An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.
Go to file
mr.exodia abca61daec PROJECT: updated help
DBG: added cmp instruction
DBG: fixed branch detection (not works completely)
2014-02-10 22:44:35 +01:00
bin DBG: updated dbghelp binaries 2014-02-10 21:00:40 +01:00
help PROJECT: updated help 2014-02-10 22:44:35 +01:00
x64_dbg_bridge GUI: double click changes script IP 2014-02-09 22:23:22 +01:00
x64_dbg_crash first draft of the script window 2014-02-09 00:18:16 +01:00
x64_dbg_dbg PROJECT: updated help 2014-02-10 22:44:35 +01:00
x64_dbg_exe PROJECT: added x64_dbg_crashdump project (generate crash dumps for analysis) 2014-02-05 17:47:37 +01:00
x64_dbg_gui/Project GUI: double click changes script IP 2014-02-09 22:23:22 +01:00
.gitignore PROJECT: updated todo list 2013-12-07 20:25:58 +01:00
bug.ico first commit 2013-11-14 21:55:18 +01:00
clean.bat PROJECT: updated clean.bat 2013-12-06 15:10:44 +01:00
readme.txt PROJECT: updated readme 2013-12-28 02:45:44 +01:00
todo_dbg.txt PROJECT: updated help 2013-12-28 02:33:23 +01:00
x64_dbg.sln PROJECT: added x64_dbg_crashdump project (generate crash dumps for analysis) 2014-02-05 17:47:37 +01:00
x64_dbg.workspace PROJECT: added x64_dbg_crashdump project (generate crash dumps for analysis) 2014-02-05 17:47:37 +01:00

[This is a new version of this repository. The old version can be found ]
[here: https://bitbucket.org/mrexodia/x64_dbg_old                       ]

>Installation guide:
1) Download the latest 'qt_base_XXX.rar'
2) Download the latest 'bin_base_XXX.rar'
3) Download the latest 'release_xxx.rar'
4) (Optional) Download the latest 'help_XXX.rar'
5) Extract all in the same directory
6) Run 'bin\x64\x64_dbg.exe' or 'bin\x32\x32_dbg.exe'

>Overview:
This is a x64/x32 debugger that is currently in active development.

The debugger has (currently) three parts:
- DBG
- GUI
- Bridge

DBG is the debugging part of the debugger. It handles debugging (using
TitanEngine) and will provide data for the GUI.

GUI is the graphical part of the debugger. It is built on top of Qt and it
provides the user interaction, the dump window (not yet implemented), the
disassembly, the register window, the memory map view, the log view etc.

Bridge is the communication library for the DBG and GUI part (and maybe in
the future more parts). The bridge can be used to work on new features,
without having to update the code of the other parts.

>Features:
- variables (with regard to the upcoming script feature)
- basic calculations (var*@401000+.45^4A)
- hide debugger (very basic)
- software breakpoints (INT3, LONG INT3, UD2)
- memory breakpoints (read, write, execute)
- hardware breakpoints (access, write, execute)
- stepping (into, over, n instructions)
- rtr (return from function)
- memory allocation/deallocation in the debuggee
- quickly accessing API addresses (GetProcAddress->76E13620)
- highlighting (not yet customizable, but really helpful)
- memory map
- basic module labeling
- import reconstruction (plugin using Scylla)
- drag&drop files
- goto window
- register/flags view with editing support
- quite fast working in really big code pages (tested up to 5GB)
- GUI hotkeys
- dynamic jump arrow (just like OllyDbg)
- user databases for labels/comments/breakpoints/bookmarks (*.dd64 or *.dd32 files)
- easy context menu in disassembly (to set breakpoints etc)
- plugin support
- (manual) function analysis
- easily follow calls/jumps/ret (press ENTER in when selecting)
- (buggy) dynamic commenting

>Known bugs:
- memory breakpoints sometimes fail (TitanEngine bug)

>Last words:
The debugger core is based on TitanEngine (an updated version,
https://bitbucket.org/mrexodia/titanengine-update)

Disassembly powered by BeaEngine (http://beaengine.org/).

The icon is taken from VisualPharm (http://www.visualpharm.com/)

>Special thanks:
- acidflash
- Ahmadmansoor
- cyberbob
- Teddy Rogers
- EXETools community
- Tuts4You community
- DMichael
- Sorry if I forgot you!

>Lead developers:
- Mr. eXoDia
- Sigma