1
0
Fork 0

first commit

This commit is contained in:
mr.exodia 2013-11-14 21:55:18 +01:00
commit 6c9de40fbc
267 changed files with 52814 additions and 0 deletions

49
.gitignore vendored Normal file
View File

@ -0,0 +1,49 @@
#ignore directories
*/obj/
bin/*/*
ipch/*
*/Win32/
*/x64/
#global filetypes to ignore
*.depend
*.layout
*.cscope_file_list
*.bmarks
*.chw
*.cbTemp
*.ini
*.opensdf
*.sdf
*.suo
#whitelisted bin files
!bin/*/TitanEngine.dll
!bin/*/test.dll
!bin/*/test.exe
!bin/*/dbghelp.dll
!bin/*/sqlite.dll
!bin/*/BeaEngine.dll
!bin/*/Scylla.dll
#files to ignore
todo_bridge.txt
#debugger files to ignore
x64_dbg_dbg/ODbgScript.chm
x64_dbg_dbg/ODbgScript.chw
x64_dbg_dbg/CppCheckResults.xml
x64_dbg_dbg/.cccc/
x64_dbg_dbg/suggestions.txt
# For GUI
*.pro.user
x64_dbg_gui/DebuggerX64-build-Debug
x64_dbg_gui/DebuggerX64-build-Release
x64_dbg_gui/bin
x64_dbg_gui/Project/GeneratedFiles/
x64_dbg_gui/Project/release/
x64_dbg_gui/Project/Win32/
x64_dbg_gui/Project/x64/
x64_dbg_gui/Project/Src/Bridge/libx32_bridge.a
x64_dbg_gui/Project/Src/Bridge/libx64_bridge.a

BIN
bin/x32/BeaEngine.dll Normal file

Binary file not shown.

BIN
bin/x32/Scylla.dll Normal file

Binary file not shown.

BIN
bin/x32/TitanEngine.dll Normal file

Binary file not shown.

BIN
bin/x32/dbghelp.dll Normal file

Binary file not shown.

BIN
bin/x32/sqlite.dll Normal file

Binary file not shown.

BIN
bin/x32/test.dll Normal file

Binary file not shown.

BIN
bin/x32/test.exe Normal file

Binary file not shown.

BIN
bug.ico Normal file

Binary file not shown.

After

Width:  |  Height:  |  Size: 105 KiB

50
help/Calculations.htm Normal file
View File

@ -0,0 +1,50 @@
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>Calculations</title>
<meta name="GENERATOR" content="WinCHM">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<style>
html,body {
/* Default Font */
font-family: Courier New;
font-size: 11pt;
}
</style>
</head>
<body>
<P><STRONG>Calculations<BR></STRONG>The debugger allows usage of basic math
operations, just type an expression in the
command window and the result will be displayed in the console. Apart from
calculations, it allows quick&nbsp;variable changes using a C-like syntax.</P>
<P><STRONG>Operators</STRONG><BR> You can use the
following operators in your expression. They are processed in the following order:</P>
<P><U>1:</U><U>brackets</U>: '(' and ')' Brackets are
resolved first, there is no need for a terminating bracket, unless you want to
use one.</P>
<P><U>2:not</U>: '~' The not operator can be used before a
number of a variable, like in C.</P>
<P><U>3:addition/substraction</U>
: '+' and '-'</P>
<P><U>4:muliplication/devision</U>: '*'
= regular multiplication (signed/unsigned), '#' = get the higher part of the
multiplication, '/' = regular devision (signed/unsigned, devide by zero=error)
and '%' = get the modulo (remainder) of the devision.</P>
<P><U>5:shift</U>: '&lt;' = shift left (shl for unsigned,
sal for signed), '&gt;' = shift right (shr for unsigned, sar for signed).</P>
<P><U>6:and</U>: '&amp;' Just the regular AND operation like
in C.</P>
<P><U>7:xor</U>: '^' Just the regular XOR operation like in
C.</P>
<P><U>8:or</U>: '|' Just the regular OR operation like in
C.</P>
<P><STRONG>Quick-Assigning<BR></STRONG>Changing memory, a
variable, register or&nbsp;flag can be easily done using a C-like
syntax:</P>
<P><U>a?=b</U>: '?' can be any mathematical operation. 'a'
can be any register, flag, variable or memory location. 'b' can be anything that is recognized as a mathmatical
input.</P>
<P><U>a++/a--</U>: 'a' can be any register, flag, variable or memory
location.</P></body>

