Ruslan Kabatsayev

Right, not even probably: this is must have IMO. They all have a similar look (color etc.), so they must be consistent.

Well I guess OllyDbg takes special steps to fix up the pushed value after the fact. EDB doesn't AFAIR.

I suppose for the purpose of cleanliness, the best way is to save the menu as member `unique_ptr` in `class HardwareBreakpoints`. But OTOH, does there exist a scenario when there'll...

If the binary uses `malloc` from `libc`, then it doesn't even need symbols. The function can be found using the _Symbols_ dialog. On my system it's called `libc-2.27.so!malloc`.

How is being packed related to setting a breakpoint? Do you mean dynamically set breakpoint on a symbol when a shared library is loaded (like GDB's `break` command can)?

Well, it won't help you with this flag. This binary doesn't load any libraries, so what you really need is to catch system calls. I don't remember whether EDB can...

You'd still need the whole `Register` when you want to modify it, wouldn't you?

> ``` > void setRegisterValue(const RegisterRef &reg, const edb::value32 value); > void setRegisterValue(const RegisterRef &reg, const edb::value64 value); > ``` This variant sounds good. > Have the state return a...

It seems to me that we'll want `DebuggerCore` to have more arch-specific interface, otherwise we'll end up duplicating much of the arch-specific things like storage for registers, corresponding getters etc..

What are some examples of such platforms? It seems to require quite an error-prone changes for seemingly small gain (compared to running EDB as root). I think, if this is...