HyperDbg Debugger
Loading...
Searching...
No Matches
commands.h
Go to the documentation of this file.
1
13#pragma once
14
15using namespace std;
16
18// Externs //
20
21extern HANDLE g_DeviceHandle;
22
24// Settings //
26
27VOID
28CommandSettingsLoadDefaultValuesFromConfigFile();
29
30VOID
31CommandSettingsSetValueFromConfigFile(std::string OptionName, std::string OptionValue);
32
33BOOLEAN
34CommandSettingsGetValueFromConfigFile(std::string OptionName, std::string & OptionValue);
35
37// Functions //
39
40VOID
41CpuReadVendorString(CHAR * Result);
42
43int
44ReadCpuDetails();
45
46VOID
47ShowMessages(const char * Fmt, ...);
48
49string
50SeparateTo64BitValue(UINT64 Value);
51
52void
53ShowMemoryCommandDB(unsigned char * OutputBuffer, UINT32 Size, UINT64 Address, DEBUGGER_READ_MEMORY_TYPE MemoryType, UINT64 Length);
54
55void
56ShowMemoryCommandDD(unsigned char * OutputBuffer, UINT32 Size, UINT64 Address, DEBUGGER_READ_MEMORY_TYPE MemoryType, UINT64 Length);
57
58void
59ShowMemoryCommandDC(unsigned char * OutputBuffer, UINT32 Size, UINT64 Address, DEBUGGER_READ_MEMORY_TYPE MemoryType, UINT64 Length);
60
61void
62ShowMemoryCommandDQ(unsigned char * OutputBuffer, UINT32 Size, UINT64 Address, DEBUGGER_READ_MEMORY_TYPE MemoryType, UINT64 Length);
63
64VOID
65CommandPteShowResults(UINT64 TargetVa, PDEBUGGER_READ_PAGE_TABLE_ENTRIES_DETAILS PteRead);
66
67DEBUGGER_CONDITIONAL_JUMP_STATUS
68HyperDbgIsConditionalJumpTaken(unsigned char * BufferToDisassemble,
69 UINT64 BuffLength,
70 RFLAGS Rflags,
71 BOOLEAN Isx86_64);
72
73int
74HyperDbgDisassembler64(unsigned char * BufferToDisassemble,
75 UINT64 BaseAddress,
76 UINT64 Size,
77 UINT32 MaximumInstrDecoded,
78 BOOLEAN ShowBranchIsTakenOrNot,
79 PRFLAGS Rflags);
80
81int
82HyperDbgDisassembler32(unsigned char * BufferToDisassemble,
83 UINT64 BaseAddress,
84 UINT64 Size,
85 UINT32 MaximumInstrDecoded,
86 BOOLEAN ShowBranchIsTakenOrNot,
87 PRFLAGS Rflags);
88
89UINT32
90HyperDbgLengthDisassemblerEngine(
91 unsigned char * BufferToDisassemble,
92 UINT64 BuffLength,
93 BOOLEAN Isx86_64);
94
95BOOLEAN
96HyperDbgCheckWhetherTheCurrentInstructionIsCall(
97 unsigned char * BufferToDisassemble,
98 UINT64 BuffLength,
99 BOOLEAN Isx86_64,
100 PUINT32 CallLength);
101
102BOOLEAN
103HyperDbgCheckWhetherTheCurrentInstructionIsCallOrRet(
104 unsigned char * BufferToDisassemble,
105 UINT64 CurrentRip,
106 UINT32 BuffLength,
107 BOOLEAN Isx86_64,
108 PBOOLEAN IsRet);
109
110BOOLEAN
111HyperDbgCheckWhetherTheCurrentInstructionIsRet(
112 unsigned char * BufferToDisassemble,
113 UINT64 BuffLength,
114 BOOLEAN Isx86_64);
115
116VOID
117HyperDbgShowMemoryOrDisassemble(DEBUGGER_SHOW_MEMORY_STYLE Style,
118 UINT64 Address,
119 DEBUGGER_READ_MEMORY_TYPE MemoryType,
120 DEBUGGER_READ_READING_TYPE ReadingType,
121 UINT32 Pid,
122 UINT32 Size,
123 PDEBUGGER_DT_COMMAND_OPTIONS DtDetails);
124
125BOOLEAN
126HyperDbgReadMemory(UINT64 TargetAddress,
127 DEBUGGER_READ_MEMORY_TYPE MemoryType,
128 DEBUGGER_READ_READING_TYPE ReadingType,
129 UINT32 Pid,
130 UINT32 Size,
131 BOOLEAN GetAddressMode,
132 DEBUGGER_READ_MEMORY_ADDRESS_MODE * AddressMode,
133 BYTE * TargetBufferToStore,
134 UINT32 * ReturnLength);
135
136VOID
137InitializeCommandsDictionary();
138
139VOID
140InitializeDebugger();
141
142BOOLEAN
143CheckMultilineCommand(CHAR * CurrentCommand, BOOLEAN Reset);
144
145BOOLEAN
146ContinuePreviousCommand();
147
148VOID
149CommandDumpSaveIntoFile(PVOID Buffer, UINT32 Length);
150
152// Type of Commands //
154
159typedef VOID (*CommandFuncType)(vector<string> SplitCommand, string Command);
160
165typedef VOID (*CommandHelpFuncType)();
166
178
183typedef std::map<std::string, COMMAND_DETAIL> CommandType;
184
189#define DEBUGGER_COMMAND_ATTRIBUTE_EVENT \
190 0x1 | DEBUGGER_COMMAND_ATTRIBUTE_LOCAL_COMMAND_IN_DEBUGGER_MODE | DEBUGGER_COMMAND_ATTRIBUTE_LOCAL_CASE_SENSITIVE
191#define DEBUGGER_COMMAND_ATTRIBUTE_LOCAL_COMMAND_IN_DEBUGGER_MODE 0x2
192#define DEBUGGER_COMMAND_ATTRIBUTE_LOCAL_COMMAND_IN_REMOTE_CONNECTION 0x4
193#define DEBUGGER_COMMAND_ATTRIBUTE_LOCAL_CASE_SENSITIVE 0x8
194#define DEBUGGER_COMMAND_ATTRIBUTE_REPEAT_ON_ENTER 0x10
195#define DEBUGGER_COMMAND_ATTRIBUTE_WONT_STOP_DEBUGGER_AGAIN 0x20
196#define DEBUGGER_COMMAND_ATTRIBUTE_HWDBG 0x40
197
202#define DEBUGGER_COMMAND_ATTRIBUTE_ABSOLUTE_LOCAL \
203 DEBUGGER_COMMAND_ATTRIBUTE_LOCAL_COMMAND_IN_DEBUGGER_MODE | \
204 DEBUGGER_COMMAND_ATTRIBUTE_LOCAL_COMMAND_IN_REMOTE_CONNECTION
