Memory Breakpoints

[malexkiy]

Memory Break points don't work in x32 version of program. Tried with the latest version

[mrexodia]

Please give more details it works fine for me

[malexkiy]

Here the screenshots:
Program continues execute, membp doesn't interrupt it.

[mrexodia]

What are the page protections and what type of memory breakpoint did you
set?
On Thu, 29 Sep 2016 at 00:03, malexkiy notifications@github.com wrote:

Here the screenshots:
Program continues execute, membp doesn't interrupt it.
[image: 1]
https://cloud.githubusercontent.com/assets/12190704/18934045/53c84712-85e0-11e6-80b4-36532bd441fa.png
[image: 2]
https://cloud.githubusercontent.com/assets/12190704/18934046/53c8cc0a-85e0-11e6-8923-3c452e4480b5.png

—
You are receiving this because you commented.

Reply to this email directly, view it on GitHub
#1123 (comment), or mute
the thread
https://github.com/notifications/unsubscribe-auth/ACWCmbwDuKFJ4WOWN4fC9LRza2X9EcBEks5quuRFgaJpZM4KJWlZ
.

[malexkiy]

Well, the page protection is "-R---" , I've set Access breakpoint. Set with commands "bpm, 'addr', 0, r" and "membp 'addr', 0, r". x64dbg works with x64 program without any problems, but x32dbg...
P.s. I'm working on Windows 7 Pro x64

[mrexodia]

After you set the memory breakpoint, what protection does it show in the
memorial for the page?
On Thu, 29 Sep 2016 at 00:44, malexkiy notifications@github.com wrote:

Well, the page protection is "-R---" , I've set Access breakpoint. Set
with commands "bpm, 'addr', 0, r" and "membp 'addr', 0, r". x64dbg works
with x64 program without any problems, but x32dbg...

—
You are receiving this because you commented.

Reply to this email directly, view it on GitHub
#1123 (comment), or mute
the thread
https://github.com/notifications/unsubscribe-auth/ACWCmdUPW93WfsVURh_NdK881mD66PGFks5quu2_gaJpZM4KJWlZ
.

[malexkiy]

It shows "-R--G"

[mrexodia]

Memory breakpoint on access appears to not break on execute probably the wrong enum set somewhere.

[mrexodia]

Okay, the command bpm addr, 0, r would only break on read of the page addr is in. You can now use bpm addr, 0, a and it will break on read+write+execute. The menus now also work this way.

[malexkiy]

Hmm... But in x64 version the same is working, in x32 problems. I can set memory breakpoint at required address and it'll interrupt the program, when memory at this address will be read.

[malexkiy]

I can't use such command, as I need to know, when the memory will be read, not written or executed

[mrexodia]

I tested bpm addr, 0, r on both x32 and x64 and they work as expected (break when an address in the page of addr is read). I tested on the import table of x32dbg.exe and x64dbg.exe and it would break on a call dword ptr ds:[api]

[malexkiy]

Tested with commit 174b845?

[malexkiy]

Yeah, now it works correctly.
Thanks!

[mrexodia]

Glad to help 👍🏻