lncg / edb-debugger

Automatically exported from code.google.com/p/edb-debugger
GNU General Public License v2.0
0 stars 0 forks source link

features you would like me to try to implement there #113

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago
Excuse my English, I do not speak English well!

This is no fault or anything bad, they are only suggestions and not where I can 
send the only found it on here.

I hope my suggestions they like and can think of them as possible because I 
have no idea technique to do yet!
__________________________________

1 - Would be very good for the edb could also debug windows executables, 
perhaps using wine as a dependency
http://s19.postimage.org/hydhebvmb/exe.png

2 - That has the feature of OllyDbg to edit lines of code directly in assembly 
code and not only in the binary
http://s19.postimage.org/z06bgfahf/editasse.png
http://s19.postimage.org/ordualmfn/editbyte.png

3 - I see the code more polished when all commands are in capital letters, 
should include an option allowing the possibility to activate and deactivate 
muayusculas to everyone's taste.
http://s19.postimage.org/j4hhd4jwz/ass5.png
________________________________________

Now I'm not able to directly assist with precise ideas and a code already in 
hand, but I am now studying the code of Evan's debugger and hope to be a great 
support for this project very soon

Thanks

Original issue reported on code.google.com by evan.teran on 3 Oct 2012 at 3:22

GoogleCodeExporter commented 9 years ago
Thanks for your suggestions! Let's go down the list :-)

1. interesting idea. if depending on wine is an acceptable solution, then 
perhaps launching edb like this would be sufficient?

  edb --run wine notepad.exe

It also would be interesting if edb detected that it was a windows executable 
an automatically ran it through wine. It's a cool idea. I'll look into it, but 
I *think* that the command line start solution may be a good workaround.

The only downside to using wine, is that it does "lazy loading" of memory 
regions. In other words, it waits for a segfault, traps it, then maps some 
memory there and resumes the exe. This works, (resume with 'Shift + F9' to send 
the signal to wine) but causes lots of alerts in edb.

2. I want this too :-). Unfortunately, I haven't seen a good ASM library (not a 
standalone program) that uses the same exact syntax that I would like. So I am 
considering writing my own. Unfortunately, this takes time. But it is 
definitely high on my TODO list.

3.This feature already exists :-). "Options" menu -> "Disassembly" -> 
"Disassemble in uppercase"

Thanks again for your suggestions, please let me know if there is anything else 
I can do to make edb more useful for you!

Original comment by evan.teran on 3 Oct 2012 at 5:28

GoogleCodeExporter commented 9 years ago
There is an inline assembler plugin now.

Original comment by evan.teran on 26 Jul 2013 at 2:16