1
0
Fork 0
Commit Graph

1234 Commits

Author SHA1 Message Date
torusrxxx b767d39b3e cannot paste when clipboard is empty 2017-11-04 21:25:03 +01:00
torusrxxx 0985f490ef Copy hash 2017-11-04 21:24:40 +01:00
Alexandros Naskos 2f5d1135c6 Overriding a non global hotkey by a non global hotkey now asks user for confirmation 2017-11-04 21:23:49 +01:00
Duncan Ogilvie f14633f20a
GUI: fix weird looking uppercase 0X 2017-11-02 22:29:47 +01:00
Duncan Ogilvie 2f26a80b78
DBG+BRIDGE+GUI: deprecate DbgGetRegDump 2017-10-29 02:18:06 +02:00
torusrxxx ec0555dc0d
Added winerror format function and show help message for last error in reg view 2017-10-28 02:52:13 +02:00
Mattiwatti d5582c6a1f - DbgGetRegDumpEx(): copy lastStatus NTSTATUS name if requested struct size is >= sizeof(REGDUMP_V2)
- RegistersView: replace usages of REGDUMP with REGDUMP_V2 to access LastStatus register
2017-10-28 02:47:49 +02:00
Mattiwatti 1e639585db GUI changes for TEB->LastStatusValue:
- RegistersView: add LastStatus entry to REGISTER_NAME enum
- RegistersView: add modifiable LastStatus pseudo-register under LastError with the human-readable NTSTATUS name
2017-10-28 02:47:49 +02:00
Joel Höner a514176750 Add tokenizer support for pointer operands (#1781)
* Add tokenizer support for pointer operands
* Fixed pointer operand width calculation
2017-10-25 21:45:00 +02:00
Duncan Ogilvie ecbea6d9d8
GUI: fix Sonar issues 2017-10-22 17:07:45 +02:00
Torusrxxx c102670c3f Update TraceBrowser.cpp 2017-10-21 14:17:38 +00:00
RaMMicHaeL 75987325fb Remember navigation source in graph history (#1766)
* Remember navigation source in graph history

If you follow a jump or a call, and click on '-', you don't go back to the jump or the call (as in the regular CPU view), but to a previous, non-relevant command in the graph. This commit tries to fix this.

* Update DisassemblerGraphView.cpp

* Update DisassemblerGraphView.cpp
2017-10-18 22:48:57 +02:00
Alexandros Naskos f519f322da Added setting that controls MaxModuleSize. (#1765)
* Added spinbox that controls maximum module name size in the disassembler settings.

* Restored settings dialog default tab index to zero.
2017-10-18 22:47:43 +02:00
Torusrxxx 390bf4c5ca Trace recording (#1736)
* run trace file format
* record opcode
* Successfully recorded sample run trace
* fixed order of thread id and opcode
* use capstone in run trace
* Revised format;Stop tracing when stop debug;Changed ext name
* trace browser(draft)
* Lower bound
* Lower bound
* implemented more funcitons in trace file reader
* Initial trace browser
* trace browser works for single-page traces
* fixed page fault
* Multi-selection, fixed page faults
* copy disassembly
* resize columns
* address label;follow in disassembly
* highlight
* history,comment,breakpoint in trace view
* stricter validation to prevent buffer overflow
* MAX_MEMORY_OPERANDS=32
* fixing bug in memory access count
* Temporary info menu to view registers & memory
* assumed to fix thread id bug
* live update trace view
* Fixed a bug with registers recording (similar to thread id bug)
* Search for constant in trace file
* Fixed bugs with memory operands recording
* File header for trace file; Auto update trace viewer
* fix x64dbg_translations.pro
* Default filename for trace; Start trace from trace view
* Switch to Qt JSON
* Copy selection, file offset and RVA; recent files
* Properly implement MRU menu
* shortcut for tracing
* Fix file names with comma
* added interaction with tab closing
* change default directory for trace file
* fix minor issue
2017-10-16 20:00:26 +02:00
Duncan Ogilvie f85cea6bcd
GUI: change multi-selection hotkeys (#1743)
closes #1762
closes #1761
2017-10-14 19:46:47 +02:00
Atvaark c44c1f7fc6 GUI: add multiselect hotkeys to StdTable
This allows selecting multiple rows in e. g. the Breakpoints view
without having to use the mouse.

