steppings.cpp File Reference

Functions for stepping instructions. More...

#include "pch.h"

Functions
BOOLEAN	SteppingInstrumentationStepIn ()
	Perform Instrumentation Step-in.
BOOLEAN	SteppingInstrumentationStepInForTracking ()
	Perform Instrumentation Step-in for Tracking.
BOOLEAN	SteppingRegularStepIn ()
	Perform Regular Step-in.
BOOLEAN	SteppingStepOver ()
	Perform Step-over.
BOOLEAN	SteppingStepOverForGu (BOOLEAN LastInstruction)
	Perform Step-over for GU.

Variables
ACTIVE_DEBUGGING_PROCESS	g_ActiveProcessDebuggingState
	State of active debugging thread.
BOOLEAN	g_IsSerialConnectedToRemoteDebuggee
	Shows if the debugger was connected to remote debuggee over (A remote guest).

Detailed Description

Functions for stepping instructions.

Author

Sina Karvandi (sina@.nosp@m.hype.nosp@m.rdbg..nosp@m.org)

Version

0.11

Date

2024-09-06

Copyright

This project is released under the GNU Public License v3.

Function Documentation

SteppingInstrumentationStepIn()

BOOLEAN SteppingInstrumentationStepIn

(

)

Perform Instrumentation Step-in.

Returns

BOOLEAN

{
    DEBUGGER_REMOTE_STEPPING_REQUEST RequestFormat;
 
    //
    // Check if we're in VMI mode
    //
    if (g_ActiveProcessDebuggingState.IsActive)
    {
        ShowMessages("the instrumentation step-in is only supported in Debugger Mode\n");
        return FALSE;
    }
 
    //
    // Set type of step
    //
    RequestFormat = DEBUGGER_REMOTE_STEPPING_REQUEST_INSTRUMENTATION_STEP_IN;
 
    return KdSendStepPacketToDebuggee(RequestFormat);
}

SteppingInstrumentationStepInForTracking()

BOOLEAN SteppingInstrumentationStepInForTracking

(

)

Perform Instrumentation Step-in for Tracking.

Returns

BOOLEAN

{
    DEBUGGER_REMOTE_STEPPING_REQUEST RequestFormat;
 
    //
    // Check if we're in VMI mode
    //
    if (g_ActiveProcessDebuggingState.IsActive)
    {
        ShowMessages("the instrumentation step-in is only supported in Debugger Mode\n");
        return FALSE;
    }
 
    //
    // Set type of step
    //
    RequestFormat = DEBUGGER_REMOTE_STEPPING_REQUEST_INSTRUMENTATION_STEP_IN_FOR_TRACKING;
 
    return KdSendStepPacketToDebuggee(RequestFormat);
}

SteppingRegularStepIn()

BOOLEAN SteppingRegularStepIn

(

)

Perform Regular Step-in.

Returns

BOOLEAN

{
    DEBUGGER_REMOTE_STEPPING_REQUEST RequestFormat;
 
    //
    // Set type of step
    //
    RequestFormat = DEBUGGER_REMOTE_STEPPING_REQUEST_STEP_IN;
 
    if (g_IsSerialConnectedToRemoteDebuggee)
    {
        //
        // It's stepping over serial connection in kernel debugger
        //
        return KdSendStepPacketToDebuggee(RequestFormat);
    }
    else if (g_ActiveProcessDebuggingState.IsActive && g_ActiveProcessDebuggingState.IsPaused)
    {
        //
        // It's stepping over user debugger
        //
        return UdSendStepPacketToDebuggee(g_ActiveProcessDebuggingState.ProcessDebuggingToken,
                                          g_ActiveProcessDebuggingState.ThreadId,
                                          RequestFormat);
    }
    else
    {
        return FALSE;
    }
}

SteppingStepOver()

BOOLEAN SteppingStepOver

(

)

Perform Step-over.

Returns

BOOLEAN

{
    DEBUGGER_REMOTE_STEPPING_REQUEST RequestFormat;
 
    //
    // Set type of step
    //
    RequestFormat = DEBUGGER_REMOTE_STEPPING_REQUEST_STEP_OVER;
 
    if (g_IsSerialConnectedToRemoteDebuggee)
    {
        //
        // It's stepping over serial connection in kernel debugger
        //
        return KdSendStepPacketToDebuggee(RequestFormat);
    }
    else if (g_ActiveProcessDebuggingState.IsActive && g_ActiveProcessDebuggingState.IsPaused)
    {
        //
        // It's stepping over user debugger
        //
        return UdSendStepPacketToDebuggee(g_ActiveProcessDebuggingState.ProcessDebuggingToken,
                                          g_ActiveProcessDebuggingState.ThreadId,
                                          RequestFormat);
    }
    else
    {
        return FALSE;
    }
}

SteppingStepOverForGu()

BOOLEAN SteppingStepOverForGu

(

BOOLEAN

LastInstruction

)

Perform Step-over for GU.

Parameters

LastInstruction

Returns

BOOLEAN

{
    DEBUGGER_REMOTE_STEPPING_REQUEST RequestFormat;
 
    //
    // Set type of step
    //
    if (!LastInstruction)
    {
        RequestFormat = DEBUGGER_REMOTE_STEPPING_REQUEST_STEP_OVER_FOR_GU;
    }
    else
    {
        RequestFormat = DEBUGGER_REMOTE_STEPPING_REQUEST_STEP_OVER_FOR_GU_LAST_INSTRUCTION;
    }
 
    if (g_IsSerialConnectedToRemoteDebuggee)
    {
        //
        // It's stepping over serial connection in kernel debugger
        //
        return KdSendStepPacketToDebuggee(RequestFormat);
    }
    else if (g_ActiveProcessDebuggingState.IsActive && g_ActiveProcessDebuggingState.IsPaused)
    {
        //
        // It's stepping over user debugger
        //
        return UdSendStepPacketToDebuggee(g_ActiveProcessDebuggingState.ProcessDebuggingToken,
                                          g_ActiveProcessDebuggingState.ThreadId,
                                          RequestFormat);
    }
    else
    {
        //
        // The target is not paused, or not a valid context
        //
        return FALSE;
    }
}

Variable Documentation

g_ActiveProcessDebuggingState

ACTIVE_DEBUGGING_PROCESS g_ActiveProcessDebuggingState

extern

State of active debugging thread.

{0};

g_IsSerialConnectedToRemoteDebuggee

BOOLEAN g_IsSerialConnectedToRemoteDebuggee

extern

Shows if the debugger was connected to remote debuggee over (A remote guest).