instructions are rounded. The value of GetLastError(). This value is stored in the TEB. The NTSTATUS in the LastStatusValue field of the TEB. The TEB of the current thread can be accessed as an offset of segment register GS (x64). The TEB can be used to get a lot of information on the process without calling Win32 API. The TEB of the current thread can be accessed as an offset of segment register FS (x86). The TEB can be used to get a lot of information on the process without calling Win32 API. Hide FPU Show FPU Unknown RegistersView_ConstantsOfRegisters Nonzero Zero Special Empty Toward Zero Toward Positive Toward Negative Round Near Truncate Round Up Round Down Real4 Not Used Real8 Real10 SEHChainView Address Handler Module/Label Comment Follow &Address Follow Handler &Copy ScriptView Line Text Info Execute Script Command... &Open... &Paste Load Script Re&load Script &Unload Script &Edit Script Toggle &BP Ru&n until selection &Step &Run &Abort &Continue here... Copy E&xecute Command... Error on line Script Error! Select script Script files (*.txt *.scr);;All files (*.*) Error! File open failed! Please open the file yourself... Error setting script breakpoint! Error executing command! Message Question SearchListView Type here to filter results... Regex Lock Search: Search... &Copy Use case sensitive regular expression Use case insensitive regular expression SelectFields Dialog &OK &Cancel SettingsDialog Preferences Events User DLL Load Thread Create Exit Breakpoint* SetThreadName exceptions System DLL Load Thread Entry Debug Strings Thread Exit System TLS Callbacks* System DLL Unload Break on: User DLL Unload User TLS Callbacks* System Breakpoint* Entry Breakpoint* System DLL Entry User DLL Entry * Requires debuggee restart Engine Calculation Type &Signed &Unsigned Debug Engine* TitanEngine GleeBug Default Breakpoint Type INT3 Long INT3 UD2 Undecorate Symbol Names Enable Debug &Privilege Enable Source Debugging Disable Database Compression Save Database in Program Directory Skip INT3 stepping No Script Timeout Warning &Ignore inconsistent breakpoints Log If the Thread Has Switched Enable Verbose Exception Logging Disable WOW64 Single Step Workaround Disable ASLR Default maximum trace &count Animation per-step interval (ms) <html><head/><body>The debugger sleeps for a certain time in order to keep the interval between animation steps constant as specified in this setting.If you want to animate as fast as possible set this to 0.</body></html> * Requires debugger restart Exceptions Exception Filters: Ignore &Range &Delete Range Ignore &Last Ignore all first-chance exceptions, don't print log, pass them to the debuggee and only break on second-chance exceptions. Ignore First-Chance Break On First chance Second chance Do not break Logging Log exception Exception handled by Debugger Debuggee Disasm Argument Spaces Tab between mnemonic and arguments Hide pointer sizes Only show FS/GS segments Memory Spaces Uppercase Autocomments only on CIP Don't highlight operands Hide module name for local memory addresses Permanent highlighting mode Disable branch disassembly preview 0x prefix for values Don't show source lines in comments Assemble instruction on double-click Maximum module name size GUI Show FPU registers as little endian Save GUI layout and column orders Don't show close dialog Enable Load/Save Tab Order Show Watch Labels in Side Bar Do not call SetForegroundWindow Show RVA addresses in graph view Graph zoom mode Auto follow operand in stack Show exit confirmation dialog Disable auto completion in goto dialog Hide seasonal icons Disabling this option will tell Windows that x64dbg is DPI unaware. This might result in blurry results in some configurations. Qt High DPI Scaling Full executable path in title Disable icons* Dump in trace view consumes significant memory. It is used by many features in trace view that need to search for access to memory. If disabled, it will not be loaded by default. The user can always load the dump manually. Dump in already opened trace tabs are not disabled until you close them. Automatically load dump in