Merge branch 'master' into doxygen
Conflicts: x64_dbg_dbg/_dbgfunctions.cpp x64_dbg_dbg/addrinfo.cpp x64_dbg_dbg/debugger_commands.cpp x64_dbg_dbg/value.cpp x64_dbg_launcher/x64_dbg_launcher.cpp
This commit is contained in:
commit
fc47caf0e0
|
|
@ -30,7 +30,7 @@ use one.</P>
|
|||
<P><U>2:not</U>: '~' The not operator can be used before a
|
||||
number of a variable, like in C.</P>
|
||||
<P><U>3:muliplication/devision</U>: '*' = regular
|
||||
multiplication (signed/unsigned), '$' = get the higher part of the
|
||||
multiplication (signed/unsigned), '`' = get the higher part of the
|
||||
multiplication, '/' = regular devision (signed/unsigned, devide by zero=error)
|
||||
and '%' = get the modulo (remainder) of the devision.</P>
|
||||
<P><U>4:addition/substraction</U>: '+' and '-'</P>
|
||||
|
|
|
|||
|
|
@ -15,21 +15,13 @@ html,body {
|
|||
</head>
|
||||
|
||||
<body>
|
||||
<P class=rvps3><SPAN class=rvts10><STRONG>
|
||||
command[,alias1,alias2]</STRONG><BR></SPAN><SPAN class=rvts9>Command description
|
||||
here.</SPAN><SPAN class=rvts9><BR></SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>arguments</U><BR></SPAN><SPAN
|
||||
class=rvts9> arg1: </SPAN><SPAN class=rvts9>Argument description.</SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts9></SPAN><SPAN class=rvts9>[arg2]: </SPAN><SPAN
|
||||
class=rvts9></SPAN><SPAN class=rvts9>Optional argument.</SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts9></SPAN><SPAN
|
||||
class=rvts9>[arg3]: </SPAN><SPAN class=rvts9></SPAN><SPAN class=rvts9>Another optional argument (can only be given when the
|
||||
previous argument is also
|
||||
given).</SPAN><SPAN class=rvts9><BR></P></SPAN>
|
||||
<P class=rvps3><SPAN class=rvts11><U>result</U><BR></SPAN><SPAN
|
||||
class=rvts9>Description of the command result.</SPAN><SPAN
|
||||
class=rvts9><BR></SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts12><U><STRONG>REMARK</STRONG></U></SPAN><SPAN
|
||||
class=rvts9>: Commands cannot contain any of the following characters: "," (comma), " " (space) and
|
||||
"\" (backslash). These characters need to be prefixed using a backslash
|
||||
('\,').</SPAN></P></body></HTML>
|
||||
<P class=rvps3><STRONG>
|
||||
command[,alias1,alias2]</STRONG><BR>Command description here.</P>
|
||||
<P class=rvps3><U>arguments</U><BR> arg1: Argument description.</P>
|
||||
<P class=rvps3>[arg2]: Optional argument.</P>
|
||||
<P class=rvps3>[arg3]: Another optional argument (can only
|
||||
be given when the previous argument is also given).</P>
|
||||
<P class=rvps3><U>result</U><BR>Description of the command result.</P>
|
||||
<P class=rvps3><U><STRONG>REMARK</STRONG></U>: Commands cannot contain any of the
|
||||
following characters: "," (comma), " " (space) and "\" (backslash). These
|
||||
characters need to be prefixed using a backslash ('\,').</P></body></HTML>
|
||||
|
|
@ -12,18 +12,14 @@ html,body {
|
|||
}
|
||||
</style>
|
||||
|
||||
</head>
|
||||
</head>
|
||||
|
||||
<body>
|
||||
<P><STRONG>DebugContinue[,con]</STRONG><BR>Set debugger
|
||||
continue status.</P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>arguments</U> <BR>[arg1]: When set,
|
||||
the exception will be handled by the program. Otherwise the exception will be
|
||||
swallowed.</SPAN> </P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>result
|
||||
<BR></U></SPAN>
|
||||
<SPAN class=rvts9>
|
||||
This command does not set any result
|
||||
variables.
