docs/introduction/Feature-set.md

Features

This program is under active development. It supports many basic and advanced features to ease debugging on Windows.

Basic features

• Full-featured debugging of DLL and EXE files (TitanEngine)
• 32-bit and 64-bit Windows support from Windows XP to Windows 10
• Built-in assembler (XEDParse/Keystone)
• Fast disassembler (Capstone)
• C-like expression parser
• Logging
• Notes
• Memory map view
• Modules and symbols view
• Source code view
• Thread view
• Content-sensitive register view
• Call stack view
• SEH view
• Handles, privileges and TCP connections enumeration.
• Multi-datatype memory dump
• Dynamic stack view
• Executable patching
• Dynamically recognize modules and strings
• User database (JSON) for comments, labels, bookmarks, etc.
• Basic debug symbol (PDB) support
• Extendable, debuggable scripting language for automation
• Plugin support with growing API
• Basic anti-debugging

Advanced features

• Decompiler (Snowman)
• Yara Pattern Matching
• Import reconstructor integrated (Scylla)
• Analysis
• Conditional breakpoints and tracing with great flexibility.
• Collect data while tracing

GUI features

• Intuitive and familiar, yet new user interface
• IDA-like sidebar with jump arrows
• IDA-like instruction token highlighter (highlight registers, commands, etc.)
• Fully customizable color scheme and short-cut keys
• Integrated mnemonic help
• Code folding