-
-
[推荐]Syser debugger x32/x64 ring3 with Source Code
-
发表于: 2022-10-22 01:35
-
Syser debugger x32/x64 ring3 with Source Code
https://github.com/marakew/syser
https://github.com/marakew/syser/archive/refs/heads/master.zip
reverse engineering old syser win32 debugger
improved handle x64 arch and fix some bugs
struct viewer
note: pdb2sds.exe .pdb .sds must be same arch!
for source level debugging don't convert .exe to .sds
syser debugger will automatic detect .pdb for .exe
pdb2sds.exe while convert doest include source level debug info
only structs and variables
convert any .pdb or .exe by util pdb2sds.exe
load .sds file from syser menu
Menu "File"->"Load Symbol File"
check from console by command
sdsmod
File BP(s) Size(k) CheckSum TimeStamp ModuleName
0 0k 00000001 00000001 testx64.pdb
1 Module(s)
start debug .exe
open popup menu on data window by right mouse button
choose a struct by select it
choose "Attach type to Addr"
choose "Lock Type"
enter at "Address" address of struct
[培训]内核驱动高级班，冲击BAT一流互联网大厂工作，每周日13:00-18:00直播授课
|
|
|---|---|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
帮你问作者了，不是不开源，是代码找不到了 
|
|
|
果然RING 3。。。
|
|
|
|
|
|
|
|
|
|
|
|
|
