1
0
Fork 0
Commit Graph

780 Commits

Author SHA1 Message Date
changeofpace b4bc8546a8 Do not add breakpoint if SetBPX fails. (#1460)
* call SetBPX before BpNew in cbDebugSetBPX to prevent failed bps from being added to the bp map.

* revert previous change.  Call BpDelete if SetBPX failed.

* remove commented code.
2017-02-18 14:03:54 +01:00
Torusrxxx 1ae3b7d178 handles and windows view (#1417)
* handles and windows view

* use references view for heap, cleaned up

* fix #1424 use decimal pid and tid

* thread name in windows view

* fix something when not debugging

* heaps view hidden
2017-02-18 13:56:59 +01:00
mrexodia 8e0a779b20
DBG: correctly enforce reads/writes on page boundaries (closes #1446) 2017-02-05 20:45:06 +01:00
mrexodia 48df1c4c2c
DBG: updated savedata behavior 2017-02-05 20:31:17 +01:00
mrexodia 5a0a932524
DBG: slightly improved import parsing (#1455) 2017-02-05 20:16:47 +01:00
mrexodia 8788d66cf5
DBG: improved exinfo and capstone commands 2017-02-04 06:04:36 +01:00
mrexodia 003260c2dd
DBG: dont crash on strcpy_s when user-provided sizes 2017-01-31 16:08:10 +01:00
changeofpace cc01ae09a0 fix MemRead to only return true if NumberOfBytesRead is equal to the requested read size (#1426)
* fix MemRead to only return true if NumberOfBytesRead is equal to the requested read size

* preserve Size arg value

* adjust readSize before page loop in MemRead
2017-01-18 22:42:45 +01:00
changeofpace 5d36e73033 fixed multiple session process cookie bug when MemInitRemoteProcessCookie fails before brute-force loop (#1418) 2017-01-18 14:42:53 +01:00
mrexodia 0b18f65653
DBG: don't clear patches unless the debuggee is terminating (fixes #1419) 2017-01-18 14:40:46 +01:00
mrexodia 9118d7f9d8
DBG: various small improvements to the mov command 2017-01-10 20:30:54 +01:00
changeofpace 6c9eb3d6e3 Remote process cookie support for Windows XP/Vista/7 (#1412)
* added MemInitRemoteProcessCookie and memory.cpp global fallbackCookie

* changed sizeof arg for MemRead
2017-01-10 12:21:07 +01:00
mrexodia 415fe99871
DBG: support multiple string references in one instruction 2017-01-10 12:19:04 +01:00
mrexodia 9f7f649f7e
DBG+GUI: implemented trace switch condition 2017-01-10 12:14:01 +01:00
mrexodia 6f92218437
DBG: todo note 2017-01-10 10:35:50 +01:00
mrexodia 0f4a5fa074
DBG: workaround for a bug/feature in WOW64 that breaks stepping 2017-01-10 10:34:51 +01:00
mrexodia ee3af0a2df
DBG+BRIDGE+GUI: fixed possible out-of-range access related to data disassembly 2017-01-10 10:16:49 +01:00
mrexodia 0767d74ef2
DBG+GUI: fixed various @coverity issues 2017-01-09 01:10:43 +01:00
mrexodia 94b2280e59
DBG: fixed memory leak with analyze_nukem 2017-01-08 23:43:55 +01:00
mrexodia 0c5a1a89f0
DBG: fixed restart as admin with spaces in the path 2017-01-08 23:32:58 +01:00
mrexodia db44e0b24d
DBG: updated TitanEngine (resolves issue #1190) thanks to @nmikhailov 2017-01-07 16:59:51 +01:00
mrexodia 37fe2150e9
GUI: properly fixed #1408 2017-01-06 11:34:43 +01:00
mrexodia 04a97b51d6
DBG: fixed default trace condition 2017-01-05 02:31:45 +01:00
mrexodia 42978d6359
DBG: fixed small spacing issue in window title 2017-01-04 03:04:07 +01:00
mrexodia b8cf80a32f
BRIDGE+DBG: added apis to access TEB/PEB 2017-01-03 23:36:57 +01:00
mrexodia 53f300b32a
DBG: SIZE_T -> duint 2017-01-03 15:28:49 +01:00
changeofpace 16f0c9871c fix incorrectly restored page protection for cross-boundary memory reads (#1406)
* added a VirtualQueryEx check to MemRead to prevent reads which span multiple memory regions