205
210#define DEBUGGER_COMMAND_CLEAR_ATTRIBUTES \
211 DEBUGGER_COMMAND_ATTRIBUTE_ABSOLUTE_LOCAL
212
213#define DEBUGGER_COMMAND_HELP_ATTRIBUTES \
214 DEBUGGER_COMMAND_ATTRIBUTE_ABSOLUTE_LOCAL
215
216#define DEBUGGER_COMMAND_CONNECT_ATTRIBUTES \
217 DEBUGGER_COMMAND_ATTRIBUTE_ABSOLUTE_LOCAL
218
219#define DEBUGGER_COMMAND_LISTEN_ATTRIBUTES \
220 DEBUGGER_COMMAND_ATTRIBUTE_ABSOLUTE_LOCAL
221
222#define DEBUGGER_COMMAND_G_ATTRIBUTES DEBUGGER_COMMAND_ATTRIBUTE_ABSOLUTE_LOCAL | DEBUGGER_COMMAND_ATTRIBUTE_REPEAT_ON_ENTER
223
224#define DEBUGGER_COMMAND_ATTACH_ATTRIBUTES DEBUGGER_COMMAND_ATTRIBUTE_LOCAL_COMMAND_IN_DEBUGGER_MODE
225
226#define DEBUGGER_COMMAND_DETACH_ATTRIBUTES DEBUGGER_COMMAND_ATTRIBUTE_LOCAL_COMMAND_IN_DEBUGGER_MODE
227
228#define DEBUGGER_COMMAND_SWITCH_ATTRIBUTES DEBUGGER_COMMAND_ATTRIBUTE_LOCAL_COMMAND_IN_DEBUGGER_MODE
229
230#define DEBUGGER_COMMAND_START_ATTRIBUTES DEBUGGER_COMMAND_ATTRIBUTE_WONT_STOP_DEBUGGER_AGAIN
231
232#define DEBUGGER_COMMAND_RESTART_ATTRIBUTES DEBUGGER_COMMAND_ATTRIBUTE_WONT_STOP_DEBUGGER_AGAIN
233
234#define DEBUGGER_COMMAND_KILL_ATTRIBUTES NULL
235
236#define DEBUGGER_COMMAND_PROCESS_ATTRIBUTES \
237 DEBUGGER_COMMAND_ATTRIBUTE_LOCAL_COMMAND_IN_DEBUGGER_MODE
238
239#define DEBUGGER_COMMAND_THREAD_ATTRIBUTES \
240 DEBUGGER_COMMAND_ATTRIBUTE_LOCAL_COMMAND_IN_DEBUGGER_MODE
241
242#define DEBUGGER_COMMAND_SLEEP_ATTRIBUTES \
243 DEBUGGER_COMMAND_ATTRIBUTE_ABSOLUTE_LOCAL
244
245#define DEBUGGER_COMMAND_EVENTS_ATTRIBUTES \
246 DEBUGGER_COMMAND_ATTRIBUTE_LOCAL_COMMAND_IN_DEBUGGER_MODE
247
248#define DEBUGGER_COMMAND_SETTINGS_ATTRIBUTES \
249 DEBUGGER_COMMAND_ATTRIBUTE_LOCAL_COMMAND_IN_DEBUGGER_MODE
250
251#define DEBUGGER_COMMAND_DISCONNECT_ATTRIBUTES \
252 DEBUGGER_COMMAND_ATTRIBUTE_ABSOLUTE_LOCAL
253
254#define DEBUGGER_COMMAND_DEBUG_ATTRIBUTES \
255 DEBUGGER_COMMAND_ATTRIBUTE_ABSOLUTE_LOCAL | DEBUGGER_COMMAND_ATTRIBUTE_LOCAL_CASE_SENSITIVE
256
257#define DEBUGGER_COMMAND_DOT_STATUS_ATTRIBUTES \
258 DEBUGGER_COMMAND_ATTRIBUTE_ABSOLUTE_LOCAL
259
260#define DEBUGGER_COMMAND_STATUS_ATTRIBUTES NULL
261
262#define DEBUGGER_COMMAND_LOAD_ATTRIBUTES NULL
263
264#define DEBUGGER_COMMAND_EXIT_ATTRIBUTES \
265 DEBUGGER_COMMAND_ATTRIBUTE_ABSOLUTE_LOCAL
266
267#define DEBUGGER_COMMAND_FLUSH_ATTRIBUTES \
268 DEBUGGER_COMMAND_ATTRIBUTE_LOCAL_COMMAND_IN_DEBUGGER_MODE
269
270#define DEBUGGER_COMMAND_PAUSE_ATTRIBUTES \
271 DEBUGGER_COMMAND_ATTRIBUTE_ABSOLUTE_LOCAL
272
273#define DEBUGGER_COMMAND_UNLOAD_ATTRIBUTES NULL
274
275#define DEBUGGER_COMMAND_SCRIPT_ATTRIBUTES \
276 DEBUGGER_COMMAND_ATTRIBUTE_ABSOLUTE_LOCAL | DEBUGGER_COMMAND_ATTRIBUTE_LOCAL_CASE_SENSITIVE
277
278#define DEBUGGER_COMMAND_OUTPUT_ATTRIBUTES \
279 DEBUGGER_COMMAND_ATTRIBUTE_LOCAL_COMMAND_IN_DEBUGGER_MODE | DEBUGGER_COMMAND_ATTRIBUTE_LOCAL_CASE_SENSITIVE
280
281#define DEBUGGER_COMMAND_PRINT_ATTRIBUTES \
282 DEBUGGER_COMMAND_ATTRIBUTE_LOCAL_COMMAND_IN_DEBUGGER_MODE | DEBUGGER_COMMAND_ATTRIBUTE_LOCAL_CASE_SENSITIVE | DEBUGGER_COMMAND_ATTRIBUTE_REPEAT_ON_ENTER
283
284#define DEBUGGER_COMMAND_EVAL_ATTRIBUTES \
285 DEBUGGER_COMMAND_ATTRIBUTE_LOCAL_COMMAND_IN_DEBUGGER_MODE | DEBUGGER_COMMAND_ATTRIBUTE_LOCAL_CASE_SENSITIVE | DEBUGGER_COMMAND_ATTRIBUTE_REPEAT_ON_ENTER
286
287#define DEBUGGER_COMMAND_LOGOPEN_ATTRIBUTES \
288 DEBUGGER_COMMAND_ATTRIBUTE_ABSOLUTE_LOCAL | DEBUGGER_COMMAND_ATTRIBUTE_LOCAL_CASE_SENSITIVE
289
290#define DEBUGGER_COMMAND_LOGCLOSE_ATTRIBUTES \
291 DEBUGGER_COMMAND_ATTRIBUTE_ABSOLUTE_LOCAL
292
293#define DEBUGGER_COMMAND_TEST_ATTRIBUTES DEBUGGER_COMMAND_ATTRIBUTE_LOCAL_COMMAND_IN_DEBUGGER_MODE
294
295#define DEBUGGER_COMMAND_CPU_ATTRIBUTES NULL
296
297#define DEBUGGER_COMMAND_WRMSR_ATTRIBUTES NULL
298
299#define DEBUGGER_COMMAND_RDMSR_ATTRIBUTES NULL
300
301#define DEBUGGER_COMMAND_VA2PA_ATTRIBUTES DEBUGGER_COMMAND_ATTRIBUTE_LOCAL_CASE_SENSITIVE | DEBUGGER_COMMAND_ATTRIBUTE_LOCAL_COMMAND_IN_DEBUGGER_MODE
302
303#define DEBUGGER_COMMAND_PA2VA_ATTRIBUTES DEBUGGER_COMMAND_ATTRIBUTE_LOCAL_CASE_SENSITIVE | DEBUGGER_COMMAND_ATTRIBUTE_LOCAL_COMMAND_IN_DEBUGGER_MODE
304
305#define DEBUGGER_COMMAND_FORMATS_ATTRIBUTES \
306 DEBUGGER_COMMAND_ATTRIBUTE_LOCAL_COMMAND_IN_DEBUGGER_MODE | DEBUGGER_COMMAND_ATTRIBUTE_LOCAL_CASE_SENSITIVE | DEBUGGER_COMMAND_ATTRIBUTE_REPEAT_ON_ENTER
307
308#define DEBUGGER_COMMAND_PTE_ATTRIBUTES DEBUGGER_COMMAND_ATTRIBUTE_LOCAL_CASE_SENSITIVE | DEBUGGER_COMMAND_ATTRIBUTE_LOCAL_COMMAND_IN_DEBUGGER_MODE
309