35
help/Commands.htm Normal file
View File

@ -0,0 +1,35 @@
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>Commands</title>
<meta name="GENERATOR" content="WinCHM">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<style>
html,body {
/* Default Font */
font-family: Courier New;
font-size: 11pt;
}
</style>
</head>
<body>
<P class=rvps3><SPAN class=rvts10><STRONG>
command[,alias1,alias2]</STRONG><BR></SPAN><SPAN class=rvts9>Command description
here.</SPAN><SPAN class=rvts9><BR></SPAN></P>
<P class=rvps3><SPAN class=rvts11><U>arguments</U><BR></SPAN><SPAN
class=rvts9>&nbsp; arg1: </SPAN><SPAN class=rvts9>Argument description.</SPAN></P>
<P class=rvps3><SPAN class=rvts9></SPAN><SPAN class=rvts9>[arg2]: </SPAN><SPAN
class=rvts9></SPAN><SPAN class=rvts9>Optional argument.</SPAN></P>
<P class=rvps3><SPAN class=rvts9></SPAN><SPAN
class=rvts9>[arg3]: </SPAN><SPAN class=rvts9></SPAN><SPAN class=rvts9>Another optional argument (can only be given when the
previous argument is also
given).</SPAN><SPAN class=rvts9><BR></P></SPAN>
<P class=rvps3><SPAN class=rvts11><U>result</U><BR></SPAN><SPAN
class=rvts9>Description of the command result.</SPAN><SPAN
class=rvts9><BR></SPAN></P>
<P class=rvps3><SPAN class=rvts12><U><STRONG>REMARK</STRONG></U></SPAN><SPAN
class=rvts9>: Commands cannot contain any of the following characters: ","
(comma), " " (space) and "\" (backslash). They need to be
prefixed.</SPAN></P></head>

23
help/DeleteBPX_bpc_bc.htm Normal file
View File

@ -0,0 +1,23 @@
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>DeleteBPX/bpc/bc</title>
<meta name="GENERATOR" content="WinCHM">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<style>
html,body {
/* Default Font */
font-family: Courier New;
font-size: 11pt;
}
</style>
</head>
<body>
<P><STRONG>DeleteBPX[,bpc,bc]</STRONG><BR>Delete&nbsp;a
breakpoint set using the SetBPX command.</P>
<P><U>arguments</U><BR>[arg1]: Name or address of the breakpoint to delete. If this argument is not specified, all breakpoints will be
enabled.</P>
<P><U>result<BR></U>This command does not set any result variables.</P>
<P>&nbsp;</P></body>

View File

@ -0,0 +1,26 @@
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>DisableBPX/bpd/bd</title>
<meta name="GENERATOR" content="WinCHM">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<style>
html,body {
/* Default Font */
font-family: Courier New;
font-size: 11pt;
}
</style>
</head>
<body><STRONG>DisableBPX[,bpd,bd]<BR></STRONG>Disable&nbsp;a breakpoint set using the SetBPX
command.
<P><U>arguments</U><BR>[arg1]: Name or address of the breakpoint to disable. If
this argument is not specified, all breakpoints will be enabled.</P>
<P>
<U>
result
<BR>
</U>This command does not set any result
variables.</P></BODY></HTML>

25
help/EnableBPX_bpe_be.htm Normal file
View File

@ -0,0 +1,25 @@
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>EnableBPX/bpe/be</title>
<meta name="GENERATOR" content="WinCHM">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<style>
html,body {
/* Default Font */
font-family: Courier New;
font-size: 11pt;
}
</style>
</head>
<body>
<P><STRONG>EnableBPX[,bpe,be]</STRONG><BR>Enable
a breakpoint set using the SetBPX
command.</P>
<P><U>arguments</U><BR> [arg1]: Name or address of the breakpoint to enable. If this
argument is not specified, all breakpoints
will be enabled.</P>
<P><U>result<BR></U>This command does not set any result
variables.</P></head>

25
help/Fill_memset.htm Normal file
View File

@ -0,0 +1,25 @@
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>Fill/memset</title>
<meta name="GENERATOR" content="WinCHM">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<style>
html,body {
/* Default Font */
font-family: Courier New;
font-size: 11pt;
}
</style>
</head>
<body>
<P><STRONG>Fill[,memset]</STRONG><BR>Set memory of the
debuggee to a specified byte.</P>
<P><U>arguments</U><BR>&nbsp; arg1: Memory address to start setting bytes.</P>
<P>&nbsp; arg2: Value (byte) to set memory with.</P>
<P>[arg3]: Size to set. When not specified the rest of the
page is used.</P>
<P><U>result</U><BR>This command does not set any result
variables.</P></body>

View File

@ -0,0 +1,31 @@
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>HideDebugger/dbh/hide</title>
<meta name="GENERATOR" content="WinCHM">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<style>
html,body {
/* Default Font */
font-family: Courier New;
font-size: 11pt;
}
</style>
</head>
<body>
<P><STRONG>HideDebugger[,dbh,hide]<BR></STRONG> Hide the debugger from (very) simple detection
methods.</P>
<P class=rvps3><SPAN class=rvts11><U>arguments</U><BR></SPAN><SPAN class=rvts9>This command has no arguments.</SPAN></P>
<P class=rvps3>
<SPAN class=rvts11>
<U>
result
<BR>
</U>
</SPAN>
<SPAN class=rvts9 >
This command does not set any result
variables.</SPAN></P></body>

24
help/Hotkeys.htm Normal file
View File

@ -0,0 +1,24 @@
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>Hotkeys</title>
<meta name="GENERATOR" content="WinCHM">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<style>
html,body {
/* Default Font */
font-family: Courier New;
font-size: 11pt;
}
</style>
</head>
<body>
<P><STRONG>Hotkeys</STRONG><BR>This section is a listing of
all hotkeys.</P>
<P><U>RIGHT-ALT</U>: Use right-alt to toggle between the last
selected window the process has access to and the console window. This is useful
when you quickly need to enter a command and then switch back to the previous
window. The window selected will be set to
the foreground.</P></body>

