New answers tagged

1 vote

Calling function with string as parameter

At the end I just had to compile as Release. Thanks to this information: https://stackoverflow.com/questions/10315041/meaning-of-acronym-sso-in-the-context-of-stdstring/ So it's just a compiler ...
user avatar
  • 31
1 vote
Accepted

How to find the first function that sets the value currently stored in a given register?

I don't know if you are using window or linux but the general solution i can think of is this. Every new allocate buffer must call through function such as VirtualAlloc or NtAllocateVirtualMemory (low ...
user avatar
  • 121
0 votes

x64dbg: is there a way to save the complete disassembly of a module to a text file?

From the disassembly window: 1- Choose the start of your data that you want to copy 2- Use the mouse wheel or trackpad to go up or down in the disassembly window you can also use the arrow keys ↑ ↓ ...
user avatar
  • 313
1 vote
Accepted

How to load a PDB file into x64dbg?

You can use symload/loadsym command. In the x64dbg console type: symload pdbconsoleapplication1,symbols\pdbconsoleapplication1.pdb,[0/1] With the last argument, you can control if the validation of ...
user avatar
1 vote
Accepted

x64dbg : TraceInto only in user code

Based on the following sample: be7df9b222558c6b2afce6db5b20645bf394901f3d5ba27945d5497a367c8034 The unpacked Quakbot payload is this: c85839f837d0312d9fb5440b16fa4fe3769df6d8f986dfaa0b5a28fb9ec80e19 I ...
user avatar
  • 126

Top 50 recent answers are included