Questions tagged [x64dbg]
An open-source x64/x32 debugger for windows with UI inspired by OllyDbg.
224 questions
0
votes
0
answers
105
views
Question about anti-debug methods and anti-anti-debug methods
I've come across several binaries that have simple anti-debug methods in place, like checking IsDebuggerPresent(), NtQueryInformationProcess(), etc. But I recently came across a binary that looked ...
- 133
0
votes
0
answers
43
views
How can I find the part of cmd.exe that processes windows batch commands before they're executed?
I'm able to find the ReadConsoleInputW commands for pause and reading input for commands but I'm unable to find the actual processing of the commands. I'm using x64dbg but I'm fairly new to Reverse ...
0
votes
0
answers
43
views
how to set a BP on button in SunAwtCanvas in x96dbg
I'm trying to debug a program in x96dbg that I think this is written in Matlab. There is no string related to buttons or something interesting. Then I go to Handles tab to find buttons and set break ...
- 1
0
votes
0
answers
236
views
Need Help Cracking a Program
So I've got this .exe that I want to crack. It's an old management system for people in truck loading business.
I kind of understand what's happening with window API calls but I'm unable to access the ...
0
votes
0
answers
47
views
X64dbg question
I got a program that I try to patch. Normally you get a message box or something to get at the right point in program. But this program behaves else. It opens, then you can type in your license number ...
- 1
0
votes
1
answer
335
views
please explain the difference between the two types of follow
in file i find
mov rcx,qword ptr ds:[404320]
when I wanted to see what is at the address 404320
i press "follow in dump" and i got a choice between "constant: file.0000000000404320&...
- 3
0
votes
0
answers
163
views
Heavens gate code
Recommend me please how and what better to reverse the code containing "heavens gate"? What tool to bypass protection? Thank you.
I use Intel Pin
push cs
push 0xa02829
jmp far ...
- 21
0
votes
0
answers
452
views
How to decrypt/decode the strings found in desktop application with x64dbg?
I'm a beginner and I have no experience at all in Reverse Engineering. I want to study it so find the "string" references, but all I get is some incomprehensible strings which are probably ...
- 101
0
votes
1
answer
2k
views
How to bypass anti-debugging C++
So I have a crackme my friend sent to try and crack it but the problem that I cannot bypass the anti-debugging or even patching it.
I even tried using ScyllaHide at max settings but still it detects ...
0
votes
0
answers
270
views
x64dbg show some text in Chinese
While debugging some 32-bit file with x32dbg, some of the text appear in Chinese and I don't why.
This happened after I moved to a new computer but both of them were Windows 10.
In my old computer I ...
- 583
0
votes
0
answers
202
views
String as constant , even not visible in disassembler
I was reading this article Where I saw that while reversing the WinRAR I saw that the x64dbg is not able to search for a string in all modules "evaluation copy". but why is that happening. ...
- 143
0
votes
0
answers
329
views
What's the reason for a program to crash every time a breakpoint is set in x64dbg?
I know this question may be an ambiguous one and so may not be straightforward, so I apologize for that. Nevertheless, I believe that anti-debugging is responsible for the constant crashing of the ...
- 115
0
votes
0
answers
2k
views
x64dbg execute till next call OR return
I am using x64dbg and I want to know if there's any way to run the code till next Call statement?
I know there is an "Execute till return" option,
but I want to execute till next call ...
- 1
0
votes
0
answers
97
views
Tracing back the user code section that triggered a message
I have a Windows GUI x86 executable and I have identified, in the .rsrc section, where the error string I want to trace is. Let's assume it is in id=83Ah.
I have set a bpx user32:LoadStringA and then ...
- 319
0
votes
0
answers
289
views
Reversing WSASend finding functions that called it
I'm trying to make my first DLL calling game functions
What I need is tracing functions that call WSASend, so it will be easy for me to get all functions address to call them from my DLL.
What I ...
- 161
0
votes
1
answer
933
views
Is there a way to export all the strings for a certain module in x64dbg?
I have an encrypted file that I was able to step through the code until that specific DLL file was decrypted in memory and I was able to list all of its strings. It has a ton of them that I would like ...
- 3
0
votes
1
answer
5k
views
x64dbg - Conditional breakpoint based on function argument
How can I set a conditional breakpoint based on the argument of a function?
I am trying to break on the windows function LoadLibraryExW: https://docs.microsoft.com/en-us/windows/desktop/api/...
- 203
-1
votes
1
answer
2k
views
A Process does not list on x64dbg attach list
I'm learning RE with x64dbg on Windows10.
It does not list a process in the running process list that I want to attach.
The Process is running 32-bit crackme application for learning.
It was created ...
- 141
-1
votes
1
answer
179
views
Anti-patching checksum [closed]
I'm busy with debugging a program in x64dbg and it has some kind of anti-patching mechanism so can someone please advise me on how I would go about finding the functions which are calculating the ...
- 49
-1
votes
1
answer
2k
views
VMProtect keygen, turn off the anti-debugging
who faced with VMProtect? I just found on the Internet crackme and decided to grunt it, but unfortunately not that good of it did not work out, as the message about prevention of debugging climbed out....
- 141
-1
votes
1
answer
424
views
Call function more times with other args
I want to call the same function more times but with other args, I can't add new instructions, so how can I call it?
- 1
-1
votes
3
answers
757
views
How to know what does the function do?
I've made a simple c++ program. In the ollydbg i searching for the string which is my name, there are 2-3 call functions near the string location but i don't know what those function do.
My question ...
- 9
-2
votes
1
answer
4k
views
Debug and crack .NET executable PE
i'm trying to learn reverse engineering for penetration testing my codes and i believe i won't learn unless i can do some practical so
I'm trying to crack an application that is written in C# and all ...
- 101
-2
votes
1
answer
256
views
What are modern techniques of reverse engineering? [closed]
I read an article on x64dbg blog(https://x64dbg.com/blog/2016/07/09/introducing-contemporary-reverse-engineering-technique-to-real-world-use.html) which mentions modern techniques of reverse ...
