All Questions
Tagged with x64dbg breakpoint
14
questions
3
votes
1
answer
99
views
How can I set up a conditional breakpoint for the CreateFileW function for when a specific file/path is read in x64dbg?
I'm currently debugging a program using x64dbg, and I'm struggling to set up a conditional breakpoint on the CreateFileW function:
HANDLE CreateFileW(
[in] LPCWSTR lpFileName,...
- 85
1
vote
0
answers
280
views
How can I set a breakpoint in x64dbg to be triggered when a certain message is logged?
I am debugging a certain program and I need to stop execution when a certain debug message is logged using OutputDebugStringA(). How can I set a breakpoint for this?
- 13
0
votes
1
answer
6k
views
In x64dbg, how to set software breakpoint on specific memory address?
This is something I know how to do in Olly Debugger, and can't figure out how to do in x64dbg.
In Olly Debugger, it's possible to set a hardware or software breakpoint, either on access or on write, ...
- 137
2
votes
0
answers
733
views
Conditional breakpoint on register containing string catch everything
I am trying to setup a conditional breakpoint to catch a specific string ("Sessions") that will be on ESI register but it catches everything:
I also tried with dereferenced register [ESI] ==...
- 583
1
vote
1
answer
2k
views
Calling/debugging calls to DLL via ollydbg or x64dbg
I have used dependency walker on a DLL of an old game from 2001. I have found a function which I want to be able to analyze. I see the name of the function and the entry point (at the end).
How do I ...
2
votes
1
answer
2k
views
x64dbg, breakpoint on write in memory with specific value
In x64dbg, we can set hardware breakpoint on write in memory dump but can we add more codition?
Ex. Set breakpoin on write of value of 2F.
- 21
2
votes
1
answer
4k
views
x64dbg: break when a register contains a value
Is there a way to break code execution when a register contains a particular value with x64dbg? I'm not talking about setting a conditional breakpoint at a specific location, but about watching the ...
2
votes
1
answer
1k
views
How to navigate Disassembly view to the current instruction location?
I'm using x32dbg and I've set a hardware memory breakpoint. It triggers successfully for a specified module and the debugger pauses and a message on the bottom says:
Hardware breakpoint (byte, read/...
- 123
1
vote
0
answers
552
views
Process terminating when breakpoint reached
I want to set breakpoint on the recv function to replace the received packets. But, I can not put breakpoint on any instruction in the program, the process simply closes with code 4000001f. I also ...
- 11
1
vote
1
answer
2k
views
x64dbg how to set conditional breakpoint on WinAPI function
I am trying to solve a GUI based crackme. https://crackmes.one/crackme/5c68758633c5d4776a837cc4 so that I learn security. I want to set a conditional Break point on user32.CallWindowProcA. Microsoft ...
- 123
0
votes
1
answer
5k
views
x64dbg - Conditional breakpoint based on function argument
How can I set a conditional breakpoint based on the argument of a function?
I am trying to break on the windows function LoadLibraryExW: https://docs.microsoft.com/en-us/windows/desktop/api/...
- 203
1
vote
0
answers
470
views
Failed to set breakpoint (Anti-debug protection)
Sorry for my bad English in advance.
There is a program that has some protection. The problem is I can not set hardware and software breakpoints in x64dbg (to be more precise - not everywhere), cuz ...
- 131
1
vote
1
answer
2k
views
Is it possible to set breakpoints relatively to the memory block in x64dbg or a similar debugger?
Some of my breakpoints perfectly survive multiple restarts.
But many interesting parts of the code I am debugging have different locations in memory after a restart. It seems the reason is, that the ...
- 150
4
votes
2
answers
7k
views
How to break when specific text is found
In this line of code:
mov eax,dword ptr [eax+8];
eax+8 contains a long string of text, I want to find out where it originally came from.
In either OllyDbg or x32dbg, how can I break when ...
- 361