PEBrowseDbg64 Interactive.
for Vista64, Windows 7 (64-bit) and Windows 8 (64-bit)
MSI file, 1,322 KB
SHA256: df0882d1d4b3b982ef22576fafa708141d38de01ffac76717165dd75aa7fca19
PEBrowse Professional Interactive.
for Windows 2000/XP/2003/Vista32/Windows 7
ZIP file, 2,049 KB
SHA256: 133ee10969c23c8f7c162472e058a9e8341dbdbede601c7d0bfb279349b5478b
PEBrowse Professional Interactive (v9.3.3) is a debugger for Microsoft Windows 2000, Windows XP, Windows 2003, Windows Vista32, and Windows 7.
PEBrowse Professional Interactive and PEBrowseDbg64 Interactive build upon the framework presented by PEBrowse Professional to create very powerful, versatile, and customizable Win32 and Win64 user mode debuggers/disassemblers, respectively. PEBrowse Interactive is not a source code debugger, but operates at the Intel x86 instruction level and therefore at the lowest level where your program executes. The debugger fully supports Microsoft .NET managed processes and seamlessly allows interop or mixed-mode debugging. PEBrowseDbg64 Interactive is an x64 native-code debugger that fully supports 32 and 64-bit .NET programs, includes using pre-JITted metadata to set breakpoints and steps through .NET thunks. PEBrowse Interactive can be set as the startup debugger using the system registry Image File Execution Options key - useful for debugging ASP.NET applications.
There is a large array of breakpoint opportunities, including:
|
|
|
When a breakpoint fires or an exception in the process occurs, the interface provides easy access to full process context, including:
|
|
|
There are all of the usual debugging features, such as single-stepping, stepping into/over call statements, executing until a selected instruction, as well as running to the next branch instruction. You can even add breakpoints on a specific IL statement in a .NET managed method.
Memory DWORD/QWORD displays automatically indicate if the value is a valid memory address in the context of the debugged process and these values whenever possible resolve to symbolic names or important process regions, e.g., thread stacks, process heaps, and module sections. The color-coded disassembly displays also attempt to use symbolic information as well as offering various highlighting options designed to allow easy analysis of the code. There is even convenient access to a scratchpad, a calculator, and tables for hex-to-ASCII values, common Win32 error codes (32-bit only), and Windows message codes (32-bit only). There are many more options available on each window by accessing the context-sensitive menu items (popups are present also).
Screenshot PEBrowseDbg64 Interactive:
Screenshot PEBrowse Professional Interactive:
Download PEBrowse Professional Interactive.
Download PEBrowseDbg64 Interactive.
Read the Tutorial.