View File

@ -0,0 +1,41 @@
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>InitDebug/initdbg/init</title>
<meta name="GENERATOR" content="WinCHM">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<style>
html,body {
/* Default Font */
font-family: Courier New;
font-size: 11pt;
}
</style>
</head>
<body>
<P><STRONG>InitDebug[,init,initdbg]<BR></STRONG>Initializes the debugger. This command will load
the executable (do some basic checks),&nbsp;set breakpoints on TLS callbacks
(if present), set a breakpoint at the process entry point&nbsp;and
break at the system breakpoint before giving back control to the
user.</P>
<P><U>arguments</U><BR>&nbsp; arg1 : Path to the executable file to debug. If no full path is given, the GetCurrentDirectory API will be
called to retrieve a full path. Use quotation marks to include spaces in your path.
</P>
<P> [arg2]: Commandline to create the process with.
</P>
<P>[arg3]: Current folder (passed to the CreateProcess API).
</P>
<P><U>result<BR></U> This command will
give control back to the user&nbsp;after the&nbsp;system breakpoint&nbsp;is reached. It will set
<U>$pid</U> and&nbsp;<U>$hp/$hProcess</U>variables.
</P></BODY></HTML>

62
help/Input.htm Normal file
View File

@ -0,0 +1,62 @@
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>Input</title>
<meta name="GENERATOR" content="WinCHM">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<style>
html,body {
/* Default Font */
font-family: Courier New;
font-size: 11pt;
}
</style>
</head>
<body>
<P class=rvps3><SPAN class=rvts10><STRONG>Input</STRONG><BR></SPAN><SPAN
class=rvts9>This program accepts various options of input:</SPAN><SPAN
class=rvts9><BR></SPAN></P>
<P class=rvps3><SPAN class=rvts11><U>commands</U></SPAN><SPAN class=rvts9>:
Commands have the following format: "</SPAN><SPAN
class=rvts10>command[space]arg1,[optional space]arg2,argN</SPAN><SPAN
class=rvts9>".</SPAN><SPAN class=rvts9><BR></SPAN></P>
<P class=rvps3><SPAN class=rvts11><U>variables</U></SPAN><SPAN class=rvts9>:
Variables optionally start with a $ and can only store one DWORD (QWORD on
x64).</SPAN><SPAN class=rvts9><BR></SPAN></P>
<P class=rvps3><SPAN class=rvts11><U>debug registers</U></SPAN><SPAN
class=rvts9>: All debug registers (all sizes) can be used as
variables.</SPAN><SPAN class=rvts9><BR></SPAN></P>
<P class=rvps3><SPAN class=rvts11><U>memory locations</U></SPAN><SPAN
class=rvts9>: You can read from a memory location by using one of the
following expressions:<BR>@addr<BR>
@n:addr (where n is the amount of bytes to read,
this can be anything smaller then 4 on x32 and smaller then
8 on x64, when specified otherwise, there will be an error). addr is directly interpreted
as a value, when you want to read [addr+1] you should use
brackets: @(addr+1), @addr+1 will read: [addr]+1.</SPAN></P>
<P class=rvps3><SPAN
class=rvts9>
</SPAN><SPAN
class=rvts9><U>flags</U>: Debug flags (interpreted as integer) can be used
as input. Flags are prefixed with a '!' following the flag name or the bit number their on.
Valid flags are: !cf, !pf, !af, !zf, !sf, !tf, !if, !df, !of, !rf, !vm, !ac, !vif, !vip and !id.</SPAN><SPAN class=rvts9></P></SPAN>
<P class=rvps3><SPAN class=rvts11><U>numbers</U></SPAN><SPAN class=rvts9>: All
numbers are interpreted as hex by default. If you want to be sure, you can use
the "x" prefix. Decimal numbers can be used by prefixing the number with a "."
(.123=7B).</SPAN></P>
<P class=rvps3><SPAN class=rvts9><U>basic calculations</U> :
See "Calculations" for more
information.</SPAN></P>
<P class=rvps3><SPAN class=rvts9>
Input
for arguments can always be done in any of the above forms, except if stated
otherwise.</SPAN></P></body></HTML>

20
help/Introduction.htm Normal file
View File

@ -0,0 +1,20 @@
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>Introduction</title>
<meta name="GENERATOR" content="WinCHM">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<style>
html,body {
/* Default Font */
font-family: Courier New;
font-size: 11pt;
}
</style>
</head>
<body>
<P><STRONG>Introduction<BR></STRONG>[introductional talk
with motivation here].</P></body>
</html>

View File

@ -0,0 +1,23 @@
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>SetBPXOptions/bptype</title>
<meta name="GENERATOR" content="WinCHM">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<style>
html,body {
/* Default Font */
font-family: Courier New;
font-size: 11pt;
}
</style>
</head>
<body>
<P><STRONG>SetBPXOptions[,bptype]</STRONG><BR>Set the default type for the "SetBPX" command.</P>
<P><U>arguments<BR></U>&nbsp; arg1: Default type. This can be "short" (CC),
"long" (CD03) or "ud2" (0F0B). Type default type affects
both NORMAL and SINGLESHOT breakpoints.</P>
<P><U>result<BR></U>This command does not set any result
variables.</P></body>

