PEBrowseDbg64 Interactive v2.9.0

PEBrowse Professional Interactive and PEBrowseDbg64 Interactive build upon the framework presented by PEBrowse Professional to create very powerful, versatile, and customizable Win32 and Win64 user mode debuggers/disassemblers, respectively. PEBrowse Interactive is not a source code debugger, but operates at the Intel x86 instruction level and therefore at the lowest level where your program executes. The debugger fully supports Microsoft .NET managed processes and seamlessly allows interop or mixed-mode debugging. PEBrowseDbg64 Interactive is an x64 native-code debugger that fully supports 32 and 64-bit .NET programs, includes using pre-JITted metadata to set breakpoints and steps through .NET thunks. PEBrowse Interactive can be set as the startup debugger using the system registry Image File Execution Options key – useful for debugging ASP.NET applications.

Download link:http://www.smidgeonsoft.prohosting.com/pebrowse-pro-interactive-debugger.html

IT IS HARD TO CHOSE A 64BIT DEBUGGER,ANY OTHER CHOICE? 

IDA failed to display the program in graph mode

Usually via the graph mode we can clearly see what and how the subroutine did,however lucky is not all the time with us,u may get an error message like above.

This error is mostly caused by fallow reasons:

1. there are to much nods that ida can’t change to graph mod,now here is no solution to fix this error

2.the current cursor pos is at a position that ida can’t recognize them as functions

3. a sp-anylized failure happened .

Continue Reading

VS2010 + IDASDK6.2搭建IDA Plugin开发环境

这里使用的开发环境是vs2010,不过几乎所有的设置在早期版本的vs中基本是一致的。启动vs之后关闭其他的项目和解决方案,然后按照下面的流程创作工程即可。

  1. 执行菜单的File->New->Project… (Ctrl-Shift-N)打开新建工程窗口。
  2. 展开左侧的Visual C++项目模板分支,然后选择右侧的Win32 Project条目,输入工程名称,然后点击确定。

Continue Reading