310#define DEBUGGER_COMMAND_CORE_ATTRIBUTES \
311 DEBUGGER_COMMAND_ATTRIBUTE_LOCAL_COMMAND_IN_DEBUGGER_MODE
312
313#define DEBUGGER_COMMAND_MONITOR_ATTRIBUTES DEBUGGER_COMMAND_ATTRIBUTE_EVENT
314
315#define DEBUGGER_COMMAND_VMCALL_ATTRIBUTES DEBUGGER_COMMAND_ATTRIBUTE_EVENT
316
317#define DEBUGGER_COMMAND_EPTHOOK_ATTRIBUTES DEBUGGER_COMMAND_ATTRIBUTE_EVENT
318
319#define DEBUGGER_COMMAND_EPTHOOK2_ATTRIBUTES DEBUGGER_COMMAND_ATTRIBUTE_EVENT
320
321#define DEBUGGER_COMMAND_CPUID_ATTRIBUTES DEBUGGER_COMMAND_ATTRIBUTE_EVENT
322
323#define DEBUGGER_COMMAND_MSRREAD_ATTRIBUTES DEBUGGER_COMMAND_ATTRIBUTE_EVENT
324
325#define DEBUGGER_COMMAND_MSRWRITE_ATTRIBUTES DEBUGGER_COMMAND_ATTRIBUTE_EVENT
326
327#define DEBUGGER_COMMAND_TSC_ATTRIBUTES DEBUGGER_COMMAND_ATTRIBUTE_EVENT
328
329#define DEBUGGER_COMMAND_PMC_ATTRIBUTES DEBUGGER_COMMAND_ATTRIBUTE_EVENT
330
331#define DEBUGGER_COMMAND_CRWRITE_ATTRIBUTES DEBUGGER_COMMAND_ATTRIBUTE_EVENT
332
333#define DEBUGGER_COMMAND_DR_ATTRIBUTES DEBUGGER_COMMAND_ATTRIBUTE_EVENT
334
335#define DEBUGGER_COMMAND_IOIN_ATTRIBUTES DEBUGGER_COMMAND_ATTRIBUTE_EVENT
336
337#define DEBUGGER_COMMAND_IOOUT_ATTRIBUTES DEBUGGER_COMMAND_ATTRIBUTE_EVENT
338
339#define DEBUGGER_COMMAND_EXCEPTION_ATTRIBUTES DEBUGGER_COMMAND_ATTRIBUTE_EVENT
340
341#define DEBUGGER_COMMAND_INTERRUPT_ATTRIBUTES DEBUGGER_COMMAND_ATTRIBUTE_EVENT
342
343#define DEBUGGER_COMMAND_SYSCALL_ATTRIBUTES DEBUGGER_COMMAND_ATTRIBUTE_EVENT
344
345#define DEBUGGER_COMMAND_SYSRET_ATTRIBUTES DEBUGGER_COMMAND_ATTRIBUTE_EVENT
346
347#define DEBUGGER_COMMAND_MODE_ATTRIBUTES DEBUGGER_COMMAND_ATTRIBUTE_EVENT
348
349#define DEBUGGER_COMMAND_TRACE_ATTRIBUTES DEBUGGER_COMMAND_ATTRIBUTE_EVENT
350
351#define DEBUGGER_COMMAND_HIDE_ATTRIBUTES DEBUGGER_COMMAND_ATTRIBUTE_LOCAL_CASE_SENSITIVE
352
353#define DEBUGGER_COMMAND_UNHIDE_ATTRIBUTES NULL
354
355#define DEBUGGER_COMMAND_MEASURE_ATTRIBUTES NULL
356
357#define DEBUGGER_COMMAND_LM_ATTRIBUTES NULL
358
359#define DEBUGGER_COMMAND_P_ATTRIBUTES \
360 DEBUGGER_COMMAND_ATTRIBUTE_LOCAL_COMMAND_IN_DEBUGGER_MODE | DEBUGGER_COMMAND_ATTRIBUTE_REPEAT_ON_ENTER
361
362#define DEBUGGER_COMMAND_T_ATTRIBUTES \
363 DEBUGGER_COMMAND_ATTRIBUTE_LOCAL_COMMAND_IN_DEBUGGER_MODE | DEBUGGER_COMMAND_ATTRIBUTE_REPEAT_ON_ENTER
364
365#define DEBUGGER_COMMAND_I_ATTRIBUTES \
366 DEBUGGER_COMMAND_ATTRIBUTE_LOCAL_COMMAND_IN_DEBUGGER_MODE | DEBUGGER_COMMAND_ATTRIBUTE_REPEAT_ON_ENTER
367
368#define DEBUGGER_COMMAND_D_AND_U_ATTRIBUTES \
369 DEBUGGER_COMMAND_ATTRIBUTE_LOCAL_COMMAND_IN_DEBUGGER_MODE | DEBUGGER_COMMAND_ATTRIBUTE_LOCAL_CASE_SENSITIVE | DEBUGGER_COMMAND_ATTRIBUTE_REPEAT_ON_ENTER
370
371#define DEBUGGER_COMMAND_E_ATTRIBUTES \
372 DEBUGGER_COMMAND_ATTRIBUTE_LOCAL_COMMAND_IN_DEBUGGER_MODE | DEBUGGER_COMMAND_ATTRIBUTE_LOCAL_CASE_SENSITIVE
373
374#define DEBUGGER_COMMAND_S_ATTRIBUTES \
375 DEBUGGER_COMMAND_ATTRIBUTE_LOCAL_COMMAND_IN_DEBUGGER_MODE | DEBUGGER_COMMAND_ATTRIBUTE_LOCAL_CASE_SENSITIVE
376
377#define DEBUGGER_COMMAND_R_ATTRIBUTES \
378 DEBUGGER_COMMAND_ATTRIBUTE_LOCAL_COMMAND_IN_DEBUGGER_MODE | DEBUGGER_COMMAND_ATTRIBUTE_LOCAL_CASE_SENSITIVE | DEBUGGER_COMMAND_ATTRIBUTE_REPEAT_ON_ENTER
379
380#define DEBUGGER_COMMAND_BP_ATTRIBUTES \
381 DEBUGGER_COMMAND_ATTRIBUTE_LOCAL_COMMAND_IN_DEBUGGER_MODE | DEBUGGER_COMMAND_ATTRIBUTE_LOCAL_CASE_SENSITIVE
382
383#define DEBUGGER_COMMAND_BE_ATTRIBUTES \
384 DEBUGGER_COMMAND_ATTRIBUTE_LOCAL_COMMAND_IN_DEBUGGER_MODE
385
386#define DEBUGGER_COMMAND_BD_ATTRIBUTES \
387 DEBUGGER_COMMAND_ATTRIBUTE_LOCAL_COMMAND_IN_DEBUGGER_MODE
388
389#define DEBUGGER_COMMAND_BC_ATTRIBUTES \
390 DEBUGGER_COMMAND_ATTRIBUTE_LOCAL_COMMAND_IN_DEBUGGER_MODE
391
392#define DEBUGGER_COMMAND_BL_ATTRIBUTES \
393 DEBUGGER_COMMAND_ATTRIBUTE_LOCAL_COMMAND_IN_DEBUGGER_MODE
394
395#define DEBUGGER_COMMAND_SYMPATH_ATTRIBUTES \
396 DEBUGGER_COMMAND_ATTRIBUTE_LOCAL_COMMAND_IN_DEBUGGER_MODE | DEBUGGER_COMMAND_ATTRIBUTE_LOCAL_CASE_SENSITIVE
397
398#define DEBUGGER_COMMAND_SYM_ATTRIBUTES \
399 DEBUGGER_COMMAND_ATTRIBUTE_LOCAL_COMMAND_IN_DEBUGGER_MODE | DEBUGGER_COMMAND_ATTRIBUTE_LOCAL_CASE_SENSITIVE
400
401#define DEBUGGER_COMMAND_X_ATTRIBUTES \
402 DEBUGGER_COMMAND_ATTRIBUTE_LOCAL_COMMAND_IN_DEBUGGER_MODE | DEBUGGER_COMMAND_ATTRIBUTE_LOCAL_CASE_SENSITIVE
403
404#define DEBUGGER_COMMAND_PREALLOC_ATTRIBUTES NULL
405
406#define DEBUGGER_COMMAND_PREACTIVATE_ATTRIBUTES NULL
407
408#define DEBUGGER_COMMAND_K_ATTRIBUTES \
409 DEBUGGER_COMMAND_ATTRIBUTE_LOCAL_COMMAND_IN_DEBUGGER_MODE
410