New hotkeys:
- Select all: (ctrl+a)
- Select first row (ctrl+home)
- Select last row (ctrl+end)
- Expand selection upwards (shift+up)
- Expand selection downwards (shift+down)
2017-10-14 17:26:39 +02:00
torusrxxx 8cf9f63bac Fixing #1752 2017-10-13 19:43:33 +02:00
Joel Höner c5c3358c52 Add range checks for operand access (fixes #1750) (#1751)
* DBG: added range checks to operand access
- previously, some instructions could trigger the `DebugBreak` path in `Zydis::operator[]`
* GUI: removed redundant semicolon
2017-10-10 21:01:59 +02:00
Duncan Ogilvie 9d692efbdf
PROJECT: AStyle 2017-10-09 23:42:23 +02:00
Duncan Ogilvie d365b5a590
GUI: fixed a typo in capstone_gui 2017-10-09 23:15:00 +02:00
Joel Höner 77c6e951f0 zydis_wrapper: Cleaned up branch types
- Remove unused semantic groups
- Improve handling of “far” in tokenizer
2017-10-09 10:02:13 +02:00
Joel Höner 8741e94bdb zydis_wrapper: Final touch
- Comment out diff code in GUI
- Enable optimization
- A few more whitelist entries in the diff code
- A few fixes in the old tokenizer to be consistent with the new one in diffs
- Remove LICENSE and README now that the wrapper is part of the x64dbg core repo
2017-10-09 10:02:13 +02:00
Joel Höner 5b1cf81f55 zydis_wrapper: Fixed x32 build 2017-10-09 10:02:13 +02:00
Joel Höner 16942049b3 QBeaEngine: Implemented reg & flag info again 2017-10-09 10:02:13 +02:00
Joel Höner af0ff55df3 zydis_wrapper: Better compliance with style-guide
- Removed underscores
- Removed redundant “zy” prefix
- Executed `AStyleWhore` (sorreh, I use git on my macOS host, can’t put it into pre-commit-hook)
2017-10-09 10:02:13 +02:00
Joel Höner ca9401fdb7 Moved “zydis_wrapper” into root repo
- Instead, we directly use Zydis as a submodule now
2017-10-09 10:02:13 +02:00
Joel Höner da0d4415e3 Print “far” token, support RTM instructions
- Also, more whitelist entries for the CS-Zydis diff
2017-10-09 10:02:13 +02:00
Joel Höner 0711ac09df Added CS vs Zydis diff code & various fixes
- Fixed various porting bugs in the Zydis `CapstoneTokenizer`
- Added Capstone vs Zydis tokenizing diff and various exceptions for known issues
2017-10-09 10:02:13 +02:00
Joel Höner 4c841d85c6 Renamed `Capstone` -> `Zydis`
- Prevents name clashes with actual capstone disassembler implementation
2017-10-09 10:02:13 +02:00
Joel Höner 5338a0a85b Replace Capstone with Zydis
- While at it, added branch info logic to disassembler class
  - Thus reduce direct checks by mnemonic in GUI and analysis code
- Replaced direct disassembler struct access with disassembler class calls where trivially possible
- Removed workarounds for empty segment registers
- Temp. disabled `cbInstrCapstone` command
- Temp. disabled flag stuff in `QBeaEngine`
2017-10-09 10:02:13 +02:00
Duncan Ogilvie 103866eafe
DBG+EXE+GUI: fixed some more sonar warnings 2017-10-08 20:19:32 +02:00
genuine bebc47b924 Show address with label in InfoBox
Address issue #1588
2017-10-05 17:25:56 +02:00
Danila Malyutin 8671ff2e57 fixup 2017-10-03 20:23:41 +02:00
Danila Malyutin 33024f5672 Fix standard conformance issues 2017-10-02 00:07:17 +02:00
torusrxxx 537b587f73 Fixing issues with memory map(closes #1720) 2017-09-16 17:55:40 +08:00
mrexodia 51c1b5f690
GUI: Don't freeze when calling BridgeResult::Wait() on the main ThreadClear
closes #1716
2017-09-12 00:36:34 +02:00
mrexodia ec66220dd5
GUI: don't select when changing the byte offset with ctrl+up/down
closes #1709
2017-09-11 17:58:34 +02:00
mrexodia 5e9ee7afc3
GUI: keep consistent when disabling summary (closes #1708) 2017-09-11 17:47:11 +02:00
torusrxxx 3879297c7a Fixed conditions in favourite tools 2017-09-06 12:40:47 +08:00
torusrxxx 1f2dd7a816 Fixed copy AVX register:32-bit app can use AVX 2017-09-06 12:30:30 +08:00
mrexodia 7db12dcd6e
GUI: copy in the same order as the view (closes #1712) 2017-09-06 03:56:46 +02:00
mrexodia 95d3a837bb
GUI: added back the remove all option in the BreakpointsView 2017-09-05 17:29:19 +02:00
mrexodia 1d47124ec3
GUI: don't check QueryProcessCookie per default
related: https://github.com/x64dbg/ScyllaHide/issues/32
2017-09-05 15:49:10 +02:00
mrexodia d8ad2e7f53
GUI: better clickable columns (thanks to ali56s for reporting!) 2017-09-04 22:57:49 +02:00
mrexodia 4f67fcada7
GUI: fixed some small coverity issues 2017-09-01 22:54:23 +02:00
mrexodia 037504643b
DBG+GUI: option to query the working set before attempting to read a memory page
workaround for http://www.triplefault.io/2017/08/detecting-debuggers-by-abusing-bad.html
2017-09-01 22:53:50 +02:00
mrexodia 4104c0a004
GUI: formatting + fixed a warning 2017-09-01 18:52:06 +02:00
torusrxxx f3132e9315 use dynamic casting 2017-09-01 18:51:20 +02:00
torusrxxx 144051162d Switch reference tabs by forward/back mouse buttons 2017-09-01 18:51:20 +02:00
torusrxxx fa92a9c474 Add Xref for switch cases; Follow switch cases in CPU. 2017-09-01 13:58:33 +02:00