x64dbg/x64dbg
x64dbg
/
x64dbg
1
0
Fork 0
Code Releases 4 Activity
3,814 Commits 45 Branches 31 Tags 70 MiB
Commit Graph

142 Commits

Author SHA1 Message Date
Torusrxxx 466d5e9173 Update cmd-misc.cpp 2017-10-25 11:21:44 +00:00
Torusrxxx db5c3e23af Update cmd-misc.cpp 2017-10-25 11:16:01 +00:00
torusrxxx 9a2cb20682 enhancement to run until return 2017-10-18 22:49:06 +02:00
Torusrxxx 390bf4c5ca Trace recording (#1736) 
* run trace file format
* record opcode
* Successfully recorded sample run trace
* fixed order of thread id and opcode
* use capstone in run trace
* Revised format;Stop tracing when stop debug;Changed ext name
* trace browser(draft)
* Lower bound
* Lower bound
* implemented more funcitons in trace file reader
* Initial trace browser
* trace browser works for single-page traces
* fixed page fault
* Multi-selection, fixed page faults
* copy disassembly
* resize columns
* address label;follow in disassembly
* highlight
* history,comment,breakpoint in trace view
* stricter validation to prevent buffer overflow
* MAX_MEMORY_OPERANDS=32
* fixing bug in memory access count
* Temporary info menu to view registers & memory
* assumed to fix thread id bug
* live update trace view
* Fixed a bug with registers recording (similar to thread id bug)
* Search for constant in trace file
* Fixed bugs with memory operands recording
* File header for trace file; Auto update trace viewer
* fix x64dbg_translations.pro
* Default filename for trace; Start trace from trace view
* Switch to Qt JSON
* Copy selection, file offset and RVA; recent files
* Properly implement MRU menu
* shortcut for tracing
* Fix file names with comma
* added interaction with tab closing
* change default directory for trace file
* fix minor issue
 2017-10-16 20:00:26 +02:00
torusrxxx 8cf9f63bac Fixing #1752 2017-10-13 19:43:33 +02:00
Joel Höner c5c3358c52 Add range checks for operand access (fixes #1750) (#1751) 
* DBG: added range checks to operand access
- previously, some instructions could trigger the `DebugBreak` path in `Zydis::operator[]`
* GUI: removed redundant semicolon
 2017-10-10 21:01:59 +02:00
Joel Höner 3fca5c9191 Ported & renamed `cbInstrCapstone` 2017-10-09 10:02:13 +02:00
Joel Höner af0ff55df3 zydis_wrapper: Better compliance with style-guide 
- Removed underscores
- Removed redundant “zy” prefix
- Executed `AStyleWhore` (sorreh, I use git on my macOS host, can’t put it into pre-commit-hook)
 2017-10-09 10:02:13 +02:00
Joel Höner 4c841d85c6 Renamed `Capstone` -> `Zydis` 
- Prevents name clashes with actual capstone disassembler implementation
 2017-10-09 10:02:13 +02:00
Joel Höner 5338a0a85b Replace Capstone with Zydis 
- While at it, added branch info logic to disassembler class
  - Thus reduce direct checks by mnemonic in GUI and analysis code
- Replaced direct disassembler struct access with disassembler class calls where trivially possible
- Removed workarounds for empty segment registers
- Temp. disabled `cbInstrCapstone` command
- Temp. disabled flag stuff in `QBeaEngine`
 2017-10-09 10:02:13 +02:00
Duncan Ogilvie 57235b2f24
DBG+EXE+LAUNCHER+BRIDGE: remove _CRT_SECURE_NO_WARNINGS 2017-10-08 16:16:20 +02:00
Duncan Ogilvie ba6e6dea63
DBG: full unicode support in ResolveShortcut 2017-09-30 14:30:40 +02:00
Duncan Ogilvie fcda76a470
DBG: fixed LibrarianEnableBreakpoint 2017-09-30 12:52:07 +02:00
mrexodia 082bcc0937
Merge remote-tracking branch 'origin/PLMDebug' into development 2017-09-01 22:54:53 +02:00
Torusrxxx 690b048c7f breakpoint, memory and threads view support multi-select (#1697) 
* breakpoint, memory and threads view support multi-select