|
||||
|
||||
</SPAN></P></body>
|
||||
<body>
|
||||
<P><STRONG>DebugContinue[,con]</STRONG><BR>Set debugger
|
||||
continue status.</P>
|
||||
<P class=rvps3><U>arguments</U> <BR>[arg1]: When set, the exception will be handled by the
|
||||
program. Otherwise the exception will be swallowed. </P>
|
||||
<P class=rvps3><U>result
|
||||
<BR></U>This command does not set any result variables.</P></body>
|
||||
</html>
|
||||
|
|
|
|||
|
|
@ -20,4 +20,5 @@ breakpoint set using the SetBPX command.</P>
|
|||
<P><U>arguments</U><BR>[arg1]: Name or address of the breakpoint to delete. If this argument is not specified, all breakpoints will be
|
||||
deleted.</P>
|
||||
<P><U>result<BR></U>This command does not set any result variables.</P>
|
||||
<P> </P></head>
|
||||
</body>
|
||||
</html>
|
||||
|
|
@ -21,3 +21,4 @@ SetHardwareBreakpoint command.</P>
|
|||
this argument is not specified, all hardware breakpoints will be deleted.</P>
|
||||
<P><U>result<BR></U>This command does not set any result
|
||||
variables.</P></body>
|
||||
</html>
|
||||
|
|
@ -37,3 +37,4 @@ result
|
|||
<BR>
|
||||
</U>This command does not set any result
|
||||
variables.</P></body>
|
||||
</html>
|
||||
|
|
@ -20,3 +20,4 @@ process.</P>
|
|||
<P><U>arguments</U><BR>This command has no arguments.</P>
|
||||
<P><U>result</U> <BR>This command does not set any result
|
||||
variables.</P></body>
|
||||
</html>
|
||||
|
|
|
|||
|
|
@ -19,5 +19,5 @@ html,body {
|
|||
<P><U>arguments</U><BR>[arg1]: Address of the hardware breakpoint to disable. If
|
||||
this argument is not specified, all hardware breakpoints will be disabled.</P>
|
||||
<P><U>result<BR></U>This command does not set any result variables.</P>
|
||||
<P> </P></body>
|
||||
</body>
|
||||
</html>
|
||||
|
|
@ -22,4 +22,5 @@ command.</P>
|
|||
argument is not specified, all breakpoints
|
||||
will be enabled.</P>
|
||||
<P><U>result<BR></U>This command does not set any result
|
||||
variables.</P></head>
|
||||
variables.</P></body>
|
||||
</html>
|
||||
|
|
@ -27,5 +27,5 @@ argument is not specified, all memory breakpoints will be enabled.</P>
|
|||
<U >
|
||||
result
|
||||
<BR ></U>This command does not set any result variables.</P>
|
||||
<P> </P></body>
|
||||
</body>
|
||||
</html>
|
||||
|
|
@ -23,3 +23,4 @@ debuggee to a specified byte.</P>
|
|||
page is used.</P>
|
||||
<P><U>result</U><BR>This command does not set any result
|
||||
variables.</P></body>
|
||||
</html>
|
||||
|
|
@ -17,5 +17,5 @@ html,body {
|
|||
<body>
|
||||
<P><STRONG>General Purpose<BR></STRONG>This section contains various commands that are
|
||||
used for calculations etc.</P>
|
||||
<P> </P></body>
|
||||
</body>
|
||||
</html>
|
||||
|
|
@ -17,15 +17,12 @@ html,body {
|
|||
<body>
|
||||
<P><STRONG>HideDebugger[,dbh,hide]<BR></STRONG> Hide the debugger from (very) simple detection
|
||||
methods.</P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>arguments</U><BR></SPAN><SPAN class=rvts9>This command has no arguments.</SPAN></P>
|
||||
<P class=rvps3><U>arguments</U><BR>This command has no arguments.</P>
|
||||
<P class=rvps3>
|
||||
<SPAN class=rvts11>
|
||||
<U>
|
||||
result
|
||||
<BR>
|
||||
|
||||
</U>
|
||||
</SPAN>
|
||||
<SPAN class=rvts9 >
|
||||
This command does not set any result
|
||||
variables.</SPAN></P></body>
|
||||
</U>This command does not set any result
|
||||
variables.</P></body>
|
||||
</html>
|
||||
|
|
@ -36,6 +36,5 @@ called to retrieve a full path. Use quotation marks to include spaces in your pa
|
|||
<P><U>result<BR></U> This command will
|
||||
give control back to the user after the system breakpoint is reached. It will set
|
||||
<U>$pid</U> and <U>$hp/$hProcess</U> variables.