trace view Misc Symbol Store: Symbol Path: Set x64dbg as Just In Time Debugger JIT: DIE SCUM! Search Engine URL UTF-16 Log Redirect* Use local help file (x64dbg.chm) Query process cookie* Query working set before reading memory Transparent exception stepping* Save Cancel Warning: Run the debugger as Admin to enable JIT. Settings saved! ERROR NOT FOUND OLD JIT NOT FOUND OLD JIT ENTRY STORED, USE SETJIT COMMAND Question Are you sure you want to add %.8X? ShortcutsDialog Hotkeys Action filter Hotkey Clear Save Cancel Action Settings saved! SimpleTraceDialog Hint: History is available in every text field with the Up/Down arrows! Lo&g Condition: &Command Text: &Break Condition: &Record trace Log &File... &OK C&ancel C&ommand Condition: &Maximum trace count: &Log Text: Example: %1 (numbers are hex by default) Example: %1 Trace log file It appears you have set the log file, but not the log text. This will result in an empty log. Do you really want to continue? Error Trace recording was requested, but not enabled. Failed to set log text/condition! Failed to set command text/condition! Failed to set log file! Failed to start trace! Enter the path to the log file. Log Files (*.txt *.log);;All Files (*.*) Trace recording already started SourceView Address Line Code Go to line Line (decimal): Open source file Show source file in directory &Copy Error Failed to open file! Failed to parse file! SourceViewerManager Close All Tabs StructWidget Struct Field Offset Address Size Value &Follow address in Dump Follow value in Dump Follow value in Disassembler Change address Display type Load JSON Parse header Remove Clear &Refresh &Copy Error No types loaded yet, parse a header first... Type to display Address to display %1 at JSON files (*.json);;All files (*.*) Header files (*.h *.hpp);;All files (*.*) SymbolView Form Base Module Party Path Status &Follow in Disassembler Follow in &Dump Follow &imported address Toggle Breakpoint Toggle Bookmark Help on Symbolic Name Follow &Entry Point in Disassembler Follow in Memory Map &Download Symbols for This Module Download Symbols for &All Modules Copy File &Path Browse in Explorer Load library... Free library Mark as &user module Mark as &system module Mark as &party... User System Party: %1 Import &Copy Select DLL Enter the path of a DLL to load in the debuggee. DLL Files (*.dll);;All Files (*.*) Are you sure you want to free the module: %1? This could introduce unexpected behaviour to your debugging session... Free Library Error! DbgSetBookmarkAt failed! Mark the party of the module as 0 is user module, 1 is system module. Error The party number can only be 0 or 1 SystemBreakpointScriptDialog System breakpoint scripts 1. System breakpoint script for every process Path: Browse Open 2. System breakpoint script for a specific process (debug a process to specify) 2. System breakpoint script for %1 Create Script files (*.txt *.scr);;All files (*.*) File not found Would you like to create a new script? Error! File open failed! Please open the file yourself... ThreadView Switch Thread Suspend Thread Resume Thread Suspend All Threads Resume All Threads Kill Thread Set Name Idle Above Normal Below Normal Highest Lowest Normal Time Critical AboveNormal TimeCritical BelowNormal Set Priority Go to Thread Entry &Copy Number ID Entry TEB EIP RIP Suspend Count Priority Wait Reason Last Error User Time Kernel Time Creation Time CPU Cycles Name Main Unknown Thread name - %1 TimeWastedCounter %1 events/s Time Wasted Debugging: TraceBrowser Index Address Bytes Disassembly Registers Memory Comments Start trace recording Trace recording file Trace recordings (*%1);;All files (*.*) Error File name contains invalid character. An error occurred when reading trace file (reason: %1). &Selection Selection to &File Selection (&No Bytes) Selection to File (No Bytes) &Export Table &RVA &File Offset &Copy &Follow in Dump &Highlighting mode Help on mnemonic Show mnemonic brief Hide mnemonic brief Expression Function return Previous Next Go to xrefs... Address/Constant Memory Reference &Search Information Sync with CPU Start recording Stop recording Close recording Close the trace file tab, and stop recording trace. Delete recording Delete the trace file from disk, and stop recording trace. Browse in Explorer Open the trace file in Explorer. Open trace recording Trace recording Trace recordings (*.