46
help/SetBPX_bp_bpx.htm Normal file
View File

@ -0,0 +1,46 @@
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>SetBPX/bp/bpx</title>
<meta name="GENERATOR" content="WinCHM">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<style>
html,body {
/* Default Font */
font-family: Courier New;
font-size: 11pt;
}
</style>
</head>
<body>
<P><STRONG>SetBPX[,bp,bpx]</STRONG><BR>Set an INT3 (SHORT/LONG)&nbsp;or UD2 breakpoint
and optionally assign a name to it.</P>
<P><U>arguments<BR></U>&nbsp; arg1: Address to put a breakpoint on. This can be an API name&nbsp;[not
implemented].</P>
<P>
[arg2]: Name of the breakpoint, use quotation marks to
include spaces. This name can be used
by the EnableBPX, DisableBPX and DeleteBPX functions as alias,
but is mainly intended to provide a single line of information about the
currently-hit breakpoint. When arg2 equals to a
valid type (arg3) the type is used and arg2
is
ignored.</P>
<P>
[arg3]: Breakpoint type. Can be one of the following
options
in random order: "ss" (single shot breakpoint), "long" (CD03),
"ud2" (0F0B) and "short" (CC). You can combine the "ss" option
with one of the type options in one string. Example: "SetBPX 00401000,"entrypoint",ssud2" will set a
single shot&nbsp;UD2&nbsp;breakpoint at 00401000 with the name "entrypoint".
When specifying no type or just the type "ss"
the default type will be used. Per default this equals to the
"short" type. You can change the default type using the "SetBPXOptions"
command.</P>
<P><U>result<BR></U>
This command&nbsp;does&nbsp;not any&nbsp;result
variables.</P></body></HTML>

View File

@ -0,0 +1,34 @@
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>SetHardwareBreakpoint/bph/bphws</title>
<meta name="GENERATOR" content="WinCHM">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<style>
html,body {
/* Default Font */
font-family: Courier New;
font-size: 11pt;
}
</style>
</head>
<body>
<P><STRONG>SetHardwareBreakpoint[,bph,bphws]<BR></STRONG>Set a
hardware breakpoint (using debug registers).</P>
<P class=rvps3><SPAN class=rvts11><U>arguments</U> <BR></SPAN><SPAN
class=rvts9> &nbsp;
arg1: Address&nbsp;of the hardware breakpoint.</SPAN>&nbsp; </P>
<P class=rvps3><SPAN class=rvts9>[arg2]:&nbsp;Hardware breakpoint type. Can be either 'r'
(readwrite), 'w' (write) or 'x' (execute). When not specified, 'x' is
assumed.</SPAN>&nbsp; </P>
<P class=rvps3><SPAN class=rvts9>
[arg3]:&nbsp;Hardware breakpoint
size.</SPAN>&nbsp;Can be
either '1', '2', '4' or '8' (x64 only). Per default, '1' is assumed. The address
you're putting the hardware breakpoint on must be aligned to the specified
size. </P>
<P class=rvps3><SPAN class=rvts11><U>result <BR></U></SPAN><SPAN
class=rvts9>This command does not set any result
variables.</SPAN> </P></body>

View File

@ -0,0 +1,51 @@
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>SetMemoryBPX/membp/bpm</title>
<meta name="GENERATOR" content="WinCHM">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<style>
html,body {
/* Default Font */
font-family: Courier New;
font-size: 11pt;
}
</style>
</head>
<body>
<P><STRONG>SetMemoryBPX[,membp,bpm]<BR></STRONG>Set a memory
breakpoint (GUARD_PAGE) on the whole memory region the provided address is
in.</P>
<P class=rvps3>
<SPAN class=rvts11>
<U>arguments</U>
<BR >
</SPAN>
<SPAN
class=rvts9> &nbsp; arg1:&nbsp;Address&nbsp;of or
inside a memory region that will be watched.</SPAN>
</P>
<P class=rvps3>
<SPAN
class=rvts9> [arg2]:
1/0 restore the memory breakpoint once it's hit?</SPAN> When this value is not equal to one, it's assumed to be arg3. This
means "<EM>bpm eax,r</EM>" would be the same command as: "<EM>bpm
eax,0,r</EM>".
</P>
<P class=rvps3>
<SPAN
class=rvts9>[arg3]: Breakpoint type, it
can be 'r' (execute+read),&nbsp;'w' (write) or 'x' (execute). Per default,
it's a combination of execute, read and write.</SPAN>
</P>
<P class=rvps3><SPAN class=rvts11><U>result
<BR></U></SPAN><SPAN class=rvts9>This command does not set any result variables.</SPAN>
</P>
<P>&nbsp;</P></BODY></HTML>

25
help/SingleStep.htm Normal file
View File

@ -0,0 +1,25 @@
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>SingleStep/sstep/sst</title>
<meta name="GENERATOR" content="WinCHM">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<style>
html,body {
/* Default Font */
font-family: Courier New;
font-size: 11pt;
}
</style>
</head>
<body>
<P><STRONG>SingleStep[,sstep,sst]<BR></STRONG>Step a
specified number of instructions using the Trap-Flag.</P>
<P class=rvps3><SPAN class=rvts11><U>arguments</U><BR></SPAN><SPAN
class=rvts9> </SPAN><SPAN
class=rvts9>[arg1]: The number of instructions to executre (this can be
any valid expression). When not specified, a StepInto is performed.<BR></SPAN></P>
<P class=rvps3><SPAN class=rvts11><U>result<BR></U></SPAN><SPAN class=rvts9>This command does not set any result
variables.</SPAN></P></body>