|
||||
|
||||
|
||||
</P></head>
|
||||
</P></body>
|
||||
</html>
|
||||
108
help/Input.htm
108
help/Input.htm
|
|
@ -15,36 +15,20 @@ html,body {
|
|||
</head>
|
||||
|
||||
<body>
|
||||
<P class=rvps3><SPAN class=rvts10><STRONG>Input</STRONG><BR></SPAN><SPAN
|
||||
class=rvts9>This program accepts various options of input:</SPAN><SPAN
|
||||
class=rvts9><BR></SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>commands</U></SPAN><SPAN class=rvts9>:
|
||||
Commands have the following format: "</SPAN><SPAN
|
||||
class=rvts10>command[space]arg1,[optional space]arg2,argN</SPAN><SPAN
|
||||
class=rvts9>".</SPAN><SPAN class=rvts9><BR></SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>variables</U></SPAN><SPAN class=rvts9>:
|
||||
<P class=rvps3><STRONG>Input</STRONG><BR>This program accepts
|
||||
various options of input:</P>
|
||||
<P class=rvps3><U>commands</U>:
|
||||
Commands have the following format: "command[space]arg1,[optional
|
||||
space]arg2,argN".</P>
|
||||
<P class=rvps3><U>variables</U>:
|
||||
Variables optionally start with a $ and can only store one DWORD (QWORD on
|
||||
x64).</SPAN><SPAN class=rvts9><BR></SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>debug registers</U></SPAN><SPAN
|
||||
class=rvts9>: All debug registers (all sizes) can be used as
|
||||
variables.</SPAN><SPAN class=rvts9><BR></SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>memory locations</U></SPAN><SPAN
|
||||
class=rvts9>: You can read from a memory location by using one of the
|
||||
x64).</P>
|
||||
<P class=rvps3><U> registers</U>: All
|
||||
registers (of all sizes) can be used as variables.</P>
|
||||
<P class=rvps3><U>memory locations</U>: You can read from a memory location by using one of the
|
||||
following expressions:<BR>[addr] - read a
|
||||
DWORD/QWORD, depending on the architecture.<BR>
|
||||
|
||||
|
||||
|
||||
|
||||
</SPAN><SPAN
|
||||
class=rvts9>@addr - same as
|
||||
above.<BR><EM>n</EM>:[addr] - read <EM>n</EM>
|
||||
|
||||
|
||||
|
||||
|
||||
bytes.</SPAN><SPAN
|
||||
class=rvts9><BR>
|
||||
DWORD/QWORD, depending on the architecture.<BR>@addr - same as
|
||||
above.<BR><EM>n</EM>:[addr] - read <EM>n</EM> bytes.<BR>
|
||||
@<EM>n</EM>:addr - same as
|
||||
above.<BR><STRONG>REMARKS</STRONG>:<BR>- <EM>n</EM> is the amount of bytes to
|
||||
read, this can be anything smaller than 4 on x32 and smaller than 8 on x64 when
|
||||
|
|
@ -55,42 +39,32 @@ brackets:<BR>
|
|||
|
||||
|
||||
|
||||
@(addr+1), @addr+1 will read: [addr]+1.</SPAN></P>
|
||||
<P class=rvps3><SPAN
|
||||
class=rvts9>
|
||||
|
||||
|
||||
|
||||
|
||||
</SPAN><SPAN
|
||||
class=rvts9><U>flags</U> : Debug flags
|
||||
(interpreted as integer) can be used as input. Flags are prefixed with a '!' following the flag name.
|
||||
Valid flags are: !cf, !pf, !af, !zf, !sf, !tf, !if, !df, !of, !rf, !vm, !ac, !vif, !vip and !id.</SPAN><SPAN class=rvts9></P></SPAN>
|
||||
<P class=rvps3><SPAN class=rvts11><U>numbers</U></SPAN><SPAN class=rvts9>:
|
||||
All numbers are interpreted as
|
||||
hex by default. If you want to be sure, you can use the "x" prefix or
|
||||
the "0x" prefix. Decimal numbers can be used by prefixing the number with a "."
