1
0
Fork 0
Commit Graph

168 Commits

Author SHA1 Message Date
Duncan Ogilvie de2d930d8f
DBG+GUI: add transparent exception stepping option 2019-08-17 12:19:08 +02:00
Duncan Ogilvie d17852b63b DBG: fix a weird bug where dll breakpoints could not be deleted in certain cases 2019-06-25 21:17:45 +02:00
Duncan Ogilvie 80d84e7108
DBG: implement symunload command 2019-06-19 00:12:38 +02:00
Duncan Ogilvie 728f0eaa8d
DBG: fix various issues pointed out by Visual Studio code analysis 2019-06-19 00:12:31 +02:00
Duncan Ogilvie 1e075142a5 DBG: add symload command to manually load a PDB 2019-06-12 16:51:19 +02:00
Duncan Ogilvie 3b8469ba55 DBG: print rex info in Zydis command 2019-04-09 15:47:22 +02:00
Duncan Ogilvie 386e242645
DBG+GUI: removed yara 2019-04-06 13:18:16 +02:00
Duncan Ogilvie 85e96353cb
DBG+BRIDGE+GUI: put in the title whether x64dbg is elevated or not 2019-01-20 20:43:39 +01:00
Duncan Ogilvie 418541e46e
DBG: improve the skipInt3Stepping feature to work for long int3 instructions 2018-11-18 15:49:43 +01:00
Bálint Faragó 5162450ff3 Fix yara crash when used with a single argument 2018-11-04 23:14:31 +01:00
Bálint Faragó e0052d6b2b ZYDIS: Use ZydisOperandAction as an enum instead of a flag 2018-10-31 12:38:40 +01:00
Duncan Ogilvie 22861d69e5 Add some analysis for exceptions containing FACILITY_VISUALCPP in exinfo 2018-10-10 15:44:37 +02:00
torusrxxx d4ec06f6de Fixed a crash when tracing into far jump 2018-08-21 17:04:36 +02:00
Duncan Ogilvie d5ae04dce4
DBG: fully implement symdownload command without dbghelp usage 2018-07-01 19:27:56 +02:00
Duncan Ogilvie 637815b63d
DBG: symdownload now works without dbghelp 2018-07-01 19:27:55 +02:00
Duncan Ogilvie 95cacb3732 DBG: add information to Zydis command 2018-07-01 19:04:38 +02:00
torusrxxx 1cd3cfc469 fix mistakes 2018-06-03 17:43:30 +02:00
torusrxxx 4cf5508b5f add error descriptions to x64dbg failure messages 2018-06-03 17:43:30 +02:00
Duncan Ogilvie 3f33ad44cc
DBG+GUI: update zydis and fix some issues related to formatting
closes #1904
closes #1898
2018-04-05 00:20:31 +02:00
Duncan Ogilvie 53e621c175
DBG: replace WAITID_STOP with a more reliable method
closes #1852
2018-03-04 22:04:04 +01:00
Duncan Ogilvie 0e2ff40443
DBG: remove unused parameter from RecursiveAnalysis class 2017-12-17 02:05:53 +01:00
torusrxxx f29d660b6e Search for function pointer 2017-12-17 02:05:39 +01:00
Duncan Ogilvie 4db8d02cf4
DBG: show operand visibility in Zydis command 2017-11-14 16:00:54 +01:00
torusrxxx 3116b3dde0 fixed NTSTATUS name 2017-11-07 20:24:01 +01:00
Joel Höner 15b0e73ba0 DGB: fix disp+imm printing in “zydis” command 2017-11-07 20:22:15 +01:00
Duncan Ogilvie 0762182973
DBG: implement DLL breakpoints directly in x64dbg 2017-10-25 21:58:01 +02:00
Torusrxxx 466d5e9173 Update cmd-misc.cpp 2017-10-25 11:21:44 +00:00
Torusrxxx db5c3e23af Update cmd-misc.cpp 2017-10-25 11:16:01 +00:00
torusrxxx 9a2cb20682 enhancement to run until return 2017-10-18 22:49:06 +02:00
Torusrxxx 390bf4c5ca Trace recording (#1736)
* run trace file format
* record opcode
* Successfully recorded sample run trace
* fixed order of thread id and opcode
* use capstone in run trace
* Revised format;Stop tracing when stop debug;Changed ext name
* trace browser(draft)
* Lower bound
* Lower bound
* implemented more funcitons in trace file reader
* Initial trace browser
* trace browser works for single-page traces
* fixed page fault
* Multi-selection, fixed page faults
* copy disassembly
* resize columns
* address label;follow in disassembly
* highlight
* history,comment,breakpoint in trace view
* stricter validation to prevent buffer overflow
* MAX_MEMORY_OPERANDS=32
* fixing bug in memory access count
* Temporary info menu to view registers & memory
* assumed to fix thread id bug
* live update trace view
* Fixed a bug with registers recording (similar to thread id bug)
* Search for constant in trace file
* Fixed bugs with memory operands recording
* File header for trace file; Auto update trace viewer
* fix x64dbg_translations.pro
* Default filename for trace; Start trace from trace view
* Switch to Qt JSON
* Copy selection, file offset and RVA; recent files
* Properly implement MRU menu
* shortcut for tracing
* Fix file names with comma
* added interaction with tab closing
* change default directory for trace file
* fix minor issue
2017-10-16 20:00:26 +02:00
torusrxxx 8cf9f63bac Fixing #1752 2017-10-13 19:43:33 +02:00
Joel Höner c5c3358c52 Add range checks for operand access (fixes #1750) (#1751)
* DBG: added range checks to operand access
- previously, some instructions could trigger the `DebugBreak` path in `Zydis::operator[]`
* GUI: removed redundant semicolon
2017-10-10 21:01:59 +02:00
Joel Höner 3fca5c9191 Ported & renamed `cbInstrCapstone` 2017-10-09 10:02:13 +02:00
Joel Höner af0ff55df3 zydis_wrapper: Better compliance with style-guide
- Removed underscores
- Removed redundant “zy” prefix
- Executed `AStyleWhore` (sorreh, I use git on my macOS host, can’t put it into pre-commit-hook)
2017-10-09 10:02:13 +02:00
Joel Höner 4c841d85c6 Renamed `Capstone` -> `Zydis`
- Prevents name clashes with actual capstone disassembler implementation
2017-10-09 10:02:13 +02:00
Joel Höner 5338a0a85b Replace Capstone with Zydis
- While at it, added branch info logic to disassembler class
  - Thus reduce direct checks by mnemonic in GUI and analysis code
- Replaced direct disassembler struct access with disassembler class calls where trivially possible
- Removed workarounds for empty segment registers
- Temp. disabled `cbInstrCapstone` command
- Temp. disabled flag stuff in `QBeaEngine`
2017-10-09 10:02:13 +02:00
Duncan Ogilvie 57235b2f24
DBG+EXE+LAUNCHER+BRIDGE: remove _CRT_SECURE_NO_WARNINGS 2017-10-08 16:16:20 +02:00
Duncan Ogilvie ba6e6dea63
DBG: full unicode support in ResolveShortcut 2017-09-30 14:30:40 +02:00
Duncan Ogilvie fcda76a470
DBG: fixed LibrarianEnableBreakpoint 2017-09-30 12:52:07 +02:00
mrexodia 082bcc0937
Merge remote-tracking branch 'origin/PLMDebug' into development 2017-09-01 22:54:53 +02:00
Torusrxxx 690b048c7f breakpoint, memory and threads view support multi-select (#1697)
* breakpoint, memory and threads view support multi-select

