PROJECT: updated help
This commit is contained in:
parent
101ba59d37
commit
9e688bb347
|
|
@ -0,0 +1,29 @@
|
|||
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
|
||||
<html>
|
||||
<head>
|
||||
<title>DebugContinue/con</title>
|
||||
<meta name="GENERATOR" content="WinCHM">
|
||||
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
|
||||
<style>
|
||||
html,body {
|
||||
/* Default Font */
|
||||
font-family: Courier New;
|
||||
font-size: 11pt;
|
||||
}
|
||||
</style>
|
||||
|
||||
</head>
|
||||
|
||||
<body>
|
||||
<P><STRONG>DebugContinue[,con]</STRONG><BR>Set debugger
|
||||
continue status.</P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>arguments</U> <BR>[arg1]: When set,
|
||||
the exception will be handled by the program. Otherwise the exception will be
|
||||
swallowed.</SPAN> </P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>result
|
||||
<BR></U></SPAN>
|
||||
<SPAN class=rvts9>
|
||||
This command does not set any result
|
||||
variables.
|
||||
|
||||
</SPAN></P></body>
|
||||
|
|
@ -75,11 +75,13 @@ the "x" prefix. Decimal numbers can be used by prefixing the number with a "."
|
|||
See "Calculations" for more
|
||||
information.</SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts9><U>DLL exports</U>: Type 'GetProcAddress' and it will
|
||||
automatically be resolved to the actual address of the function. To explicitly define from
|
||||
which module to load the
|
||||
automatically be resolved to the actual address of the function. To explicitly
|
||||
define from which module to load the API, use: "kernel32.dll:GetProcAddress" or "kernel32:GetProcAddress". In a similar way
|
||||
you can resolve ordinals, try "ntdll:1". Another macro allows you to get the loaded
|
||||
base of a module. Try
|
||||
|
||||
API, use: "kernel32.dll:GetProcAddress" or
|
||||
"kernel32:GetProcAddress"</SPAN></P>
|
||||
"ntdll:0", "ntdll:base", "ntdll:imagebase" or
|
||||
"ntdll:header".</SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts9><U>labels/symbols</U>
|
||||
: user-defined labels
|
||||
|
||||
|
|
@ -90,4 +92,4 @@ expressions.</SPAN></P>
|
|||
Input
|
||||
|
||||
for arguments can always be done in any of the above forms, except if stated
|
||||
otherwise.</SPAN></P></body></HTML>
|
||||
otherwise.</SPAN></P></body>
|
||||
|
|
@ -0,0 +1,22 @@
|
|||
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
|
||||
<html>
|
||||
<head>
|
||||
<title>LibrarianRemoveBreakPoint/bcdll</title>
|
||||
<meta name="GENERATOR" content="WinCHM">
|
||||
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
|
||||
<style>
|
||||
html,body {
|
||||
/* Default Font */
|
||||
font-family: Courier New;
|
||||
font-size: 11pt;
|
||||
}
|
||||
</style>
|
||||
|
||||
</head>
|
||||
|
||||
<body>
|
||||
<P><STRONG>LibrarianRemoveBreakPoint[,bcdll]</STRONG><BR>Remove
|
||||
a DLL breakpoint.</P>
|
||||
<P><U>arguments</U><BR> arg1: DLL Name to remove the breakpoint from.</P>
|
||||
<P><U>result<BR></U>This command does not set any result variables.</P>
|
||||
<P> </P></body>
|
||||
|
|
@ -0,0 +1,27 @@
|
|||
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
|
||||
<html>
|
||||
<head>
|
||||
<title>LibrarianSetBreakPoint/bpdll</title>
|
||||
<meta name="GENERATOR" content="WinCHM">
|
||||
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
|
||||
<style>
|
||||
html,body {
|
||||
/* Default Font */
|
||||
font-family: Courier New;
|
||||
font-size: 11pt;
|
||||
}
|
||||
</style>
|
||||
|
||||
</head>
|
||||
|
||||
<body>
|
||||
<P><STRONG>LibrarianSetBreakPoint[,bpdll]</STRONG><BR>Set a singleshoot
|
||||
breakpoint on DLL load/unload.</P>
|
||||
<P><U>arguments</U><BR> arg1: DLL Name to break
|
||||
on.</P>
|
||||
<P>[arg2]: 'l' means on load, 'u' means on unload. When not
|
||||
specified, x64_dbg will break on both load and unload.</P>