|
||||
(.123=7B).</SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts9><U>basic calculations</U>:
|
||||
See "Calculations" for more
|
||||
information.</SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts9><U>DLL exports</U>: Type 'GetProcAddress' and it will
|
||||
automatically be resolved to the actual address of the function. To explicitly
|
||||
define from which module to load the API, use: "kernel32.dll:GetProcAddress" or "kernel32:GetProcAddress". In a similar way
|
||||
you can resolve ordinals, try "ntdll:1". Another macro allows you to get the loaded
|
||||
base of a module. Try
|
||||
|
||||
"ntdll:0", "ntdll:base", "ntdll:imagebase" or
|
||||
"ntdll:header".</SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts9><U>labels/symbols</U>
|
||||
: user-defined labels
|
||||
|
||||
and symbols are a valid
|
||||
expressions.</SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts9><STRONG>Input for arguments can always be done in any of
|
||||
the above forms, except if stated otherwise.</STRONG>
|
||||
|
||||
|
||||
|
||||
|
||||
</SPAN></P></BODY></HTML>
|
||||
@(addr+1), @addr+1 will read: [addr]+1.</P>
|
||||
<P class=rvps3><U>flags</U>: Debug
|
||||
flags (interpreted as integer) can be used as input. Flags are prefixed with a
|
||||
'!' following the flag name. Valid flags are: !cf, !pf, !af, !zf, !sf, !tf, !if,
|
||||
!df, !of, !rf, !vm, !ac, !vif, !vip and !id.</P>
|
||||
<P class=rvps3><U>numbers</U>: All
|
||||
numbers are interpreted as hex by default. If you want to be sure, you can use
|
||||
the "x" prefix or the "0x" prefix. Decimal numbers can be used by prefixing the
|
||||
number with a "." (.123=7B).</P>
|
||||
<P class=rvps3><U>basic calculations</U>: See "Calculations" for more information.</P>
|
||||
<P class=rvps3><U>DLL exports</U>: Type
|
||||
'GetProcAddress' and it will automatically be resolved to the actual address of
|
||||
the function. To explicitly define from which module
|
||||
to load the API, use: "[module].dll:[api]" or "[module]:[api]". In a similar
|
||||
way you can resolve ordinals, try "[module]:[ordinal]". Another macro allows you to get the
|
||||
loaded base of a module. Try "[module]:0",
|
||||
"[module]:base", "[module]:imagebase" or "[module]:header". When "[module]" is an empty string (":0" for example), the
|
||||
module that is currently selected in the CPU will be
|
||||
used.</P>
|
||||
<P class=rvps3><U>RVA/File Offset</U>:
|
||||
If you want to access a module RVA you can either write "[module]:0+[rva]" or
|
||||
you can write "[module]:$[rva]". If you want
|
||||
to convert a file offset to a VA you can use "[module]:#[offset]". When "[module]" is
|
||||
an empty string (":0" for example), the module that is currently selected in the CPU will
|
||||
be used.</P>
|
||||
<P class=rvps3><U>labels/symbols</U>:
|
||||
user-defined labels and symbols are a valid expressions.</P>
|
||||
<P class=rvps3><STRONG>Input for arguments can always be done in any of
|
||||
the above forms, except if stated otherwise.</STRONG></P></body></HTML>
|
||||
|
|
@ -21,12 +21,13 @@ in active development.</P>
|
|||
GUI<BR>
|
||||
- Bridge</P>
|
||||
<P>DBG is the debugging part of the debugger. It handles
|
||||
debugging (using<BR> TitanEngine) and will provide data
|
||||
debugging (using TitanEngine) and will provide data
|
||||
for the GUI.</P>
|
||||
<P>GUI is the graphical part of the debugger. It is built
|
||||
on top of Qt and it<BR> provides
|
||||
<P>GUI is the graphical part of the debugger. It is built on
|
||||
top of Qt and it provides
|
||||
the user interaction.</P>
|
||||
<P>Bridge is the communication library for the DBG and GUI
|
||||
part (and maybe in<BR>the future more parts). The bridge can be used to work on
|
||||
new features,<BR> without having to update the code of
|
||||
the other parts.</P></head>
|
||||
part (and maybe in the future more parts). The bridge can be used to work on new
|
||||
features, without having to update the code of
|
||||
the other parts.</P></body>
|
||||
</html>
|
||||
|
|
@ -42,7 +42,7 @@ other) command(s):</P>
|
|||
<LI>
|
||||
<DIV>branch if smaller/equal -
|
||||
<U>jae/ifae(q)/jge/ifge(q)</U></DIV></LI></UL>
|
||||
<P class=rvps3><SPAN class=rvts11><U>arguments </U><BR></SPAN><SPAN
|
||||
class=rvts9> arg1: The label to jump to.</SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>result <BR></U></SPAN><SPAN class=rvts9>This command does not set any result variables.</SPAN>
|
||||
</P></body>
|
||||
<P class=rvps3><U>arguments </U><BR> arg1: The label to jump to.</P>
|
||||
<P class=rvps3><U>result <BR></U>This command does not set any result variables.