411#define DEBUGGER_COMMAND_DT_ATTRIBUTES \
412 DEBUGGER_COMMAND_ATTRIBUTE_LOCAL_COMMAND_IN_DEBUGGER_MODE | DEBUGGER_COMMAND_ATTRIBUTE_LOCAL_CASE_SENSITIVE | DEBUGGER_COMMAND_ATTRIBUTE_REPEAT_ON_ENTER
413
414#define DEBUGGER_COMMAND_STRUCT_ATTRIBUTES \
415 DEBUGGER_COMMAND_ATTRIBUTE_LOCAL_COMMAND_IN_DEBUGGER_MODE | DEBUGGER_COMMAND_ATTRIBUTE_LOCAL_CASE_SENSITIVE
416
417#define DEBUGGER_COMMAND_PE_ATTRIBUTES NULL
418
419// #define DEBUGGER_COMMAND_REV_ATTRIBUTES DEBUGGER_COMMAND_ATTRIBUTE_WONT_STOP_DEBUGGER_AGAIN
420#define DEBUGGER_COMMAND_REV_ATTRIBUTES NULL
421
422#define DEBUGGER_COMMAND_TRACK_ATTRIBUTES DEBUGGER_COMMAND_ATTRIBUTE_LOCAL_COMMAND_IN_DEBUGGER_MODE
423
424#define DEBUGGER_COMMAND_PAGEIN_ATTRIBUTES DEBUGGER_COMMAND_ATTRIBUTE_LOCAL_CASE_SENSITIVE | DEBUGGER_COMMAND_ATTRIBUTE_LOCAL_COMMAND_IN_DEBUGGER_MODE
425
426#define DEBUGGER_COMMAND_DUMP_ATTRIBUTES \
427 DEBUGGER_COMMAND_ATTRIBUTE_LOCAL_COMMAND_IN_DEBUGGER_MODE | DEBUGGER_COMMAND_ATTRIBUTE_LOCAL_CASE_SENSITIVE
428
429#define DEBUGGER_COMMAND_GU_ATTRIBUTES \
430 DEBUGGER_COMMAND_ATTRIBUTE_LOCAL_COMMAND_IN_DEBUGGER_MODE | DEBUGGER_COMMAND_ATTRIBUTE_REPEAT_ON_ENTER
431
432#define DEBUGGER_COMMAND_HWDBG_HW_CLK_ATTRIBUTES DEBUGGER_COMMAND_ATTRIBUTE_HWDBG
433
434#define DEBUGGER_COMMAND_A_ATTRIBUTES \
435 DEBUGGER_COMMAND_ATTRIBUTE_LOCAL_COMMAND_IN_DEBUGGER_MODE | DEBUGGER_COMMAND_ATTRIBUTE_LOCAL_CASE_SENSITIVE
436
438// Command Functions //
440
441VOID
442CommandTest(vector<string> SplitCommand, string Command);
443
444VOID
445CommandClearScreen(vector<string> SplitCommand, string Command);
446
447VOID
448CommandReadMemoryAndDisassembler(vector<string> SplitCommand,
449 string Command);
450
451VOID
452CommandConnect(vector<string> SplitCommand, string Command);
453
454VOID
455CommandLoad(vector<string> SplitCommand, string Command);
456
457VOID
458CommandUnload(vector<string> SplitCommand, string Command);
459
460VOID
461CommandScript(vector<string> SplitCommand, string Command);
462
463VOID
464CommandCpu(vector<string> SplitCommand, string Command);
465
466VOID
467CommandExit(vector<string> SplitCommand, string Command);
468
469VOID
470CommandDisconnect(vector<string> SplitCommand, string Command);
471
472VOID
473CommandFormats(vector<string> SplitCommand, string Command);
474
475VOID
476CommandRdmsr(vector<string> SplitCommand, string Command);
477
478VOID
479CommandWrmsr(vector<string> SplitCommand, string Command);
480
481VOID
482CommandPte(vector<string> SplitCommand, string Command);
483
484VOID
485CommandMonitor(vector<string> SplitCommand, string Command);
486
487VOID
488CommandSyscallAndSysret(vector<string> SplitCommand, string Command);
489
490VOID
491CommandEptHook(vector<string> SplitCommand, string Command);
492
493VOID
494CommandEptHook2(vector<string> SplitCommand, string Command);
495
496VOID
497CommandCpuid(vector<string> SplitCommand, string Command);
498
499VOID
500CommandMsrread(vector<string> SplitCommand, string Command);
501
502VOID
503CommandMsrwrite(vector<string> SplitCommand, string Command);
504
505VOID
506CommandTsc(vector<string> SplitCommand, string Command);
507
508VOID
509CommandPmc(vector<string> SplitCommand, string Command);
510
511VOID
512CommandException(vector<string> SplitCommand, string Command);
513
514VOID
515CommandCrwrite(vector<string> SplitCommand, string Command);
516
517VOID
518CommandDr(vector<string> SplitCommand, string Command);
519
520VOID
521CommandInterrupt(vector<string> SplitCommand, string Command);
522
523VOID
524CommandIoin(vector<string> SplitCommand, string Command);
525
526VOID
527CommandIoout(vector<string> SplitCommand, string Command);
528
529VOID
530CommandVmcall(vector<string> SplitCommand, string Command);
531
532VOID
533CommandMode(vector<string> SplitCommand, string Command);
534
535VOID
536CommandTrace(vector<string> SplitCommand, string Command);
537
538VOID
539CommandHide(vector<string> SplitCommand, string Command);
540
541VOID
542CommandUnhide(vector<string> SplitCommand, string Command);
543
544VOID
545CommandLogopen(vector<string> SplitCommand, string Command);
546
547VOID
548CommandLogclose(vector<string> SplitCommand, string Command);
549
550VOID
551CommandVa2pa(vector<string> SplitCommand, string Command);
552
553VOID
554CommandPa2va(vector<string> SplitCommand, string Command);
555
556VOID
557CommandEvents(vector<string> SplitCommand, string Command);
558
559VOID
560CommandG(vector<string> SplitCommand, string Command);