|
||||
<P>[arg3]: When specified, the breakpoint will not be singleshoot. When not specified the
|
||||
breakpoint will be removed after it has been hit.</P>
|
||||
<P><U>result<BR></U>This command does not set any result
|
||||
variables.</P></body>
|
||||
|
|
@ -0,0 +1,27 @@
|
|||
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
|
||||
<html>
|
||||
<head>
|
||||
<title>asm</title>
|
||||
<meta name="GENERATOR" content="WinCHM">
|
||||
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
|
||||
<style>
|
||||
html,body {
|
||||
/* Default Font */
|
||||
font-family: Courier New;
|
||||
font-size: 11pt;
|
||||
}
|
||||
</style>
|
||||
|
||||
</head>
|
||||
|
||||
<body>
|
||||
<P><STRONG>asm<BR></STRONG>Assemble an instruction.</P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>arguments</U> <BR></SPAN><SPAN
|
||||
class=rvts9> arg1: Address to place the assembled instruction at.</SPAN> </P>
|
||||
<P class=rvps3><SPAN
|
||||
class=rvts9> arg2: Instruction text.</SPAN> </P>
|
||||
<P class=rvps3><SPAN
|
||||
class=rvts9>[arg3]: When specified the remainder of the previous
|
||||
instruction will be filled with NOPs.</SPAN> </P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>result<BR></U></SPAN><SPAN class=rvts9><EM>$result</EM> will be set to the assembled instruction size. 0 on
|
||||
failure.</SPAN></P></body>
|
||||
|
|
@ -0,0 +1,21 @@
|
|||
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
|
||||
<html>
|
||||
<head>
|
||||
<title>bookmarklist</title>
|
||||
<meta name="GENERATOR" content="WinCHM">
|
||||
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
|
||||
<style>
|
||||
html,body {
|
||||
/* Default Font */
|
||||
font-family: Courier New;
|
||||
font-size: 11pt;
|
||||
}
|
||||
</style>
|
||||
|
||||
</head>
|
||||
|
||||
<body>
|
||||
<P><STRONG>bookmarklist<BR></STRONG>List user-defined bookmarks in reference view.</P>
|
||||
<P><U>arguments</U><BR>This command has no arguments.</P>
|
||||
<P><U>result<BR></U><EM>$result</EM> will be set to
|
||||
the number of user-defined bookmarks.</P></body>
|
||||
|
|
@ -0,0 +1,22 @@
|
|||
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
|
||||
<html>
|
||||
<head>
|
||||
<title>commentlist</title>
|
||||
<meta name="GENERATOR" content="WinCHM">
|
||||
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
|
||||
<style>
|
||||
html,body {
|
||||
/* Default Font */
|
||||
font-family: Courier New;
|
||||
font-size: 11pt;
|
||||
}
|
||||
</style>
|
||||
|
||||
</head>
|
||||
|
||||
<body>
|
||||
<P><STRONG>commentlist<BR></STRONG>List user-defined
|
||||
comments in reference view.</P>
|
||||
<P><U>arguments</U><BR>This command has no arguments.</P>
|
||||
<P><U>result<BR></U><EM>$result</EM> will be set to the
|
||||
number of user-defined comments.</P></body>
|
||||
|
|
@ -0,0 +1,23 @@
|
|||
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
|
||||
<html>
|
||||
<head>
|
||||
<title>functionlist</title>
|
||||
<meta name="GENERATOR" content="WinCHM">
|
||||
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
|
||||
<style>
|
||||
html,body {
|
||||
/* Default Font */
|
||||
font-family: Courier New;
|
||||
font-size: 11pt;
|
||||
}
|
||||
</style>
|
||||
|
||||
</head>
|
||||
|
||||
<body>
|
||||
<P><STRONG>functionlist<BR></STRONG>List user-defined functions in reference view.</P>
|
||||
<P><U>arguments</U><BR>This command has no arguments.</P>
|
||||
<P><U>result<BR></U><EM>$result</EM> will be set to
|
||||
the number of user-defined functions.</P>
|
||||
<P> </P></body>
|
||||
</html>
|
||||
|
|
@ -0,0 +1,33 @@
|
|||
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
|
||||
<html>
|
||||
<head>
|
||||
<title>labellist</title>
|
||||
<meta name="GENERATOR" content="WinCHM">
|
||||
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