|
||||
</P></body>
|
||||
</html>
|
||||
|
|
@ -19,4 +19,5 @@ html,body {
|
|||
a DLL breakpoint.</P>
|
||||
<P><U>arguments</U><BR> arg1: DLL Name to remove the breakpoint from.</P>
|
||||
<P><U>result<BR></U>This command does not set any result variables.</P>
|
||||
<P> </P></body>
|
||||
</body>
|
||||
</html>
|
||||
|
|
|
|||
|
|
@ -25,3 +25,4 @@ specified, x64_dbg will break on both load and unload.</P>
|
|||
breakpoint will be removed after it has been hit.</P>
|
||||
<P><U>result<BR></U>This command does not set any result
|
||||
variables.</P></body>
|
||||
</html>
|
||||
|
|
|
|||
|
|
@ -30,4 +30,5 @@ PLUG_SDKVERSION define for this<BR> [OUT]
|
|||
useful for crash reports<BR> [OUT]
|
||||
<STRONG>char</STRONG> pluginName[256]; //plugin name, also
|
||||
useful for crash reports<BR>
|
||||
};</P></body>
|
||||
};</P></body>
|
||||
</html>
|
||||
|
|
@ -25,4 +25,5 @@ the plugin.</EM>
|
|||
handle<BR> [IN]
|
||||
<STRONG>int</STRONG> hMenu; //plugin menu
|
||||
handle<BR>
|
||||
};</P></head>
|
||||
};</P></body>
|
||||
</html>
|
||||
|
|
|
|||
|
|
@ -19,3 +19,4 @@ html,body {
|
|||
only used or available in
|
||||
a scripting context. Commands that also exist in a non-scripting context have
|
||||
priority.</P></body>
|
||||
</html>
|
||||
|
|
@ -17,4 +17,5 @@ html,body {
|
|||
<body>
|
||||
<P><STRONG>Scripting</STRONG><BR>This sections provides an overview of automating tasks with
|
||||
x64_dbg using scripts. See Commands for a description of all possible script commands. See Introduction for an introduction to
|
||||
expressions.</P></body>
|
||||
expressions.</P></body>
|
||||
</html>
|
||||
|
|
@ -20,4 +20,5 @@ html,body {
|
|||
"long" (CD03) or "ud2" (0F0B). Type default type affects
|
||||
both NORMAL and SINGLESHOT breakpoints.</P>
|
||||
<P><U>result<BR></U>This command does not set any result
|
||||
variables.</P></body>
|
||||
variables.</P></body>
|
||||
</html>
|
||||
|
|
@ -17,18 +17,15 @@ html,body {
|
|||
<body>
|
||||
<P><STRONG>SetHardwareBreakpoint[,bph,bphws]<BR></STRONG>Set a
|
||||
hardware breakpoint (using debug registers).</P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>arguments</U> <BR></SPAN><SPAN
|
||||
class=rvts9>
|
||||
arg1: Address of the hardware breakpoint.</SPAN> </P>
|
||||
<P class=rvps3><SPAN class=rvts9>[arg2]: Hardware breakpoint type. Can be either 'r'
|
||||
(readwrite), 'w' (write) or 'x' (execute). When not specified, 'x' is
|
||||
assumed.</SPAN> </P>
|
||||
<P class=rvps3><SPAN class=rvts9>
|
||||
[arg3]: Hardware breakpoint
|
||||
size.</SPAN> Can be
|
||||
<P class=rvps3><U>arguments</U> <BR> arg1: Address of the hardware breakpoint. </P>
|
||||
<P class=rvps3>[arg2]: Hardware breakpoint type. Can be
|
||||
either 'r' (readwrite), 'w' (write) or 'x' (execute). When not specified, 'x' is
|
||||
assumed. </P>
|
||||
<P class=rvps3>[arg3]: Hardware breakpoint
|
||||
size. Can be
|
||||
either '1', '2', '4' or '8' (x64 only). Per default, '1' is assumed. The address
|
||||
you're putting the hardware breakpoint on must be aligned to the specified
|
||||
size. </P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>result <BR></U></SPAN><SPAN
|
||||
class=rvts9>This command does not set any result
|
||||
variables.</SPAN> </P></body>
|
||||
<P class=rvps3><U>result <BR></U>This command does not set any result variables.