* fixed

* use older breakpointsview

* fixed

* revert deps change

* command in reference view

* to-do

* fixed deps
2017-09-01 13:57:41 +02:00
mrexodia 80210eb9b0
LAUNCHER+DBG: add support for PID attaching + PLMDebug in the command line
closes #1698
2017-08-28 11:41:37 +02:00
mrexodia 010a3bbf7e
DBG: better behaviour for "exhandlers" on XP 2017-08-25 13:02:37 +02:00
mrexodia 652c61f7f7
DBG+BRIDGE+GUI: warn when trying to render a graph with more than 5000 nodes
(closes #1321)
2017-08-21 15:13:02 +02:00
mrexodia 838b03e9d9
DBG: add ModEnum to remove various bottlenecks with module loading 2017-08-21 00:41:04 +02:00
mrexodia ca296699b0
DBG: added plugreload command 2017-08-17 23:54:43 +02:00
mrexodia 1b27b951ee
DBG+BRIDGE: added more detail in the BRIDGEBP structure (in the padding so backwards-compatible) 2017-08-13 17:17:15 +02:00
mrexodia b876d3b9f0
DBG: add memory breakpoint size (unimplemented) to breakpoint database 2017-08-13 16:27:55 +02:00
mrexodia 86b623b691
DBG: add module base to label list 2017-08-13 16:24:40 +02:00
mrexodia dbc6ceb3db
DBG: fixed warning on x64 2017-08-09 03:13:04 +02:00