Jump to content
Tuts 4 You

Some remarks and suggestions


Hellsp@wn

Recommended Posts

Hellsp@wn
some remarks:

 

1. copy to clipboard? (asm, hex, dump, stack, regs)

2. show reg value in listing comment only if EIP == address command. Not always!

3. if current EIP for example > "cmp r13d, 1" then show in window value of "r13d" like OllyDbg

4. then i insert "debugbreak" in my code, how i can pass it x64_dbg? F7,F8,F9 crash app ^(

5. sample: call 401000 @401000: call MessageBoxA (call 401000 > can auto rename to MessageBoxA)

Edited by Hellsp@wn
  • Like 1
Link to comment

@Hellsp@wn:

1. copy to clipboard? (asm, hex, dump, stack, regs)

Yep, it's on the todo list :). If you want, please vote for it, so I know what's the most important thing for you guys.

https://bitbucket.org/mrexodia/x64_dbg/issue/63/copy-address-opcode-instruction-text

 

2. show reg value in listing comment only if EIP == address command. Not always!

seems like a good idea, added that to the todo list as well :Dhttps://bitbucket.org/mrexodia/x64_dbg/issue/98/register-strings-labels-only-on-cip

 

3. if current EIP for example > "cmp r13d, 1" then show in window value of "r13d" like OllyDbg

jep, updated the description a little according to the EIP part: https://bitbucket.org/mrexodia/x64_dbg/issue/64/infobox

 

4. then i insert "debugbreak" in my code, how i can pass it x64_dbg? F7,F8,F9 crash app ^(

ah, thats included in the API only (SetDbgContinueStatus or something in TitanEngine), see this issue https://bitbucket.org/mrexodia/x64_dbg/issue/53/pass-exception-to-program-or-swallow

 

5. sample: call 401000 @401000: call MessageBoxA (call 401000 > can auto rename to MessageBoxA)

I don't understand this one completely, do you mean this?:

 

@401000:jmp dword ptr ds:[imp_MessageBoxA]@XXX:call 401000 -> call [JMP.MessageBoxA] ?
Thanks for the suggestions :)

@Waimokein:

Feel free to write an OllyDbg plugin loader plugin for x64_dbg ;)

Greetings,

Mr. eXoDia

Edited by Mr. eXoDia
Link to comment

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...