24
help/Special_Thanks.htm Normal file
View File

@ -0,0 +1,24 @@
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>Special Thanks</title>
<meta name="GENERATOR" content="WinCHM">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<style>
html,body {
/* Default Font */
font-family: Courier New;
font-size: 11pt;
}
</style>
</head>
<body>
<P><STRONG>Special Thanks</STRONG><BR>This page is reserved
to companies/people who get credit for their used work or support.</P>
<P><A href="http://www.visualpharm.com"
target=_blank>VisualPharm</A>&nbsp;for their great icon!<BR><A href="http://www.reversinglabs.com/"
target=_blank>ReversingLabs</A> for TitanEngine!<BR><A
href="http://beaengine.org/" target=_blank>BeatriX</A>&nbsp;for
BeaEngine! </P></body>

24
help/StepInto.htm Normal file
View File

@ -0,0 +1,24 @@
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>StepInto/sti</title>
<meta name="GENERATOR" content="WinCHM">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<style>
html,body {
/* Default Font */
font-family: Courier New;
font-size: 11pt;
}
</style>
</head>
<body>
<P><STRONG>StepInto[,sti]<BR></STRONG>Single Step (using
Trap-Flag).</P>
<P class=rvps3><SPAN class=rvts11><U>arguments</U><BR></SPAN><SPAN
class=rvts9>This command has no arguments.</SPAN><SPAN
class=rvts9><BR></SPAN></P>
<P class=rvps3><SPAN class=rvts11><U>result<BR></U></SPAN><SPAN class=rvts9>This command does not set any result
variables.</SPAN></P></body>

25
help/StepOver.htm Normal file
View File

@ -0,0 +1,25 @@
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>StepOver/step/sto/st</title>
<meta name="GENERATOR" content="WinCHM">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<style>
html,body {
/* Default Font */
font-family: Courier New;
font-size: 11pt;
}
</style>
</head>
<body>
<P><STRONG>StepOver[,step,sto,st]<BR></STRONG>Step over
calls, when the instruction at CIP isn't a call,&nbsp;a StepInto is performed.</P>
<P><SPAN class=rvts11><U>arguments</U><BR></SPAN><SPAN
class=rvts9>This command has no arguments.</SPAN><SPAN
class=rvts9>
</P></SPAN>
<P class=rvps3><SPAN class=rvts11><U>result<BR></U></SPAN><SPAN class=rvts9>This command does not set any result
variables.</SPAN></P></body>

26
help/ToggleBPX_bpt_bt.htm Normal file
View File

@ -0,0 +1,26 @@
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>ToggleBPX/bpt/bt</title>
<meta name="GENERATOR" content="WinCHM">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<style>
html,body {
/* Default Font */
font-family: Courier New;
font-size: 11pt;
}
</style>
</head>
<body>
<P><STRONG>ToggleBPX[,bpt,bt]<BR></STRONG>Toggle
(enable/disable) a breakpoint.</P>
<P><U>arguments<BR></U>&nbsp; arg1:
Name or address of the
breakpoint to toggle.</P>
<P><U>result<BR></U>The $result variable will be set to the
state of the breakpoint before it was toggled. 1: breakpoint was enabled before,
0: breakpoint
was disabled before.</P></body>

38
help/Variables.htm Normal file
View File

@ -0,0 +1,38 @@
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>Variables</title>
<meta name="GENERATOR" content="WinCHM">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<style>
html,body {
/* Default Font */
font-family: Courier New;
font-size: 11pt;
}
</style>
</head>
<body>
<P class=rvps3><SPAN class=rvts10><STRONG>Variables</STRONG><BR></SPAN><SPAN
class=rvts9>This program supports variables. There are three types of
variables:</SPAN><SPAN class=rvts9><BR></SPAN></P>
<P class=rvps3><SPAN class=rvts11><U>USER</U></SPAN><SPAN class=rvts9>:
Variables created by the user using the "var" command. These variables have no
access restrictions.</SPAN><SPAN class=rvts9><BR></SPAN></P>
<P class=rvps3><SPAN class=rvts11><U>SYSTEM</U></SPAN><SPAN class=rvts9>:
Variables created by the system, that can be read and written, but cannot be
deleted.</SPAN><SPAN class=rvts9><BR></SPAN></P>
<P class=rvps3><SPAN class=rvts11><U>READONLY</U></SPAN><SPAN class=rvts9>:
Variables created by the system, that can be read, but not written or
deleted.</SPAN><SPAN class=rvts9><BR></SPAN></P>
<P class=rvps3><SPAN class=rvts10><STRONG>Reserved
Variables</STRONG><BR></SPAN><SPAN class=rvts9>There are a few reserved
variables:</SPAN><SPAN class=rvts9><BR></SPAN></P>
<P class=rvps3><SPAN class=rvts11><U>$res/$result</U></SPAN><SPAN class=rvts9>: General result variable.<BR><U>$resN/$resultN</U>:
Optional other result variables (N=
1-4).<BR><U>$pid</U>: Project ID of the debugged
executable.<BR><U>$hp/$hProcess</U>: Debugged executable
handle.<BR><U>$lastalloc</U>: Last result of the
'alloc' command.</SPAN></P></head>