* replaced VirtualQueryEx check with code to calc # page reads based on base address
2017-01-02 20:44:07 +01:00
mrexodia 598b476132
DBG: further improved string detection heuristics 2017-01-02 13:36:42 +01:00
mrexodia 4ba4bcce1c
DBG: removed restrictive heuristic for string detection 2017-01-02 13:25:51 +01:00
mrexodia ad6b94cfd5
DBG: improvements to the string detection algorithm #1405 2017-01-02 03:54:56 +01:00
mrexodia b52e768b61
DBG: improved the disasmispossiblestring function 2017-01-02 03:14:57 +01:00
mrexodia f2f2255457
DBG: resolved #1407 (weird focus issues with patch dialog) 2017-01-02 03:12:45 +01:00
mrexodia 1379754c16
DBG: reverted change to string detection #1405 2017-01-01 15:55:44 +01:00
mrexodia 5e37953883
DBG: limit the maximum amount of exception to be skippable (resolves #1325 #1341) 2016-12-29 00:21:29 +01:00
mrexodia 8b4c784457
DBG+GUI+BRIDGE: added various menu manipulation functions for plugins 2016-12-26 12:44:03 +01:00
mrexodia e09c325090
DBG: unload all plugin callbacks before FreeLibrary (resolves #1397) 2016-12-26 12:07:23 +01:00
mrexodia 1ebcb070ae
DBG: resolved issue #1383 (still print autocomments for constant values with 'Autocomment on CIP' enabled) 2016-12-17 17:03:30 +01:00
mrexodia 1d00a61ba2
Merge branch 'development' of https://github.com/ThunderCls/x64dbg into ThunderCls-development
Also made various cleanup changes
2016-12-16 14:30:04 +01:00
Torusrxxx 84b1df9bf6 Highlight segment register from reg view (#1376) 2016-12-16 12:22:54 +01:00
ThunderCls 22108bd046 Load/Free Modules in Symbols window
- Added command "freelib" to free a module previously loaded
- Added menu entries for load/free modules in the symbols view
2016-12-14 00:23:00 -05:00
mrexodia c6a486a563
DBG+LAUNCHER: slight refactor of GetFileArchitecture to support certain edge cases 2016-12-13 19:54:43 +01:00
mrexodia 82492025bb
Merge branch 'development' of https://github.com/jossgray/x64dbg into jossgray-development 2016-12-13 19:09:27 +01:00
mrexodia 7bfd2b1a0f
DBG: thread entry symbolic address 2016-12-13 18:53:43 +01:00
mrexodia d37e75d126
DBG+LAUNCHER: fixed launcher with a working directory set 2016-12-13 18:53:43 +01:00
jossgray 9732d3e440 Fix failing to read IMAGE_NT_HEADERS when it is at an address greater than 0x1000. 2016-12-13 17:52:51 +00:00
Xiaoyin Liu 7bb1198900 Use HTTPS for Microsoft symbol server URL (#1300)
Update Microsoft symbol server URL to https://msdl.microsoft.com/download/symbols. This is the default sympath in WinDbg 10.0.14321
2016-12-13 02:41:35 +01:00
mrexodia 72eae713db
DBG+BRIDGE+GUI: added various features to restart as admin 2016-12-13 02:11:40 +01:00
changeofpace 4aca3cba64 added extra info prints for access violation exceptions for the exinfo command (#1361)
* added extra info prints for access violation exceptions for the exinfo command

* reverted to original ExceptionInformation loop in exinfo cmd.  added comments for access violation exceptions
2016-12-11 09:06:07 +01:00
changeofpace 901a25dd45 #1312 disable exinfo on exceptions (#1358)
* Added engine settings option to disable printing exinfo for every exception.

* fixed default tab
2016-12-11 09:05:15 +01:00
Torusrxxx 694d94cf1f config command (#1355)
* config command

* Find window in attach dialog

* attach to hidden process
2016-12-11 09:04:40 +01:00