如何记录由x64dbg程序执行的CPU指令? [英] How to log CPU instructions executed by program with x64dbg?

问题描述

如何记录由x64dbg程序执行的CPU指令?

我看到了

您可以选择 Log Text 格式，也可以使用建议的 0x {p:cip} {i:cip} 将数据记录到类似 0x006E8749 mov ebp，esp .最好设置最大跟踪计数和 Log File ... 用来存储数据的位置.完成后，只需按 OK ，x64dbg将开始执行程序并记录所有指令.请记住，该程序在跟踪过程中无法真正快速运行.

How to log CPU instructions executed by program with x64dbg?

I saw https://reverseengineering.stackexchange.com/questions/18634/x64dbg-see-the-current-position question, but I can't find the way to log instructions.

解决方案

As far as I understand - you want to log all the executed instructions. The easiest would be to log them in the file. To do this you need to:

1. Pause the program, either via Pause option (F12) or using breakpoints
2. Select Trace menu and then Trace into... (Ctrl+Alt+F7) or Trace over... (Ctrl+Alt+F8). If you want to log every instruction you probably want to use Trace into...
3. Now in the newly created window

you can select the Log Text format, you can use the proposed 0x{p:cip} {i:cip} which will log the data to file like 0x006E8749 mov ebp, esp. It is also good idea to set the Maximum trace count and the Log File... where the data will be stored. After you are done just press OK and the x64dbg will start executing your program and log all the instructions. Keep in mind that the program won't work really fast during the trace procedure.

这篇关于如何记录由x64dbg程序执行的CPU指令?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！