25
help/alloc.htm Normal file
View File

@ -0,0 +1,25 @@
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>alloc</title>
<meta name="GENERATOR" content="WinCHM">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<style>
html,body {
/* Default Font */
font-family: Courier New;
font-size: 11pt;
}
</style>
</head>
<body>
<P><STRONG>alloc<BR></STRONG>Allocate memory in the debuggee (using
VirtualAllocEx). The memory is allocated
with PAGE_EXECUTE_READWRITE protection.</P>
<P><U>arguments</U><BR>[arg1]: Size of the memory to
allocate. When not specified, a default size of 0x1000 is used.</P>
<P><U>result</U><BR>This command sets $result to the allocated memory address. It also sets the $lastalloc
variable to the allocated memory address when VirtualAllocEx
succeeded.</P></body>

35
help/bplist.htm Normal file
View File

@ -0,0 +1,35 @@
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>bplist</title>
<meta name="GENERATOR" content="WinCHM">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<style>
html,body {
/* Default Font */
font-family: Courier New;
font-size: 11pt;
}
</style>
</head>
<body>
<P><STRONG>bplist</STRONG><BR>Get a list of breakpoints.
This list includes their state (enabled/disabled), their type, their address and
(optionally) their names.</P>
<P><U>arguments</U><BR>This command has no arguments.</P>
<P><U>result</U><BR>
This command does not set any result variables. A list entry has the
following format:</P>
<P><EM>STATE</EM>:<EM>TYPE</EM>:<EM>ADDRESS</EM>[:<EM>NAME</EM>]</P>
<P><EM>STATE</EM> can be 0 or 1. 0 means disabled, 1 means
enabled. Only singleshoot and 'normal' breakpoints can be disabled.</P>
<P><EM>TYPE</EM> can be one of the following values: BP,
SS, HW and GP. BP stands for a normal breakpoint (set using the SetBPX command),
SS stands for SINGLESHOT, HW stands for HARDWARE and GP stand for Guard Page,
the way of setting memory breakpoints.</P>
<P><EM>ADDRESS</EM> is the breakpoint address, given in 32 and 64
bits for the x32 and x64 debugger respectively.</P>
<P><EM>NAME</EM> is the name assigned
to the breakpoint.</P></body>

23
help/chd.htm Normal file
View File

@ -0,0 +1,23 @@
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>chd</title>
<meta name="GENERATOR" content="WinCHM">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<style>
html,body {
/* Default Font */
font-family: Courier New;
font-size: 11pt;
}
</style>
</head>
<body>
<P><STRONG>chd</STRONG><BR>Change current directory
(SetCurrentDirectory).</P>
<P><U>arguments</U><BR>&nbsp; arg1: Path of a directory to change
to.</P>
<P><U>result<BR></U><SPAN class=rvts9>This command does not set any result
variables.</SPAN></P></head>

21
help/cls.htm Normal file
View File

@ -0,0 +1,21 @@
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>cls</title>
<meta name="GENERATOR" content="WinCHM">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<style>
html,body {
/* Default Font */
font-family: Courier New;
font-size: 11pt;
}
</style>
</head>
<body>
<P class=rvps3><SPAN class=rvts10><STRONG>cls</STRONG><BR></SPAN><SPAN class=rvts9>Clear the console screen.</SPAN><SPAN class=rvts9><BR></SPAN></P>
<P class=rvps3><SPAN class=rvts11><U>arguments</U><BR></SPAN><SPAN class=rvts9>This command has no arguments.</SPAN><SPAN class=rvts9><BR></SPAN></P>
<P class=rvps3><SPAN class=rvts11><U>result<BR></U></SPAN><SPAN class=rvts9>This command does not set any result
variables.</SPAN></P></head>

32
help/disasm_dis_d.htm Normal file
View File

@ -0,0 +1,32 @@
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>disasm/dis/d</title>
<meta name="GENERATOR" content="WinCHM">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<style>
html,body {
/* Default Font */
font-family: Courier New;
font-size: 11pt;
}
</style>
</head>
<body>
<P><STRONG>disasm[,dis,d]<BR></STRONG>Disassemble 500
instructions and put the result in the disassembly window.</P>
<P class=rvps3>
<SPAN class=rvts11>
<U>arguments</U>
<BR >
</SPAN>
<SPAN class=rvts9 ></SPAN>
<SPAN class=rvts9>
[arg1]: The address to disassemble at. When not specified,
there will be assembled at CIP.</SPAN>
</P><P class=rvps3><SPAN class=rvts11><U>result<BR></U></SPAN><SPAN class=rvts9>This command does not set any result
variables.</SPAN></P></body>

31
help/free.htm Normal file
View File

@ -0,0 +1,31 @@
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>free</title>
<meta name="GENERATOR" content="WinCHM">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<style>
html,body {
/* Default Font */
font-family: Courier New;
font-size: 11pt;
}
</style>
</head>
<body>
<P><STRONG>free</STRONG><BR>
Free&nbsp;memory in the debuggee (using VirtualFreeEx).</P>
<P>
<U>arguments</U><BR> [arg1]: Address of the memory to free. When not
specified, the value at $lastalloc is used.</P>
<P>
<U>
result
</U>
<BR>
This command sets $result
to 1 if VirtualFreeEx succeeded, otherwise it's set to
0. $lastalloc is set to zero when the address specified is equal
to $lastalloc.</P></body>