|
||||
</P></body>
|
||||
</html>
|
||||
|
|
@ -19,33 +19,25 @@ html,body {
|
|||
breakpoint (GUARD_PAGE) on the whole memory region the provided address is
|
||||
in.</P>
|
||||
<P class=rvps3>
|
||||
<SPAN class=rvts11>
|
||||
<U>arguments</U>
|
||||
<BR >
|
||||
|
||||
</SPAN>
|
||||
|
||||
<SPAN
|
||||
class=rvts9> arg1: Address of or
|
||||
inside a memory region that will be watched.</SPAN>
|
||||
<BR > arg1: Address of or inside a memory region
|
||||
that will be watched.
|
||||
</P>
|
||||
<P class=rvps3>
|
||||
|
||||
<SPAN
|
||||
class=rvts9> [arg2]:
|
||||
1/0 restore the memory breakpoint once it's hit?</SPAN> When this value is not equal to one, it's assumed to be arg3. This
|
||||
[arg2]: 1/0 restore the memory breakpoint
|
||||
once it's hit? When this value is not equal to one, it's assumed to be arg3. This
|
||||
means "<EM>bpm eax,r</EM>" would be the same command as: "<EM>bpm
|
||||
eax,0,r</EM>".
|
||||
</P>
|
||||
<P class=rvps3>
|
||||
|
||||
<SPAN
|
||||
class=rvts9>[arg3]: Breakpoint type, it
|
||||
can be 'r' (execute+read), 'w' (write) or 'x' (execute). Per default,
|
||||
it's a combination of execute, read and write.</SPAN>
|
||||
[arg3]: Breakpoint type, it can be 'r'
|
||||
(execute+read), 'w' (write) or 'x' (execute). Per default, it's a
|
||||
combination of execute, read and write.
|
||||
</P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>result
|
||||
<BR></U></SPAN><SPAN class=rvts9>This command does not set any result variables.</SPAN>
|
||||
<P class=rvps3><U>result
|
||||
<BR></U>This command does not set any result variables.
|
||||
|
||||
</P>
|
||||
<P> </P></BODY></HTML>
|
||||
</body></HTML>
|
||||
|
|
@ -17,9 +17,8 @@ html,body {
|
|||
<body>
|
||||
<P><STRONG>SingleStep[,sstep,sst]<BR></STRONG>Step a
|
||||
specified number of instructions using the Trap-Flag.</P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>arguments</U><BR></SPAN><SPAN
|
||||
class=rvts9> </SPAN><SPAN
|
||||
class=rvts9>[arg1]: The number of instructions to executre (this can be
|
||||
any valid expression). When not specified, a StepInto is performed.<BR></SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>result<BR></U></SPAN><SPAN class=rvts9>This command does not set any result
|
||||
variables.</SPAN></P></body>
|
||||
<P class=rvps3><U>arguments</U><BR>[arg1]: The number of instructions to executre (this can be
|
||||
any valid expression). When not specified, a StepInto is performed.</P>
|
||||
<P class=rvps3><U>result<BR></U>This command does not set any result
|
||||
variables.</P></body>
|
||||
</html>
|
||||
|
|
@ -66,7 +66,7 @@ ahmadmansoor </P>
|
|||
<LI>
|
||||
<DIV><A href="http://mrexodia.cf" target=_blank>Mr.