%1);;All files (*.*) Are you sure you want to delete this recording? Address not found in trace The address %1 is not found in trace. Do you want to follow in CPU instead? Open File Text Files (*.txt) Could not open file Error! Selection not in a module... Selection not in a file... Constant %1 result(s) in %2ms References TraceDump &Copy Save To a File B&inary &File Offset &Find Pattern... &Expression Previous Next &Go to xrefs... &ASCII &Extended ASCII &Codepage... &Hex &Text Signed byte (8-bit) Signed short (16-bit) Signed long (32-bit) Signed long long (64-bit) Unsigned byte (8-bit) Unsigned short (16-bit) Unsigned long (32-bit) Unsigned long long (64-bit) Hex short (16-bit) Hex long (32-bit) Hex long long (64-bit) &Integer &Float (32-bit) &Double (64-bit) &Long double (80-bit) &Half float (16-bit) &Float &Address &Disassembly Enter expression to follow in Dump... Hex ASCII UNICODE Float (32-bit) Double (64-bit) Long double (80-bit) Half float (16-bit) Value Comments Save to file All files (*.*) Find Pattern... Error! Selection not in a file... Dump TraceFileSearch Constant: %1 Range: %1-%2 Address Index Disassembly Follow index in trace Reference Pattern: %1 Start Index End Index Follow start index in trace Follow end index in trace TraceInfoBox Jump is taken Jump is not taken Copy Line &Follow in Dump &Copy TraceManager Close All Tabs Open trace recording Trace recording Trace recordings (*.%1);;All files (*.*) Start recording Stop trace recording Start trace recording Open Recent Files TraceRegisters Copy floating point value Set as current value Follow in Dump View YMM register View XMM register View MMX register TraceStack Comments &Copy B&inary &DWORD &QWORD &Comments Follow E&SP Follow R&SP Follow E&BP Follow R&BP Go to &Expression Go to Previous Go to Next &Go to xrefs... Follow DWORD in &Stack Follow QWORD in &Stack &Follow DWORD in Disassembler &Follow QWORD in Disassembler Edit columns... Enter expression to follow in Stack... TraceWidget Form Goto Ctrl+G Load dump Disassembly Registers Dump Stack InfoBox Error Error when opening trace recording (reason: %1) Trace file is recorded for another debuggee Checksum is different for current trace file and the debugee. This probably means you have opened a wrong trace file. This trace file is recorded for "%1" Enabling the trace dump can consume a lot of memory (max ~%1GiB for this trace) and freeze x64dbg for prolonged periods of time. This feature is still experimental, please report any bugs you encounter. Warning Loaded trace dump in %1ms &Selected Address &Address: &Old value: &Value: &New value: &Constant: TraceXrefBrowseDialog Dialog &OK &Cancel xrefs at <%1> Selected xref All xrefs Copy UpdateChecker Checking for updates... Network Error! Error! File on server could not be parsed... New build %1 available! Download <a href="%2">here</a> You are now on build %3 You have a development build (%1) of x64dbg! You have the latest build (%1) of x64dbg! Information VirtualModDialog Virtual Module &Name: &Base: &Size: &OK &Cancel WatchView Name Expression Value Type Watchdog Mode ID %1 is not readable. Disabled Changed Is true Is false Not changed &Add... &Delete Rename &Edit... &Modify... Watchdog Uint Int Float Ascii Unicode &Copy Enter the expression to watch Example: [EAX] Enter the name of the watch variable Modify "%1" Cannot modify "%1" It might not possible to assign a value to "%1". WordEditDialog Edit Expression: Bytes: Unsigned: ASCII: Signed: &OK &Cancel XrefBrowseDialog Dialog &OK &Cancel xrefs at <%1> Toggle &Breakpoint Hardware, Access &Byte &Word &Dword &Qword Hardware, Write Remove &Hardware Memory, Access &Singleshoot &Restore on hit Memory, Write Remove &Memory Brea&kpoint Toggle breakpoints on all xrefs Selected xref All xrefs Copy ZehSymbolTable Address Type Ordinal Symbol Symbol (undecorated) Import Export