29
help/mov_set.htm Normal file
View File

@ -0,0 +1,29 @@
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>mov/set</title>
<meta name="GENERATOR" content="WinCHM">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<style>
html,body {
/* Default Font */
font-family: Courier New;
font-size: 11pt;
}
</style>
</head>
<body>
<P class=rvps3><SPAN class=rvts10><STRONG>mov[,set]</STRONG><BR></SPAN><SPAN class=rvts9>Set a variable.</SPAN><SPAN class=rvts9><BR></SPAN></P>
<P class=rvps3><SPAN class=rvts11><U>arguments</U><BR></SPAN><SPAN class=rvts9>&nbsp; arg1:</SPAN><SPAN class=rvts9> </SPAN><SPAN
class=rvts9></SPAN><SPAN class=rvts9>Variable name (optionally prefixed with a $) to
set. When the variable does not exist, it will be
created.
</SPAN></P>
<P class=rvps3><SPAN class=rvts9>
</SPAN><SPAN class=rvts9>&nbsp;
arg2:</SPAN><SPAN class=rvts9> </SPAN><SPAN
class=rvts9></SPAN><SPAN class=rvts9>Value to store in the variable.</SPAN><SPAN class=rvts9><BR></P></SPAN>
<P class=rvps3><SPAN class=rvts11><U>result<BR></U></SPAN><SPAN class=rvts9>This command does not set any result
variables.</SPAN></P></head>

36
help/rtr.htm Normal file
View File

@ -0,0 +1,36 @@
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>rtr</title>
<meta name="GENERATOR" content="WinCHM">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<style>
html,body {
/* Default Font */
font-family: Courier New;
font-size: 11pt;
}
</style>
</head>
<body>
<P><STRONG>rtr<BR></STRONG>Return from function by calling
StepOver until the current instruction is a RET.</P>
<P class=rvps3>
<SPAN class=rvts11>
<U>
arguments
</U>
<BR>
</SPAN>
<SPAN class=rvts9 >
This command has no arguments.</SPAN></P>
<P class=rvps3 >
<SPAN class=rvts11>
<U>result<BR>
</U></SPAN><SPAN
class=rvts9>This command does not set any result
variables.</SPAN></P></body>

24
help/run_go_r_g.htm Normal file
View File

@ -0,0 +1,24 @@
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>run/go/r/g</title>
<meta name="GENERATOR" content="WinCHM">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<style>
html,body {
/* Default Font */
font-family: Courier New;
font-size: 11pt;
}
</style>
</head>
<body>
<P><STRONG>run[,go,r,g]</STRONG><BR>Free the lock and allow
the program to run.</P>
<P><U>arguments</U><BR>This command has no arguments.</P>
<P><U>result</U>
<BR>
This command does not set any result
variables.</P></body>

View File

@ -0,0 +1,27 @@
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>strlen/charcount/ccount</title>
<meta name="GENERATOR" content="WinCHM">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<style>
html,body {
/* Default Font */
font-family: Courier New;
font-size: 11pt;
}
</style>
</head>
<body>
<P class=rvps3><SPAN
class=rvts10><STRONG>strlen[,charcount,ccount]</STRONG><BR></SPAN><SPAN
class=rvts9>Get the
length of a string. This was the first command ever, left in for historical reasons.</SPAN><SPAN class=rvts9><BR></SPAN></P>
<P class=rvps3><SPAN class=rvts11><U>arguments</U><BR></SPAN><SPAN
class=rvts9>&nbsp; arg1:</SPAN><SPAN class=rvts9> </SPAN><SPAN class=rvts9></SPAN><SPAN
class=rvts9>String you want to get the length of.</SPAN><SPAN
class=rvts9><BR></SPAN></P>
<P class=rvps3><SPAN class=rvts11><U>result</U><BR></SPAN><SPAN class=rvts9>This
command does not set any result variables.</SPAN></P></head>

Binary file not shown.

After

Width:  |  Height:  |  Size: 1.3 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 1.4 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 1.4 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 1.4 KiB

View File

@ -0,0 +1,59 @@
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>($title$)</title>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<link href="winchm_template_style.css" rel="stylesheet" type="text/css">
<script type="text/javascript">
function d_onresize(){
if (window.navigator.userAgent.indexOf("MSIE")>=1){
document.getElementById('winchm_template_content').style.pixelWidth = document.body.offsetWidth - 3;
document.getElementById('winchm_template_content').style.pixelHeight = document.body.offsetHeight - document.getElementById('winchm_template_top').offsetHeight - 4;
}
document.getElementById('winchm_template_content').style.top = document.getElementById('winchm_template_top').offsetHeight + 'px';
}
function d_onbeforeprint(){
document.getElementById('winchm_template_content').style.width = 'auto';
document.getElementById('winchm_template_content').style.height = 'auto';
}
function d_onafterprint(){
d_onresize();
}
window.onload = d_onresize;
window.onresize = d_onresize;
window.onbeforeprint = d_onbeforeprint;
window.onafterprint = d_onafterprint;
</script>
</head>
<body>
<div id="winchm_template_top">
<table width="100%" height="50" bgcolor="#c4d0f4" style="WIDTH: 100%" cellSpacing=0 cellPadding=3 border=0>
<tr>
<td>
<div id="winchm_template_navigation">
<em><FONT face=Courier>New&nbsp;Help &gt;
($navigation$)</FONT> </em> </div>
<div id="winchm_template_title"><FONT
face=Courier>($title$)</FONT>
</div>
</td>
<td align="right" style="WIDTH: 90px">
<IMG alt=Previous src="btn_prev_n.gif"><IMG alt=Next src="btn_next_n.gif">
</td>
</tr>
</table>
</div>
<div id="winchm_template_content">
<p><FONT face=Courier>($content$)</FONT></p>
<hr>
<font face="Courier" color="#808080" size="1"> No
Copyright</font> </div>
</body>
</html>