561
562VOID
563CommandLm(vector<string> SplitCommand, string Command);
564
565VOID
566CommandSleep(vector<string> SplitCommand, string Command);
567
568VOID
569CommandEditMemory(vector<string> SplitCommand, string Command);
570
571VOID
572CommandSearchMemory(vector<string> SplitCommand, string Command);
573
574VOID
575CommandMeasure(vector<string> SplitCommand, string Command);
576
577VOID
578CommandSettings(vector<string> SplitCommand, string Command);
579
580VOID
581CommandFlush(vector<string> SplitCommand, string Command);
582
583VOID
584CommandPause(vector<string> SplitCommand, string Command);
585
586VOID
587CommandListen(vector<string> SplitCommand, string Command);
588
589VOID
590CommandStatus(vector<string> SplitCommand, string Command);
591
592VOID
593CommandAttach(vector<string> SplitCommand, string Command);
594
595VOID
596CommandDetach(vector<string> SplitCommand, string Command);
597
598VOID
599CommandStart(vector<string> SplitCommand, string Command);
600
601VOID
602CommandRestart(vector<string> SplitCommand, string Command);
603
604VOID
605CommandSwitch(vector<string> SplitCommand, string Command);
606
607VOID
608CommandKill(vector<string> SplitCommand, string Command);
609
610VOID
611CommandT(vector<string> SplitCommand, string Command);
612
613VOID
614CommandI(vector<string> SplitCommand, string Command);
615
616VOID
617CommandPrint(vector<string> SplitCommand, string Command);
618
619VOID
620CommandOutput(vector<string> SplitCommand, string Command);
621
622VOID
623CommandDebug(vector<string> SplitCommand, string Command);
624
625VOID
626CommandP(vector<string> SplitCommand, string Command);
627
628VOID
629CommandCore(vector<string> SplitCommand, string Command);
630
631VOID
632CommandProcess(vector<string> SplitCommand, string Command);
633
634VOID
635CommandThread(vector<string> SplitCommand, string Command);
636
637VOID
638CommandEval(vector<string> SplitCommand, string Command);
639
640VOID
641CommandR(vector<string> SplitCommand, string Command);
642
643VOID
644CommandBp(vector<string> SplitCommand, string Command);
645
646VOID
647CommandBl(vector<string> SplitCommand, string Command);
648
649VOID
650CommandBe(vector<string> SplitCommand, string Command);
651
652VOID
653CommandBd(vector<string> SplitCommand, string Command);
654
655VOID
656CommandBc(vector<string> SplitCommand, string Command);
657
658VOID
659CommandSympath(vector<string> SplitCommand, string Command);
660
661VOID
662CommandSym(vector<string> SplitCommand, string Command);
663
664VOID
665CommandX(vector<string> SplitCommand, string Command);
666
667VOID
668CommandPrealloc(vector<string> SplitCommand, string Command);
669
670VOID
671CommandPreactivate(vector<string> SplitCommand, string Command);
672
673VOID
674CommandDtAndStruct(vector<string> SplitCommand, string Command);
675
676VOID
677CommandK(vector<string> SplitCommand, string Command);
678
679VOID
680CommandPe(vector<string> SplitCommand, string Command);
681
682VOID
683CommandRev(vector<string> SplitCommand, string Command);
684
685VOID
686CommandTrack(vector<string> SplitCommand, string Command);
687
688VOID
689CommandPagein(vector<string> SplitCommand, string Command);
690
691VOID
692CommandDump(vector<string> SplitCommand, string Command);
693
694VOID
695CommandGu(vector<string> SplitCommand, string Command);
696
697VOID
698CommandAssemble(vector<string> SplitCommand, string Command);
699
700//
701// hwdbg commands
702//
703VOID
704CommandHwClk(vector<string> SplitCommand, string Command);
BOOLEAN
UCHAR BOOLEAN
Definition BasicTypes.h:39
BYTE
unsigned char BYTE
Definition BasicTypes.h:24
PBOOLEAN
BOOLEAN * PBOOLEAN
Definition BasicTypes.h:40
VOID
#define VOID
Definition BasicTypes.h:33
PUINT32
unsigned int * PUINT32
Definition BasicTypes.h:48
UINT64
unsigned __int64 UINT64
Definition BasicTypes.h:21
UINT32
unsigned int UINT32
Definition BasicTypes.h:48
CHAR
char CHAR
Definition BasicTypes.h:31
Address
UINT64 Address
Definition HyperDbgScriptImports.h:67
DEBUGGER_SHOW_MEMORY_STYLE
enum _DEBUGGER_SHOW_MEMORY_STYLE DEBUGGER_SHOW_MEMORY_STYLE
the way that debugger should show the details of memory or disassemble them
DEBUGGER_READ_READING_TYPE
enum _DEBUGGER_READ_READING_TYPE DEBUGGER_READ_READING_TYPE
different types of reading memory
DEBUGGER_CONDITIONAL_JUMP_STATUS
enum _DEBUGGER_CONDITIONAL_JUMP_STATUS DEBUGGER_CONDITIONAL_JUMP_STATUS
Whether a jump is taken or not taken.
