1

I find that I can write to memory as

[addr] = value

As given by the documentation at http://help.x64dbg.com/en/latest/introduction/Input.html

And while I could work around my problem as dividing the string into several byte writes, that looks kind of ugly! Every character would be:

byte:[addr] = charactercode

I have not found any way except for manually entering into the memory editor to write a string/unicode string into memory. Am I missing something or is this really basic feature missing from X64dbg ?

In case there is another workaround. The problem I am trying to solve is I want to set a value for GetEnvironmentVariable() for a variable that does not exist by writing a string into the buffer. I want this to happen when a breakpoint is reached by breakpoint commands.

So basically if there was any way to force setting environment variable or write a string into memory when a breakpoint is hit. I could work with that!

Improve this question
6
  • As a comment I will add that one can convert a string to bytes and add as this as well. "set addr, #deadbabecafebeef#" But that still requires that I convert my string to hex. I would like to not have to do that.
    – Sharky
    Commented Sep 18, 2019 at 13:34
  • I can now rule out the solution above as well. It became too long and now X86dbg splits it into several rows even though it is only one long row in the script file. Since X86dbg splits the line it becomes several commands where they will mostly all fail.
    – Sharky
    Commented Sep 18, 2019 at 14:13
  • An undocumented command "strset" together with "strcpy" can be used to set a string and copy it into memory like this 'strset strvar, "abcd efgh" ; strcpy ecx, strvar'. Still no way of generating a utf8 string and copying so the hunt goes on.
    – Sharky
    Commented Sep 18, 2019 at 14:38
  • I highly recommend writing a simple plugin that will do the job for you. You can easily add your own commands, see plugins.x64dbg.com
    – mrexodia
    Commented Sep 23, 2019 at 21:13
  • Thanks @mrexodia! I'll have a look at plugins. Been meaning to get into it anyway. Since I have you here :-) Would features like this make it into master if I were to submit a PR at some time in feature? Been meaning to have a look at the x64dbg source as well. I usually prefer to extend base program functionality over plugins as I always forget which plugins I need but the base program is always there.
    – Sharky
    Commented Oct 13, 2019 at 8:28

0

Reset to default

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Browse other questions tagged or ask your own question.