exit.cpp File Reference

exit command More...

#include "pch.h"

Functions
VOID	CommandExitHelp ()
	help of the exit command
VOID	CommandExit (vector< CommandToken > CommandTokens, string Command)
	exit command handler

Variables
HANDLE	g_DeviceHandle
	Holds the global handle of device which is used to send the request to the kernel by IOCTL, this handle is not used for IRP Pending of message tracing this handle is used in KD VMM.
BOOLEAN	g_IsConnectedToHyperDbgLocally
	Shows whether the user is allowed to use 'load' command to load modules locally in VMI (virtual machine introspection) mode.
BOOLEAN	g_IsSerialConnectedToRemoteDebuggee
	Shows if the debugger was connected to remote debuggee over (A remote guest).
BOOLEAN	g_IsKdModuleLoaded
	shows whether the kernel debugger (KD) module is loaded or not
BOOLEAN	g_IsVmmModuleLoaded
	shows whether the VMM module is loaded or not

Detailed Description

exit command

Author

Sina Karvandi (sina@.nosp@m.hype.nosp@m.rdbg..nosp@m.org)

Version

0.1

Date

2020-05-27

Copyright

This project is released under the GNU Public License v3.

Function Documentation

CommandExit()

VOID CommandExit	(	vector< CommandToken >	CommandTokens,
		string	Command )

exit command handler

Parameters

CommandTokens
Command

Returns

VOID

{
    if (CommandTokens.size() != 1)
    {
        ShowMessages("incorrect use of the '%s'\n\n",
                     GetCaseSensitiveStringFromCommandToken(CommandTokens.at(0)).c_str());
        CommandExitHelp();
        return;
    }
 
    if (g_IsConnectedToHyperDbgLocally)
    {
        //
        // It is in VMI mode
        //
 
        //
        // unload and exit if the any module is loaded
        //
        if (g_DeviceHandle)
        {
            //
            // Unload all modules
            //
            HyperDbgUnloadAllModules();
        }
    }
    else if (g_IsSerialConnectedToRemoteDebuggee)
    {
        //
        // It is in debugger mode
        //
 
        KdCloseConnection();
    }
 
    exit(0);
}

CommandExitHelp()

VOID CommandExitHelp

(

)

help of the exit command

Returns

VOID

{
    ShowMessages(
        "exit : unloads and uninstalls the drivers and closes the debugger.\n\n");
 
    ShowMessages("syntax : \texit\n");
}

Variable Documentation

g_DeviceHandle

HANDLE g_DeviceHandle

extern

Holds the global handle of device which is used to send the request to the kernel by IOCTL, this handle is not used for IRP Pending of message tracing this handle is used in KD VMM.

g_IsConnectedToHyperDbgLocally

BOOLEAN g_IsConnectedToHyperDbgLocally

extern

Shows whether the user is allowed to use 'load' command to load modules locally in VMI (virtual machine introspection) mode.

g_IsKdModuleLoaded

BOOLEAN g_IsKdModuleLoaded

extern

shows whether the kernel debugger (KD) module is loaded or not

g_IsSerialConnectedToRemoteDebuggee

BOOLEAN g_IsSerialConnectedToRemoteDebuggee

extern

Shows if the debugger was connected to remote debuggee over (A remote guest).

g_IsVmmModuleLoaded

BOOLEAN g_IsVmmModuleLoaded

extern

shows whether the VMM module is loaded or not