DEBUGGER_READ_MEMORY_TYPE
enum _DEBUGGER_READ_MEMORY_TYPE DEBUGGER_READ_MEMORY_TYPE
different type of addresses
DEBUGGER_READ_MEMORY_ADDRESS_MODE
enum _DEBUGGER_READ_MEMORY_ADDRESS_MODE DEBUGGER_READ_MEMORY_ADDRESS_MODE
different address mode
CommandEptHook2
VOID CommandEptHook2(vector< string > SplitCommand, string Command)
!epthook2 command handler
Definition epthook2.cpp:48
g_DeviceHandle
HANDLE g_DeviceHandle
Holds the global handle of device which is used to send the request to the kernel by IOCTL,...
Definition globals.h:471
CommandCpuid
VOID CommandCpuid(vector< string > SplitCommand, string Command)
!cpuid command handler
Definition cpuid.cpp:47
SeparateTo64BitValue
string SeparateTo64BitValue(UINT64 Value)
add ` between 64 bit values and convert them to string
Definition common.cpp:27
CommandIoin
VOID CommandIoin(vector< string > SplitCommand, string Command)
!ioin command handler
Definition ioin.cpp:47
CommandTest
VOID CommandTest(vector< string > SplitCommand, string Command)
test command handler
Definition test.cpp:364
CommandExit
VOID CommandExit(vector< string > SplitCommand, string Command)
exit command handler
Definition exit.cpp:43
CommandTrack
VOID CommandTrack(vector< string > SplitCommand, string Command)
handler of !track command
Definition track.cpp:59
ShowMemoryCommandDD
void ShowMemoryCommandDD(unsigned char *OutputBuffer, UINT32 Size, UINT64 Address, DEBUGGER_READ_MEMORY_TYPE MemoryType, UINT64 Length)
Show memory in dword format (DD)
Definition readmem.cpp:555
CommandDtAndStruct
VOID CommandDtAndStruct(vector< string > SplitCommand, string Command)
dt and struct command handler
Definition dt-struct.cpp:427
CommandFlush
VOID CommandFlush(vector< string > SplitCommand, string Command)
flush command handler
Definition flush.cpp:109
CommandLogopen
VOID CommandLogopen(vector< string > SplitCommand, string Command)
.logopen command handler
Definition logopen.cpp:43
CommandThread
VOID CommandThread(vector< string > SplitCommand, string Command)
.thread command handler
Definition thread.cpp:119
CommandLogclose
VOID CommandLogclose(vector< string > SplitCommand, string Command)
.logclose command handler
Definition logclose.cpp:41
CommandSyscallAndSysret
VOID CommandSyscallAndSysret(vector< string > SplitCommand, string Command)
!syscall, !syscall2 and !sysret, !sysret2 commands handler
Definition syscall-sysret.cpp:84
ShowMessages
VOID ShowMessages(const char *Fmt,...)
Show messages.
Definition libhyperdbg.cpp:96
CommandPrint
VOID CommandPrint(vector< string > SplitCommand, string Command)
handler of print command
Definition print.cpp:46
CommandPause
VOID CommandPause(vector< string > SplitCommand, string Command)
pause command handler
Definition pause.cpp:71
CommandPreactivate
VOID CommandPreactivate(vector< string > SplitCommand, string Command)
preactivate command handler
Definition preactivate.cpp:42
HyperDbgDisassembler32
int HyperDbgDisassembler32(unsigned char *BufferToDisassemble, UINT64 BaseAddress, UINT64 Size, UINT32 MaximumInstrDecoded, BOOLEAN ShowBranchIsTakenOrNot, PRFLAGS Rflags)
Disassemble 32 bit assemblies.
Definition disassembler.cpp:373
CommandDisconnect
VOID CommandDisconnect(vector< string > SplitCommand, string Command)
.disconnect command handler
Definition disconnect.cpp:44
CommandVmcall
VOID CommandVmcall(vector< string > SplitCommand, string Command)
!vmcall command handler
Definition vmcall.cpp:45
CommandX
VOID CommandX(vector< string > SplitCommand, string Command)
x command handler
Definition x.cpp:40
InitializeCommandsDictionary
VOID InitializeCommandsDictionary()
Initialize commands and attributes.
Definition interpreter.cpp:817
CommandPte
VOID CommandPte(vector< string > SplitCommand, string Command)
!pte command handler
Definition pte.cpp:91
CommandPmc
VOID CommandPmc(vector< string > SplitCommand, string Command)
!pmc command handler
Definition pmc.cpp:45
HyperDbgCheckWhetherTheCurrentInstructionIsCall
BOOLEAN HyperDbgCheckWhetherTheCurrentInstructionIsCall(unsigned char *BufferToDisassemble, UINT64 BuffLength, BOOLEAN Isx86_64, PUINT32 CallLength)
Check whether the current instruction is a 'call' or not.
Definition disassembler.cpp:755
CommandIoout
VOID CommandIoout(vector< string > SplitCommand, string Command)
!ioout command handler
Definition ioout.cpp:47
CommandEptHook
VOID CommandEptHook(vector< string > SplitCommand, string Command)
!epthook command handler
Definition epthook.cpp:47
CommandFuncType
VOID(* CommandFuncType)(vector< string > SplitCommand, string Command)
Command's function type.
Definition commands.h:159
CommandMsrread
VOID CommandMsrread(vector< string > SplitCommand, string Command)
!msrread command handler
Definition msrread.cpp:46
ReadCpuDetails
int ReadCpuDetails()
Print out supported instruction set extensions.
Definition cpu.cpp:261
CommandPa2va
VOID CommandPa2va(vector< string > SplitCommand, string Command)
!pa2va command handler
Definition pa2va.cpp:48
CommandR
VOID CommandR(vector< string > SplitCommand, string Command)
CommandStatus
VOID CommandStatus(vector< string > SplitCommand, string Command)
.status and status command handler
Definition status.cpp:50
CommandDumpSaveIntoFile
VOID CommandDumpSaveIntoFile(PVOID Buffer, UINT32 Length)
Saves the received buffers into the files.
Definition dump.cpp:301
CommandSleep
VOID CommandSleep(vector< string > SplitCommand, string Command)
sleep command help
Definition sleep.cpp:37
CommandUnload
VOID CommandUnload(vector< string > SplitCommand, string Command)
unload command handler
Definition unload.cpp:48
CommandSettingsSetValueFromConfigFile
VOID CommandSettingsSetValueFromConfigFile(std::string OptionName, std::string OptionValue)
Sets the setting values from config file.