|
||||
eXoDia</A>
|
||||
</DIV>
|
||||
</DIV>
|
||||
<LI>
|
||||
<DIV>
|
||||
Sigma </DIV>
|
||||
|
|
@ -77,4 +77,4 @@ Sigma </DIV>
|
|||
<LI>
|
||||
<DIV><A href="http://www.fr33project.org"
|
||||
target=_blank>Dreg</A>
|
||||
</DIV></LI></UL></body></HTML>
|
||||
</DIV></LI></UL></body></HTML>
|
||||
|
|
|
|||
|
|
@ -17,8 +17,7 @@ html,body {
|
|||
<body>
|
||||
<P><STRONG>StartScylla[,scylla,imprec]<BR></STRONG>Start the Scylla plugin auto-selecting the
|
||||
currently debugged DLL/EXE.</P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>arguments </U><BR></SPAN><SPAN
|
||||
class=rvts9>This command has no arguments.</SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>result<BR></U></SPAN><SPAN class=rvts9>This command does not set any result
|
||||
variables.</SPAN></P></body>
|
||||
<P class=rvps3><U>arguments </U><BR>This command has no arguments.</P>
|
||||
<P class=rvps3><U>result<BR></U>This command does not set any result
|
||||
variables.</P></body>
|
||||
</html>
|
||||
|
|
@ -17,8 +17,7 @@ html,body {
|
|||
<body>
|
||||
<P><STRONG>StepInto[,sti]<BR></STRONG>Single Step (using
|
||||
Trap-Flag).</P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>arguments</U><BR></SPAN><SPAN
|
||||
class=rvts9>This command has no arguments.</SPAN><SPAN
|
||||
class=rvts9><BR></SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>result<BR></U></SPAN><SPAN class=rvts9>This command does not set any result
|
||||
variables.</SPAN></P></body>
|
||||
<P class=rvps3><U>arguments</U><BR>This command has no arguments.</P>
|
||||
<P class=rvps3><U>result<BR></U>This command does not set any result
|
||||
variables.</P></body>
|
||||
</html>
|
||||
|
|
@ -17,9 +17,8 @@ html,body {
|
|||
<body>
|
||||
<P><STRONG>StepOver[,step,sto,st]<BR></STRONG>Step over
|
||||
calls. When the instruction at CIP isn't a call, a StepInto is performed.</P>
|
||||
<P><SPAN class=rvts11><U>arguments</U><BR></SPAN><SPAN
|
||||
class=rvts9>This command has no arguments.</SPAN><SPAN
|
||||
class=rvts9>
|
||||
</P></SPAN>
|
||||
<P class=rvps3><SPAN class=rvts11><U>result<BR></U></SPAN><SPAN class=rvts9>This command does not set any result
|
||||
variables.</SPAN></P></head>
|
||||
<P><U>arguments</U><BR>This command has no arguments.
|
||||
</P>
|
||||
<P class=rvps3><U>result<BR></U>This command does not set any result
|
||||
variables.</P></body>
|
||||
</html>
|
||||
|
|
@ -22,13 +22,10 @@ StopDebug[,stop,dbgstop]
|
|||
</STRONG>Terminate the current debuggee and stop debugging
|
||||
it.</P>
|
||||
<P class=rvps3>
|
||||
<SPAN class=rvts11 >
|
||||
<U >
|
||||
arguments</U>
|
||||
|
||||
<BR></SPAN>
|
||||
<SPAN
|
||||
class=rvts9>This command has no arguments.</SPAN> </P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>result<BR></U></SPAN><SPAN class=rvts9>This command does not set any result
|
||||
variables.</SPAN></P></body>
|
||||
<BR>This command has no arguments. </P>
|
||||
<P class=rvps3><U>result<BR></U>This command does not set any result
|
||||
variables.</P></body>
|
||||
</html>
|
||||
|
|
@ -15,24 +15,23 @@ html,body {
|
|||
</head>
|
||||
|
||||
<body>
|
||||
<P class=rvps3><SPAN class=rvts10><STRONG>Variables</STRONG><BR></SPAN><SPAN
|
||||
class=rvts9>This program supports variables. There are three types of
|
||||
variables:</SPAN><SPAN class=rvts9><BR></SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>USER</U></SPAN><SPAN class=rvts9>:
|
||||
Variables created by the user using the "var" command. These variables have no
|
||||
access restrictions.</SPAN><SPAN class=rvts9><BR></SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>SYSTEM</U></SPAN><SPAN class=rvts9>:
|
||||
Variables created by the system, that can be read and written, but cannot be
|
||||
deleted.</SPAN><SPAN class=rvts9><BR></SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>READONLY</U></SPAN><SPAN class=rvts9>:
|
||||
<P class=rvps3><STRONG>Variables</STRONG><BR>This program
|
||||
supports variables. There are three types of variables:</P>
|
||||
<P class=rvps3><U>USER</U>: Variables
|
||||
created by the user using the "var" command. These variables have no access
|
