x64dbg is an open-source debugger for 64-bit and 32-bit Windows platforms. It analyzes executables, DLLs, and running processes using reverse engineering techniques. The tool includes disassembly, memory editing, and import reconstruction capabilities.
- Real-time disassembler. Provides an immediate view of assembly code while the program runs. Displays instructions with syntax highlighting and cross-references between functions.
- Multi-architecture debugging. Supports both 32-bit and 64-bit processes through separate x32dbg and x64dbg interfaces. Lets you work with either architecture depending on the target process.
- Hex memory editor. Directly modifies process memory in hexadecimal, ASCII, and Unicode formats. Searches for byte patterns and text strings in specific memory regions.
- Breakpoint management. Configures code, memory, hardware, and exception breakpoints. Sets complex conditions and automatic actions that trigger when a breakpoint is hit.
- System call analysis. Monitors and logs calls to operating system APIs. Shows parameters, return values, and execution contexts for each intercepted call.
- Import table reconstruction. Repairs damaged or obfuscated IAT entries in executables. Extracts imported functions from processes in memory and generates new working executable files.
- Thread view. Monitors all active threads within the debugged process. Lets you check the state, CPU registers, and call stack of each thread individually.
- Automated scripting system. Runs command sequences in its own scripting language to automate repetitive tasks. Lets you develop custom extensions through a documented API.
- Static executable analysis. Examines PE headers, sections, and export address tables. Identifies compilers and packers using characteristic signatures.
- Debug symbol management. Loads PDB files to display original function and variable names. Lets you navigate complex data structures using type information.
- Assembly code modification. Patches instructions directly in the disassembler. Assembles new instructions using Intel x86/x64 syntax and applies permanent changes to the executable.
- Memory map visualization. Inspects the memory regions allocated to the process. Shows access permissions, contents, and metadata for each memory segment.
Development of x64dbg began in 2013 as an open-source alternative to commercial debuggers. The main creator is Mr. eXoDia, together with developers from the reverse engineering community. The codebase is written in C++ and uses the Qt framework for the graphical interface components. The debugging engine incorporates TitanEngine, while the disassembler uses Zydis for instruction decoding. Integration with Scylla enables import reconstruction, and plugin support extends the core functionality.
Alternatives to x64dbg:
For x64dbg there are 8 alternative programs. Free: 8, paid: 0.
MemRE is an injectable memory editor designed for reverse engineering, with specialized support for Unreal Engine.
Price: Free Size: 0.399 MB Version: 1.2.1 OS: Windows
Binary Ninja is a binary analysis platform designed for reverse engineering and vulnerability research.
Price: Free Size: 422 MB Version: 5.0 OS: Windows, Linux, Mac
Radare2 is a complete framework for binary analysis and reverse engineering.
Price: Free Size: 11.7 MB Version: 5.9.8 OS: Windows, Linux, Mac, Android, iOS, Free BSD
Cutter is a reverse engineering platform developed for analyzing binary files.
Price: Free Size: 134 MB Version: 2.5.0 OS: Windows, Linux, MacOS
GDB (GNU Project Debugger) is a debugger developed by the GNU Project.
Price: Free Size: 23 MB Version: 16.3 OS: Windows, Linux, Mac
Ghidra is a Software Reverse Engineering (SRE) framework developed by the National Security Agency's Research Directorate.
Price: Free Size: 543 MB Version: 12.2 OS: Windows
IDA Free is a free version of the professional IDA Pro disassembler, designed for binary code analysis.
Price: Free Size: 314 MB Version: 9.1 OS: Windows, Linux, Mac
OllyDbg is an assembler-level debugger for Windows systems.
Price: Free Size: 0.945 MB Version: 1.10 OS: Windows