Definition settings.cpp:115
CommandPagein
VOID CommandPagein(vector< string > SplitCommand, string Command)
.pagein command handler
Definition pagein.cpp:264
CommandLoad
VOID CommandLoad(vector< string > SplitCommand, string Command)
load command handler
Definition load.cpp:46
CommandMsrwrite
VOID CommandMsrwrite(vector< string > SplitCommand, string Command)
!msrwrite command handler
Definition msrwrite.cpp:46
CommandRdmsr
VOID CommandRdmsr(vector< string > SplitCommand, string Command)
rdmsr command handler
Definition rdmsr.cpp:114
CommandScript
VOID CommandScript(vector< string > SplitCommand, string Command)
.script command handler
Definition script.cpp:268
CommandBe
VOID CommandBe(vector< string > SplitCommand, string Command)
handler of be command
Definition be.cpp:44
CommandConnect
VOID CommandConnect(vector< string > SplitCommand, string Command)
.connect command handler
Definition connect.cpp:106
CommandDr
VOID CommandDr(vector< string > SplitCommand, string Command)
!dr command handler
Definition dr.cpp:45
CommandSearchMemory
VOID CommandSearchMemory(vector< string > SplitCommand, string Command)
!s* s* commands handler
Definition s.cpp:138
CommandUnhide
VOID CommandUnhide(vector< string > SplitCommand, string Command)
!unhide command handler
Definition unhide.cpp:38
CommandDebug
VOID CommandDebug(vector< string > SplitCommand, string Command)
.debug command handler
Definition debug.cpp:210
CommandK
VOID CommandK(vector< string > SplitCommand, string Command)
k command handler
Definition k.cpp:55
CommandTsc
VOID CommandTsc(vector< string > SplitCommand, string Command)
handler of !tsc command
Definition tsc.cpp:45
CommandHide
VOID CommandHide(vector< string > SplitCommand, string Command)
!hide command handler
Definition hide.cpp:60
CommandCpu
VOID CommandCpu(vector< string > SplitCommand, string Command)
cpu command handler
Definition cpu.cpp:35
CommandMonitor
VOID CommandMonitor(vector< string > SplitCommand, string Command)
!monitor command handler
Definition monitor.cpp:61
CommandDump
VOID CommandDump(vector< string > SplitCommand, string Command)
.dump command handler
Definition dump.cpp:62
CommandP
VOID CommandP(vector< string > SplitCommand, string Command)
handler of p command
Definition p.cpp:52
CommandGu
VOID CommandGu(vector< string > SplitCommand, string Command)
handler of gu command
Definition gu.cpp:51
CommandRev
VOID CommandRev(vector< string > SplitCommand, string Command)
!rev command handler
Definition rev.cpp:51
CommandCore
VOID CommandCore(vector< string > SplitCommand, string Command)
~ command handler
Definition core.cpp:46
CommandPteShowResults
VOID CommandPteShowResults(UINT64 TargetVa, PDEBUGGER_READ_PAGE_TABLE_ENTRIES_DETAILS PteRead)
show results of !pte command
Definition pte.cpp:47
CommandTrace
VOID CommandTrace(vector< string > SplitCommand, string Command)
!trace command handler
Definition trace.cpp:50
CommandVa2pa
VOID CommandVa2pa(vector< string > SplitCommand, string Command)
!va2pa command handler
Definition va2pa.cpp:49
CommandAssemble
VOID CommandAssemble(vector< string > SplitCommand, string Command)
a and !a commands handler
Definition a.cpp:182
CommandRestart
VOID CommandRestart(vector< string > SplitCommand, string Command)
.restart command handler
Definition restart.cpp:46
CommandSwitch
VOID CommandSwitch(vector< string > SplitCommand, string Command)
.switch command handler
Definition switch.cpp:49
CommandFormats
VOID CommandFormats(vector< string > SplitCommand, string Command)
handler of .formats command
Definition formats.cpp:105
CommandKill
VOID CommandKill(vector< string > SplitCommand, string Command)
.kill command handler
Definition kill.cpp:41
CommandException
VOID CommandException(vector< string > SplitCommand, string Command)
!exception command handler
Definition exception.cpp:50
CommandMeasure
VOID CommandMeasure(vector< string > SplitCommand, string Command)
!measure command handler
Definition measure.cpp:53
HyperDbgIsConditionalJumpTaken
DEBUGGER_CONDITIONAL_JUMP_STATUS HyperDbgIsConditionalJumpTaken(unsigned char *BufferToDisassemble, UINT64 BuffLength, RFLAGS Rflags, BOOLEAN Isx86_64)
Check whether the jump is taken or not taken (in debugger)
Definition disassembler.cpp:410
CommandType
std::map< std::string, COMMAND_DETAIL > CommandType
Type saving commands and mapping to command string.
Definition commands.h:183
CommandAttach
VOID CommandAttach(vector< string > SplitCommand, string Command)
.attach command handler
Definition attach.cpp:44
CommandStart
VOID CommandStart(vector< string > SplitCommand, string Command)
.start command handler
Definition start.cpp:45
CommandSym
VOID CommandSym(vector< string > SplitCommand, string Command)
.sym command handler
Definition sym.cpp:55
CommandSettings
VOID CommandSettings(vector< string > SplitCommand, string Command)
settings command handler
Definition settings.cpp:544
ShowMemoryCommandDQ
void ShowMemoryCommandDQ(unsigned char *OutputBuffer, UINT32 Size, UINT64 Address, DEBUGGER_READ_MEMORY_TYPE MemoryType, UINT64 Length)
Show memory in qword format (DQ)
Definition readmem.cpp:604
CommandBd
VOID CommandBd(vector< string > SplitCommand, string Command)
handler of bd command
Definition bd.cpp:44
CommandG
VOID CommandG(vector< string > SplitCommand, string Command)
handler of g command
Definition g.cpp:93
CommandSettingsLoadDefaultValuesFromConfigFile
VOID CommandSettingsLoadDefaultValuesFromConfigFile()
Loads default settings values from config file.
Definition settings.cpp:161
CommandT
VOID CommandT(vector< string > SplitCommand, string Command)
handler of t command
Definition t.cpp:52
CommandProcess
VOID CommandProcess(vector< string > SplitCommand, string Command)
.process command handler
Definition process.cpp:56
CheckMultilineCommand
BOOLEAN CheckMultilineCommand(CHAR *CurrentCommand, BOOLEAN Reset)
check for multi-line commands
Definition interpreter.cpp:611
CommandSettingsGetValueFromConfigFile
BOOLEAN CommandSettingsGetValueFromConfigFile(std::string OptionName, std::string &OptionValue)
Gets the setting values from config file.
Definition settings.cpp:60
HyperDbgShowMemoryOrDisassemble
VOID HyperDbgShowMemoryOrDisassemble(DEBUGGER_SHOW_MEMORY_STYLE Style, UINT64 Address, DEBUGGER_READ_MEMORY_TYPE MemoryType, DEBUGGER_READ_READING_TYPE ReadingType, UINT32 Pid, UINT32 Size, PDEBUGGER_DT_COMMAND_OPTIONS DtDetails)
Show memory or disassembler.
Definition readmem.cpp:193
CpuReadVendorString
VOID CpuReadVendorString(CHAR *Result)
Reads the CPU vendor string.