View File

@ -0,0 +1,69 @@
div { margin: 0; padding: 0; outline: 0; }
html,body {
padding: 0px;
margin: 0px;
overflow: hidden;
height: 100%;
}
#winchm_template_top {
padding: 0px;
margin: 0px;
border-bottom: 1px solid #B7B7B7;
}
#winchm_template_navigation{
PADDING-RIGHT: 2px;
PADDING-LEFT: 2px;
FONT-SIZE: 11px;
PADDING-BOTTOM: 2px;
MARGIN: 0px;
PADDING-TOP: 2px;
FONT-FAMILY: Courier New;
}
#winchm_template_title{
PADDING-RIGHT: 2px;
PADDING-LEFT: 2px;
FONT-WEIGHT: bold;
FONT-SIZE: 14px;
PADDING-BOTTOM: 2px;
MARGIN: 0px;
PADDING-TOP: 2px;
FONT-FAMILY: Courier New;
}
@media screen
{
#winchm_template_content{
margin: 0px;
padding: 15px;
position: absolute;
top : 51px;
right: 0px;
bottom: 0px;
left: 0px;
overflow: auto;
}
}
@media print
{
#winchm_template_content{
position: static;
margin: 0px;
padding: 5px;
width: auto;
height: auto;
overflow: auto;
}
#winchm_template_prev{
visibility:hidden;
}
#winchm_template_next{
visibility:hidden;
}
}

19
help/template_courier.htm Normal file
View File

@ -0,0 +1,19 @@
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>New Item2</title>
<meta name="GENERATOR" content="WinCHM">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<style>
html,body {
/* Default Font */
font-family: Courier New;
font-size: 11pt;
}
</style>
</head>
<body>
<P>&nbsp;</P></body>
</html>

27
help/var_varnew.htm Normal file
View File

@ -0,0 +1,27 @@
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>var/varnew</title>
<meta name="GENERATOR" content="WinCHM">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<style>
html,body {
/* Default Font */
font-family: Courier New;
font-size: 11pt;
}
</style>
</head>
<body>
<P class=rvps3><SPAN class=rvts10><STRONG>var[,varnew]</STRONG><BR></SPAN><SPAN class=rvts9>Declare a new variable.</SPAN><SPAN class=rvts9><BR></SPAN></P>
<P class=rvps3><SPAN class=rvts11><U>arguments<BR></U></SPAN><SPAN class=rvts9>&nbsp; arg1:</SPAN><SPAN class=rvts9> </SPAN><SPAN
class=rvts9></SPAN><SPAN class=rvts9>Variable name (will be prefixed with '$' if not
done).
</SPAN></P>
<P class=rvps3><SPAN class=rvts9>
</SPAN><SPAN class=rvts9>[arg2]:</SPAN><SPAN class=rvts9> </SPAN><SPAN
class=rvts9>Initial variable value (see console input for details).</SPAN></P>
<P class=rvps3><SPAN class=rvts11><U>result<BR></U></SPAN><SPAN class=rvts9>This command does not set any result
variables.</SPAN></P></body>

23
help/vardel.htm Normal file
View File

@ -0,0 +1,23 @@
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>vardel</title>
<meta name="GENERATOR" content="WinCHM">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<style>
html,body {
/* Default Font */
font-family: Courier New;
font-size: 11pt;
}
</style>
</head>
<body>
<P class=rvps3><SPAN class=rvts10><STRONG>vardel</STRONG><BR></SPAN><SPAN class=rvts9>Delete a user-defined variable.</SPAN><SPAN class=rvts9><BR></SPAN></P>
<P class=rvps3><SPAN class=rvts11><U>arguments</U><BR></SPAN><SPAN class=rvts9>&nbsp; arg1:</SPAN><SPAN class=rvts9> </SPAN><SPAN
class=rvts9></SPAN><SPAN class=rvts9>Name of the variable to delete ($ will be
prepended when not present).</SPAN><SPAN class=rvts9><BR></SPAN></P>
<P class=rvps3><SPAN class=rvts11><U>result<BR></U></SPAN><SPAN class=rvts9>This command does not set any result
variables.</SPAN></P></body>

23
help/varlist.htm Normal file
View File

@ -0,0 +1,23 @@
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>varlist</title>
<meta name="GENERATOR" content="WinCHM">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<style>
html,body {
/* Default Font */
font-family: Courier New;
font-size: 11pt;
}
</style>
</head>