Jump to content
View in the app

A better way to browse. Learn more.

Tuts 4 You

A full-screen app on your home screen with push notifications, badges and more.

To install this app on iOS and iPadOS
  1. Tap the Share icon in Safari
  2. Scroll the menu and tap Add to Home Screen.
  3. Tap Add in the top-right corner.
To install this app on Android
  1. Tap the 3-dot menu (⋮) in the top-right corner of the browser.
  2. Tap Add to Home screen or Install app.
  3. Confirm by tapping Install.

Feature suggestions

Featured Replies

  • Author

https://i.imgur.com/ujy229a.gifv

Which app? x32dbg or x64dbg?

  • Replies 180
  • Views 60.4k
  • Created
  • Last Reply

Top Posters In This Topic

Most Popular Posts

  • What about a function like collapse when RSP point to a system call? I have made a sample to make it clear. I think that can be one of the cleanest solution without wrongly show in the stack the

  • Not sure if these have been requested:   1. Ability to sort the symbols (exports) by name 2. Ability to search for binary strings 3. Ability to set a memory breakpoint in the memory map window 4.

  • Possibillity to write/edit script in script tab would be great.

Posted Images

x64dbg mate. How u capture this gifv? So i can capture myself and show u.

  • Author

I also tried x64dbg, everything works fine. Please give me exact instructions and the program you are using. I used ShareX to record this gif

watch disabled by default, activate impossible from changes (snapshot_2016-08-30_11-05.7z).
Watchdog submenu does not work.

Edited by sstrato

  • Author

Should be fixed soon.

  • 2 weeks later...

Search constant in the CPU window does not work.

Possible solution change order of parameters in line CPUDisassembly.cpp:

original:

DbgCmdExec(QString("findref %1, %2, 0, %3").arg(addrText).arg(constText).arg(refFindType).toUtf8().constData());

change for:

DbgCmdExec(QString("findref %1, %2, 0, %3").arg(constText).arg(addrText).arg(refFindType).toUtf8().constData());

 

  • Author

@sstrato Thanks a lot, I really had no clue what was going on there.

  • 2 weeks later...

To validate or out of the window data modification must press 2 times on the buttons.

Video_2016-10-01.wmv

In X32dbg addresses are displayed correctly and rare characters.

Adress-err.wmv

  • Author

@sstrato The bug with pressing twice should be fixed. I will check the other bug.

The above bugs are solved thanks.
The following is not annoying, but the text strings that contain rare characters do not line up correctly when using the command search.tex-des.png

Edited by sstrato

  • 3 weeks later...

No menu is displayed RBP, EBP.

2016-10-20_NO-BP.png

possible changes in cpustack.cpp solution:

ori:

mMenuBuilder->addAction(makeAction(DIcon("cbp.png"), ArchValue(tr("Follow E&BP"), tr("Follow R&BP")), SLOT(gotoBpSlot())), [this](QMenu*)
    {
        return DbgMemIsValidReadPtr(DbgValFromString("cbp"));
    });


change:


mMenuBuilder->addAction(makeAction(DIcon("cbp.png"), ArchValue(tr("Follow E&BP"), tr("Follow R&BP")), SLOT(gotoBpSlot())));

2016-10-20_BP.png

  • Author

@sstrato Thanks, the actual solution is that `cbp` is not a valid register. I replaced it with `ArchValue("esp", "rsp")` thanks!

OK, Thanks.

  • Author

@sstrato I found and fixed a bug in editing the FPU registers with little/big endian. The other bug with the non-refreshed disassembly should now also be fixed. There were lots of performance improvements but some state would carry over to the next debug session and because the first disassemble was at the same address as before the restart it would not update. Thanks!

The registration window (FPU) continues to show changes in the records. Thank you.

@mrexodia;

Dear mrexodia, I've a strange issue with the jump taken/not taken arrows when it is stated to jump it doent, and vis versa.

I'll explain with this GIF image as well as my ini file:

 

2016-10-23_19-30-32.gif

x32dbg.ini

Edited by samoray

  • Author

@samoray Yeah sorry about that, there were some performance improvements but I fornicated it up. It should be fixed now, you can see http://x64dbg.com/blog/#disassembly-speed-improvements for more information.

@mrexodia: thanks for your reply, but I think the problem is not yet fixed, see this:

 

2016-10-24_15-21-11.gif

  • Author

Thanks again, it should finally be fixed now lolol

  • 2 weeks later...

Breakpoints counter is not updated correctly.

refres_count_bp.wmv

OK.

 

Edited by sstrato

Hi mrexodia,

Here is a feature request if interesting for you.

For me, it's quite handy the "Virtual:" editbox in a Memory panel in Windbg. For example, you just type "eax" into that editbox and the memory content is always refreshed when EAX changes. Of course, if EAX points to an invalid address, no memory is displayed.

You can place there other expressions (like a fix memory address, of regs arithmetics like "eip + 1", etc) and the memory content is updated while tracing.

I was thinking that in the x64dbg "Dump" panel, apart from your "Command" edit box, you could also add another edit box with "Virtual:".

If something is not clear, let me know and I will send you more information.

Thanks!

 

  • Author

@alorent This has already been implemented. Use the 'sync with expression' context menu option.

Edited by mrexodia

Create an account or sign in to comment

Configure browser push notifications

Chrome (Android)
  1. Tap the lock icon next to the address bar.
  2. Tap Permissions → Notifications.
  3. Adjust your preference.
Chrome (Desktop)
  1. Click the padlock icon in the address bar.
  2. Select Site settings.
  3. Find Notifications and adjust your preference.