New answers tagged x64dbg
1
First make sure you are using correct calling convention, in 64-bit Windows most APIs expect parameters via registers not push.
An example of calling convention for 64-bit Windows:
lea r9d, uType ; uType
lea r8, Caption ; Caption
lea rdx, Text ; Text
mov rcx, hWnd ; hWnd
Call cs:MessageBoxW
This is covered in more ...
1
Create a text file with content below and save as .REG file. Open .REG file to import into registry. Change the IDA cmd line as appropriate for your system.
For more details refer to Microsoft's documentation on Context Menus
Windows Registry Editor Version 5.00
[HKEY_CLASSES_ROOT\*\shell\IDA 32]
"Icon"="\"C:\\Program Files\\IDA Pro 7.5\\...
4
On Windows Travel Debugging (TTD) is a perfect use case for this scenario.
To use TTD, you need to run the debugger elevated. Install WinDbg Preview from Windows 10 store using an account that has administrator privileges and use that account when recording in the debugger. In order to run the debugger elevated, select and hold (or right-click) the WinDbg ...
Top 50 recent answers are included
