x64dbg

[mr.exodia]

hi,

yes, this bug has been reported various times, I will include this in the limitations.

greetings

[mr.exodia]

V1.7ALPHA is out!

Changelog:
- some help updates
- added version information to file
- detach using right click -> detach on the tab you want to detach
- fixed a bug when searching for strings twice (search didn't work)
- fixd a crash on loading an empty script
- fixed a potential overflow while escaping a debug string
- escape the section names from the memory map
- better pattern finder
- added command auto-completion (includes plugin commands)
- removed an annoying log message on clicking a plugin menu
- fixed bugs in GuiSelectionGet & GuiSelectionSet (thanks to ahmadmansoor)
- added commandline support (x64_dbg.exe "c:\program files\test.exe")
- fixed a bug in modbasefromname (thanks to Artic!)
- added status bar API
- added bpdll command
- fixed a bug in DeviceNameResolver
- fixed various bugs in TitanEngine
- fixed a bug with manual functions in the GUI
- added various bridge exports

Download:
https://sf.net/p/x64dbg

Greetings,

Mr. eXoDia

[CrackDJ]

Hey bro eXoDia, thanks for sharing latest alpha! I was been waiting by x64 version for a long time ago.

Greetz,
CD

[mr.exodia]

V1.8ALPHA is out!

Welcome tr4ceflow to the team!

Changelog:
- added IDA-like sidebar
- color customization
- instruction tokenizing
- allow highlighting of instruction tokens (CTRL+H)
- new register view that highlights changes
- fixed a bug with detaching
- updated BeaEngine
- new database format (JSON + lz4)
- massive performance improvements
- use SHIFT for selection
- small fixes
- project code cleaup
- more API functions

Website (made by tr4ceflow):
http://x64dbg.com

Greetings,

Mr. eXoDia

[DMichael]

Originally Posted by mr.exodia

V1.8ALPHA is out!

Welcome tr4ceflow to the team!

Changelog:
- added IDA-like sidebar
- color customization
- instruction tokenizing
- allow highlighting of instruction tokens (CTRL+H)
- new register view that highlights changes
- fixed a bug with detaching
- updated BeaEngine
- new database format (JSON + lz4)
- massive performance improvements
- use SHIFT for selection
- small fixes
- project code cleaup
- more API functions

Website (made by tr4ceflow):
http://x64dbg.com

Greetings,

Mr. eXoDia

the website is really handsome and the performance boost is awesome!

but i'm found a bug: if you try to load DLL without 'Sytem Breakpoint' but with regular stop on EP it crashes (x64_dbg(x32))

Thanks for sharing x64 version
ــــــــــــــــــــــــــــــــــــــــــــــــــــــــــــــــــــ
BEST REGARDS
؟?؟ ALEN ؟?؟

[n00b]

OMG mate, your debugger just can't stop to amaze me - the best X64 debugger to date!
It's working perfect, nothin more or less to say

Only thing I'd like to add which would be useful has to be the ability to copy bytes from sub-menu when selecting either 1 line or several in the core window, and/or in the dump window

[mr.exodia]

V1.9ALPHA is out, featuring many requested changes!

Changelog:
http://x64dbg.com/changelog.html (crash when posting the actual changelog)

Website:
http://x64dbg.com

Greetings,

Mr. eXoDia

[besoeso]

hi, i got a problem in solve module name in new release v.1.9 release.

Pic attached.

A greeting.

error_solve_name.JPG

[besoeso]

Cpu view pic attached.

cpu_view.JPG

[mr.exodia]

@besoeso: Could I use TeamViewer to debug x64_dbg on your computer? I cannot reproduce this problem...

EDIT: First please try these DLL files (copy&overwrite in x64_dbg directory). Please tell me the exact error message, maybe I can provide some fixes for that.

Greetings,

Mr. eXoDia

[mr.exodia]

Hey guys,

Thanks to besoeso I found a bug in the WinAPI which caused NtQueryObject to not set the required structure size. Long story short, if you have Windows XP, download the updated DeviceNameResolver here and copy&replace it in your x64_dbg directory: https://bitbucket.org/mrexodia/devicenameresolver/downloads/DeviceNameResolver_002.rar

Greetings,

Mr. eXoDia

[TheEnd]

Originally Posted by mr.exodia

Hey guys,

Thanks to besoeso I found a bug in the WinAPI which caused NtQueryObject to not set the required structure size. Long story short, if you have Windows XP, download the updated DeviceNameResolver here and copy&replace it in your x64_dbg directory: https://bitbucket.org/mrexodia/devicenameresolver/downloads/DeviceNameResolver_002.rar

Greetings,

Mr. eXoDia

have the same bug in Win7 x32?

[-=bb=-]

Firstly I would like to say WOW! Thank you for a fantastic release - truly brilliant work.

Secondly it seems to crash (here at least) when searching for intermodular calls. If you could let me know what I can do in the way of providing logs, links to target, my set up etc I would be more than happy to offer what assistance I can in troubleshooting this.

Finally, as suggestions for improvement :

1. make the reference windows sortable (or even better searchable) (SO much easier to track down stuff that way)
2. some sort of "Copy all modifications to executable" option and
3. showing referenced data in the window below the disassembly window i.e

Test qword ptr ds[r9+4],0 at RDX and in the window display

Qword ptr ds[r9+4] = 00000001404EEDC0

I realise that most of us are asking to integrate OllyDbg functionality into x64_dbg but IMHO these are some of the most useful. To me anyway

Once again mr. exodia - thank you for a fantastic tool

[mr.exodia]

@TheEnd: Did you try the fix in the post above yours?

@-=bb=-:

Thanks!

Regarding the crash, best would be to send me a video/txt how to reproduce it + (most importantly) the file you tried it on. Everything is working fine here.

Regarding your suggestions:
1. first point is implemented 2 seconds ago (thanks for reminding me), second point is already implemented
2. already implemented, try the 'Select groups' button in the patch dialog
3. thanks, but this has been requested a few times now (see issues.x64dbg.com)

To everyone requesting features: make sure it's not already implemented! or already on the issues list http://issues.x64dbg.com Please also create an issue at http://issue.x64dbg.com this allows everyone to work on it.

Greetings,

Mr. eXoDia