x64dbg

What x64dbg is

x64dbg is a free, open-source debugger for Windows, designed for reverse engineering and malware analysis of executables that have no source code available. It can debug x64 and x32 applications through one interface, including DLL and EXE files. Its analysis views cover memory, symbols, threads, source code, graphs, and the dynamic stack, while a fast disassembler and built-in assembler support examining and editing code. The debugger also supports executable patching and includes an import reconstructor powered by Scylla.

For automation, x64dbg has an integrated ASM-like scripting language that can itself be debugged. Users can write C++ plugins to add script commands or connect tools, and can adjust color schemes and preferences. Conditional and exception breakpoints are supported. The project provides its executable and source under GPLv3 and lists open-source libraries including TitanEngine, Zydis, Yara, Scylla, Jansson, lz4, XEDParse, asmjit, and snowman. To start, download a repository snapshot, extract it to a location where you have write access, then run the x32 or x64 debugger executable. The project accepts pull requests and directs questions to its contact channels or an issue.

Who it suits

x64dbg suits Windows users who need to inspect or debug x64 and x32 executables, particularly for reverse engineering or malware analysis without source code. Its scripting, plugin, and customization options also fit users who want to extend or tailor their debugging workflow.

Getting started

1. Open the x64dbg website.
2. Download a repository snapshot.
3. Extract it to a location where you have write access.
4. Run the x32 or x64 debugger executable.

Verdict

Choose x64dbg if you need a free Windows debugger for reverse engineering or malware analysis, with support for both x64 and x32 targets. Look elsewhere if you need a debugger for a platform other than Windows.