* fixed

* use older breakpointsview

* fixed

* revert deps change

* command in reference view

* to-do

* fixed deps
 2017-09-01 13:57:41 +02:00
mrexodia 80210eb9b0
LAUNCHER+DBG: add support for PID attaching + PLMDebug in the command line 
closes #1698
 2017-08-28 11:41:37 +02:00
mrexodia 010a3bbf7e
DBG: better behaviour for "exhandlers" on XP 2017-08-25 13:02:37 +02:00
mrexodia 652c61f7f7
DBG+BRIDGE+GUI: warn when trying to render a graph with more than 5000 nodes 
(closes #1321)
 2017-08-21 15:13:02 +02:00
mrexodia 838b03e9d9
DBG: add ModEnum to remove various bottlenecks with module loading 2017-08-21 00:41:04 +02:00
mrexodia ca296699b0
DBG: added plugreload command 2017-08-17 23:54:43 +02:00
mrexodia 1b27b951ee
DBG+BRIDGE: added more detail in the BRIDGEBP structure (in the padding so backwards-compatible) 2017-08-13 17:17:15 +02:00
mrexodia b876d3b9f0
DBG: add memory breakpoint size (unimplemented) to breakpoint database 2017-08-13 16:27:55 +02:00
mrexodia 86b623b691
DBG: add module base to label list 2017-08-13 16:24:40 +02:00
mrexodia dbc6ceb3db
DBG: fixed warning on x64 2017-08-09 03:13:04 +02:00
mrexodia 2ff93e479a
DBG: set temporary labels for visited types 2017-08-09 02:41:00 +02:00
mrexodia f97439c9f5
DBG: introduce temp labels 2017-08-09 02:32:28 +02:00
pointerrrr b758ea6e9d DBG: The log now indicates the name of the breakpoint set (closes #1613) (#1662) 2017-07-27 22:53:09 +02:00
Torusrxxx 754ef54968 can use rtu (#1660) 2017-07-27 18:24:01 +02:00
genuine_ 18979ef6e9 Fixed some unsafe code (#1647) 
* Fix underflow of commandLine variable. (memset)

* Fix for integer inconsistencies

* fix for possible overflow at line 1841 of debugger.cpp. Offending code:

sprintf_s(command, "bp %p,\"DllMain (%s)\",ss", entry, modname);
 2017-07-25 12:54:41 +02:00
mrexodia 73a8a93cbe
DBG+LAUNCHER: fix #1635 (.NET files are now processed correctly) 2017-07-08 18:29:13 +02:00
mrexodia 6a4510ce3a
DBG: bpgoto now no longer refreshes the GUI if not breaking 2017-07-03 10:43:52 +02:00
mrexodia a2e245299a
DBG: gracefully break a trace when pausing 2017-06-30 14:41:44 +02:00
mrexodia 2588f7dc3e
DBG: workaround for pausing certain applications that are stuck in NtUserGetMessage 2017-06-27 03:13:32 +02:00
mrexodia 53841caab3
DBG: fixed a formatting problem in cbDebugLoadLib 2017-06-25 03:00:47 +02:00
Matthijs Lavrijsen ca060c17c1 Replace undocumented.h with ntdll header and libs (#1620) 
* Remove undocumented.h and replace it with header and .lib files for ntdll

* Replace ntdll function typedef + GetProcAddress combos with static imports
 2017-06-21 15:43:23 +02:00
mrexodia 8ba0580626
DBG: fixed up the loadlib and freelib functions 2017-06-06 23:58:24 +02:00
mrexodia 2fd5cedd0d
remove some TitanEngine calls 2017-05-25 03:24:29 +02:00
mrexodia cb2cb785ea
DBG+GUI: formatting + bigger disasm columns for string search 2017-05-11 06:18:32 +02:00
mrexodia 8979ef70b0
DBG: fixed intermodular calls (closes issue #900) 2017-05-05 18:56:38 +02:00
mrexodia 60382ae119
DBG: call DbgGetStringAt instead of disasmgetstringatwrapper 2017-05-05 18:09:01 +02:00
mrexodia 1eed1efe4a
DBG: fixed a bug with memory caching in log strings 2017-05-04 10:22:22 +02:00
mrexodia 771103c27a
DBG: include refactor 2017-04-29 19:45:34 +02:00
mrexodia f4a571a547
DBG: fixed search in modules that have section gaps 2017-04-29 01:57:46 +02:00
ThunderCls 33d482e74c Actions added to Handles/Windows table (#1561) 
- Enable/Disable window
- Follow classproc in disassembler
- Toggle bp in classproc
- Message bp in classproc (not implemented entry)
 2017-04-23 00:59:15 +02:00
Torusrxxx 5ddd4eadc0 internationalization issue fixed (#1536) 2017-04-12 15:22:43 +02:00
Torusrxxx 7e1eb2a8dc Add a comment for the newly allocated memory. This comment will show in the memory map. (#1531) 2017-04-11 12:41:35 +02:00
torusrxxx 68f18feec7 added internal command to resolve #1525 2017-04-11 00:20:20 +02:00
mrexodia 6cc5f4d849
DBG: no longer use ThreaderCreateRemoteThread 2017-04-08 15:16:38 +02:00
mrexodia e58bc13526
DBG+BRIDGE+GUI: nastry hack to force-flush the log on user commands 2017-03-18 16:45:33 +01:00
mrexodia 24cb79324e
DBG: added TraceSetLogFile command 2017-03-17 06:59:37 +01:00