Definition cpu.cpp:249
CommandEditMemory
VOID CommandEditMemory(vector< string > SplitCommand, string Command)
!e* and e* commands handler
Definition e.cpp:265
CommandOutput
VOID CommandOutput(vector< string > SplitCommand, string Command)
output command handler
Definition output.cpp:54
ShowMemoryCommandDB
void ShowMemoryCommandDB(unsigned char *OutputBuffer, UINT32 Size, UINT64 Address, DEBUGGER_READ_MEMORY_TYPE MemoryType, UINT64 Length)
Show memory in bytes (DB)
Definition readmem.cpp:418
CommandPrealloc
VOID CommandPrealloc(vector< string > SplitCommand, string Command)
prealloc command handler
Definition prealloc.cpp:54
HyperDbgCheckWhetherTheCurrentInstructionIsRet
BOOLEAN HyperDbgCheckWhetherTheCurrentInstructionIsRet(unsigned char *BufferToDisassemble, UINT64 BuffLength, BOOLEAN Isx86_64)
Check whether the current instruction is a 'ret' or not.
Definition disassembler.cpp:1096
CommandI
VOID CommandI(vector< string > SplitCommand, string Command)
handler of i command
Definition i.cpp:55
CommandHelpFuncType
VOID(* CommandHelpFuncType)()
Command's help function type.
Definition commands.h:165
CommandPe
VOID CommandPe(vector< string > SplitCommand, string Command)
.pe command handler
Definition pe.cpp:43
CommandEval
VOID CommandEval(vector< string > SplitCommand, string Command)
handler of ? command
Definition eval.cpp:196
CommandHwClk
VOID CommandHwClk(vector< string > SplitCommand, string Command)
!hw_clk command handler
Definition hw_clk.cpp:46
CommandLm
VOID CommandLm(vector< string > SplitCommand, string Command)
handle lm command
Definition lm.cpp:385
CommandBc
VOID CommandBc(vector< string > SplitCommand, string Command)
handler of bc command
Definition bc.cpp:44
CommandWrmsr
VOID CommandWrmsr(vector< string > SplitCommand, string Command)
wrmsr command handler
Definition wrmsr.cpp:42
CommandClearScreen
VOID CommandClearScreen(vector< string > SplitCommand, string Command)
.cls command handler
Definition cls.cpp:35
HyperDbgCheckWhetherTheCurrentInstructionIsCallOrRet
BOOLEAN HyperDbgCheckWhetherTheCurrentInstructionIsCallOrRet(unsigned char *BufferToDisassemble, UINT64 CurrentRip, UINT32 BuffLength, BOOLEAN Isx86_64, PBOOLEAN IsRet)
Check whether the current instruction is a 'call' or 'ret' or not.
Definition disassembler.cpp:983
PCOMMAND_DETAIL
struct _COMMAND_DETAIL * PCOMMAND_DETAIL
CommandListen
VOID CommandListen(vector< string > SplitCommand, string Command)
listen command handler
Definition listen.cpp:53
CommandMode
VOID CommandMode(vector< string > SplitCommand, string Command)
!mode command handler
Definition mode.cpp:48
HyperDbgReadMemory
BOOLEAN HyperDbgReadMemory(UINT64 TargetAddress, DEBUGGER_READ_MEMORY_TYPE MemoryType, DEBUGGER_READ_READING_TYPE ReadingType, UINT32 Pid, UINT32 Size, BOOLEAN GetAddressMode, DEBUGGER_READ_MEMORY_ADDRESS_MODE *AddressMode, BYTE *TargetBufferToStore, UINT32 *ReturnLength)
Read memory and disassembler.
Definition readmem.cpp:36
CommandDetach
VOID CommandDetach(vector< string > SplitCommand, string Command)
.detach command handler
Definition detach.cpp:71
CommandCrwrite
VOID CommandCrwrite(vector< string > SplitCommand, string Command)
!crwrite command handler
Definition crwrite.cpp:46
InitializeDebugger
VOID InitializeDebugger()
Initialize the debugger and adjust commands for the first run.
Definition interpreter.cpp:767
ContinuePreviousCommand
BOOLEAN ContinuePreviousCommand()
Some of commands like stepping commands (i, p, t) and etc. need to be repeated when the user press en...
Definition interpreter.cpp:708
CommandBp
VOID CommandBp(vector< string > SplitCommand, string Command)
bp command handler
Definition bp.cpp:83
CommandBl
VOID CommandBl(vector< string > SplitCommand, string Command)
handler of the bl command
Definition bl.cpp:40
COMMAND_DETAIL
struct _COMMAND_DETAIL COMMAND_DETAIL
Details of each command.
CommandReadMemoryAndDisassembler
VOID CommandReadMemoryAndDisassembler(vector< string > SplitCommand, string Command)
u* d* !u* !d* commands handler
Definition d-u.cpp:72
CommandSympath
VOID CommandSympath(vector< string > SplitCommand, string Command)
.sympath command handler
Definition sympath.cpp:44
HyperDbgDisassembler64
int HyperDbgDisassembler64(unsigned char *BufferToDisassemble, UINT64 BaseAddress, UINT64 Size, UINT32 MaximumInstrDecoded, BOOLEAN ShowBranchIsTakenOrNot, PRFLAGS Rflags)
Disassemble x64 assemblies.
Definition disassembler.cpp:333
CommandInterrupt
VOID CommandInterrupt(vector< string > SplitCommand, string Command)
!interrupt command handler
Definition interrupt.cpp:48
ShowMemoryCommandDC
void ShowMemoryCommandDC(unsigned char *OutputBuffer, UINT32 Size, UINT64 Address, DEBUGGER_READ_MEMORY_TYPE MemoryType, UINT64 Length)
Show memory in dword format (DC)
Definition readmem.cpp:486
CommandEvents
VOID CommandEvents(vector< string > SplitCommand, string Command)
events command handler
Definition events.cpp:65
HyperDbgLengthDisassemblerEngine
UINT32 HyperDbgLengthDisassemblerEngine(unsigned char *BufferToDisassemble, UINT64 BuffLength, BOOLEAN Isx86_64)
Length Disassembler engine based on Zydis.
Definition disassembler.cpp:856
Value
RequestedActionOfThePacket Value(0x1) 00000000
PRFLAGS
RFLAGS * PRFLAGS
Definition pch.h:34
_COMMAND_DETAIL
Details of each command.
Definition commands.h:172
_COMMAND_DETAIL::CommandAttrib
UINT64 CommandAttrib
Definition commands.h:175
_COMMAND_DETAIL::CommandHelpFunction
CommandHelpFuncType CommandHelpFunction
Definition commands.h:174
_COMMAND_DETAIL::CommandFunction
CommandFuncType CommandFunction
Definition commands.h:173
_DEBUGGER_DT_COMMAND_OPTIONS
requests options for dt and struct command
Definition RequestStructures.h:135
_DEBUGGER_READ_PAGE_TABLE_ENTRIES_DETAILS
request for !pte command
Definition RequestStructures.h:22