|
||||
<style>
|
||||
html,body {
|
||||
/* Default Font */
|
||||
font-family: Courier New;
|
||||
font-size: 11pt;
|
||||
}
|
||||
</style>
|
||||
|
||||
</head>
|
||||
|
||||
<body>
|
||||
<P><STRONG>labellist<BR></STRONG>List user-defined labels in reference view.</P>
|
||||
<P>
|
||||
<U>
|
||||
arguments
|
||||
</U>
|
||||
<BR>
|
||||
This command has no arguments.</P>
|
||||
<P>
|
||||
<U >
|
||||
result
|
||||
<BR ></U>
|
||||
|
||||
<EM>
|
||||
$result</EM> will be set to
|
||||
the number of user-defined labels.</P>
|
||||
<P> </P></body>
|
||||
|
|
@ -0,0 +1,31 @@
|
|||
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
|
||||
<html>
|
||||
<head>
|
||||
<title>modcallfind</title>
|
||||
<meta name="GENERATOR" content="WinCHM">
|
||||
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
|
||||
<style>
|
||||
html,body {
|
||||
/* Default Font */
|
||||
font-family: Courier New;
|
||||
font-size: 11pt;
|
||||
}
|
||||
</style>
|
||||
|
||||
</head>
|
||||
|
||||
<body>
|
||||
<P><STRONG>modcallfind<BR></STRONG>Find all inter-modular
|
||||
calls.</P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>arguments</U> <BR></SPAN><SPAN
|
||||
class=rvts9></SPAN><SPAN class=rvts9>[arg1]: Address of/inside a memory page to find
|
||||
inter-modular calls in. When not specified CIP will be used.</SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts9>[arg2]: The size of the data to search in.</SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts11>
|
||||
<U>
|
||||
result
|
||||
<BR>
|
||||
</U></SPAN>
|
||||
<SPAN
|
||||
class=rvts9>The $result variable is set to the number of
|
||||
inter-modular calls found.</SPAN></P></body>
|
||||
|
|
@ -0,0 +1,39 @@
|
|||
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
|
||||
<html>
|
||||
<head>
|
||||
<title>refadd</title>
|
||||
<meta name="GENERATOR" content="WinCHM">
|
||||
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
|
||||
<style>
|
||||
html,body {
|
||||
/* Default Font */
|
||||
font-family: Courier New;
|
||||
font-size: 11pt;
|
||||
}
|
||||
</style>
|
||||
|
||||
</head>
|
||||
|
||||
<body>
|
||||
<P><STRONG>refadd<BR></STRONG>Add an entry to the reference
|
||||
view. You <STRONG>need</STRONG> to call 'refinit' before using
|
||||
refadd.</P>
|
||||
<P class=rvps3>
|
||||
<SPAN class=rvts11>
|
||||
<U>
|
||||
arguments
|
||||
|
||||
</U>
|
||||
<BR> arg1: Address
|
||||
to put in the reference
|
||||
view.
|
||||
</SPAN></P>
|
||||
<P class=rvps3>
|
||||
<SPAN class=rvts11> arg2: Text to put after the address.
|
||||
</SPAN></P>
|
||||
<P class=rvps3 >
|
||||
|
||||
<SPAN class=rvts11>
|
||||
<U>result<BR>
|
||||
</U></SPAN><SPAN class=rvts9>This command does not set any result
|
||||
variables.</SPAN></P></body>
|
||||
|
|
@ -0,0 +1,34 @@
|
|||
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
|
||||
<html>
|
||||
<head>
|
||||
<title>refinit</title>
|
||||
<meta name="GENERATOR" content="WinCHM">
|
||||
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
|
||||
<style>
|
||||
html,body {
|
||||
/* Default Font */
|
||||
font-family: Courier New;
|
||||
font-size: 11pt;
|
||||
}
|
||||
</style>
|
||||
|
||||
</head>
|
||||
|
||||
<body>
|
||||
<P><STRONG>refinit<BR></STRONG>Initialize reference view
|
||||
for command usage.</P>
|
||||
<P class=rvps3>
|
||||
<SPAN class=rvts11>
|
||||
<U>arguments</U>
|
||||
<BR >
|
||||
|
||||
</SPAN>
|
||||
<SPAN class=rvts9 >
|
||||
This command has no arguments.</SPAN>
|
||||
</P>
|
||||
|
||||
<P class=rvps3>
|
||||
<SPAN class=rvts11><U>result<BR></U>
|
||||
</SPAN><SPAN
|
||||
class=rvts9>This command does not set any result
|
||||
variables.</SPAN></P></body>
|
||||
744
help/x64_dbg.wcp
744
help/x64_dbg.wcp
File diff suppressed because it is too large
Load Diff
Loading…
Reference in New Issue