KoiDbg - Windows ARM64 Debugger for Reverse Engineering

May 6, 2025 ยท View on GitHub

A debugger for Windows ARM64 (AARCH64), user-friendly for reverse engineers, malware analysts, malware developers, game hacking, operating system studies, and more.

Demo Video

https://github.com/user-attachments/assets/ef55c64f-4ae1-463c-b356-1d4c7bf4c6d6

Papper and Research Information

To fully understand how KoiDbg works, read our published article. It is available in English and Portuguese:

Screenshots

Disassembler View:

Disassembler View

Hardware & Software Interrupt:

Hardware & Software Interrupt

Call Stack:

Call Stack

Memory View:

Memory View

Modules View:

Modules View

Threads View:

Threads View

Handles View:

Handles View

ProcessCallbacks View:

ProcessCallbacks View

PDB Inspector:

PDB Inspector

Hex View - Memory View:

Hex View - Memory View

Console View:

Console View

Local Stack Symbols:

Local Stack Symbols

And much more!

License

This project/research is licensed under the GNU General Public License v3.0.