||||
restrictions.</P>
|
||||
<P class=rvps3><U>SYSTEM</U>: Variables
|
||||
created by the system, that can be read and written, but cannot be deleted.</P>
|
||||
<P class=rvps3><U>READONLY</U>:
|
||||
Variables created by the system, that can be read, but not written or
|
||||
deleted.</SPAN><SPAN class=rvts9><BR></SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts10><STRONG>Reserved
|
||||
Variables</STRONG><BR></SPAN><SPAN class=rvts9>There are a few reserved
|
||||
variables:</SPAN><SPAN class=rvts9><BR></SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>$res/$result</U></SPAN><SPAN class=rvts9>: General result variable.<BR><U>$resN/$resultN</U>:
|
||||
deleted.</P>
|
||||
<P class=rvps3><STRONG>Reserved
|
||||
Variables</STRONG><BR>There are a few reserved
|
||||
variables:</P>
|
||||
<P class=rvps3><U>$res/$result</U>: General result variable.<BR><U>$resN/$resultN</U>:
|
||||
Optional other result variables (N=
|
||||
1-4).<BR><U>$pid</U>: Project ID of the debugged
|
||||
executable.<BR><U>$hp/$hProcess</U>: Debugged executable
|
||||
handle.<BR><U>$lastalloc</U>: Last result of the
|
||||
'alloc' command.</SPAN></P></head>
|
||||
'alloc' command.</P></body>
|
||||
</html>
|
||||
17
help/add.htm
17
help/add.htm
|
|
@ -16,18 +16,13 @@ html,body {
|
|||
|
||||
<body>
|
||||
<P><STRONG>add</STRONG><BR> Add two
|
||||
values.</P><SPAN class=rvts11>
|
||||
values.</P>
|
||||
<P class=rvps3>
|
||||
<SPAN class=rvts11 >
|
||||
<U >
|
||||
arguments</U>
|
||||
|
||||
<BR> arg1:
|
||||
Destination.</SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts11>
|
||||
arg2: Source.</SPAN>
|
||||
</P><P class=rvps3>
|
||||
<SPAN class=rvts11><U >result<BR>
|
||||
</U>This command does not set
|
||||
any result variables.</SPAN></P>
|
||||
</SPAN></BODY></HTML>
|
||||
<BR> arg1: Destination.</P>
|
||||
<P class=rvps3> arg2: Source.
|
||||
</P><P class=rvps3><U >result<BR>
|
||||
</U>This command does not set any
|
||||
result variables.</P></body></HTML>
|
||||
|
|
@ -22,4 +22,5 @@ with PAGE_EXECUTE_READWRITE protection.</P>
|
|||
allocate. When not specified, a default size of 0x1000 is used.</P>
|
||||
<P><U>result</U><BR>This command sets $result to the allocated memory address. It also sets the $lastalloc
|
||||
variable to the allocated memory address when VirtualAllocEx
|
||||
succeeded.</P></body>
|
||||
succeeded.</P></body>
|
||||
</html>
|
||||
14
help/and.htm
14
help/and.htm
|
|
@ -18,17 +18,13 @@ html,body {
|
|||
<P><STRONG>and</STRONG><BR>Binary AND
|
||||
two values.</P>
|
||||
<P class=rvps3>
|
||||
<SPAN class=rvts11>
|
||||
<U>
|
||||
arguments
|
||||
|
||||
</U>
|
||||
<BR> arg1:
|
||||
Destination.</SPAN></P>
|
||||
<P class=rvps3 >
|
||||
<SPAN class=rvts11 >
|
||||
arg2: Source.</SPAN></P>
|
||||
<BR> arg1: Destination.</P>
|
||||
<P class=rvps3 > arg2: Source.</P>
|
||||
|
||||
<P class=rvps3>
|
||||
<SPAN class=rvts11><U>result<BR></U>This command does not set
|
||||
any result variables.</SPAN></P></body>
|
||||
<P class=rvps3><U>result<BR></U>This command does not set any
|
||||
result variables.</P></body>
|
||||
</html>
|
||||
17
help/asm.htm
17
help/asm.htm
|
|
@ -16,12 +16,11 @@ html,body {
|
|||
|
||||
<body>
|
||||
<P><STRONG>asm<BR></STRONG>Assemble an instruction.</P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>arguments</U> <BR></SPAN><SPAN
|
||||
class=rvts9> arg1: Address to place the assembled instruction at.</SPAN> </P>
|
||||
<P class=rvps3><SPAN
|
||||
class=rvts9> arg2: Instruction text.</SPAN> </P>
|
||||
<P class=rvps3><SPAN
|
||||
class=rvts9>[arg3]: When specified the remainder of the previous
|
||||
instruction will be filled with NOPs.</SPAN> </P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>result<BR></U></SPAN><SPAN class=rvts9><EM>$result</EM> will be set to the assembled instruction size. 0 on
|
||||
failure.</SPAN></P></body>
|
||||
<P class=rvps3><U>arguments</U> <BR> arg1: Address to place the assembled instruction at.
|
||||
</P>
|
||||
<P class=rvps3> arg2: Instruction text. </P>
|
||||
<P class=rvps3>[arg3]: When specified the remainder of the
|
||||
previous instruction will be filled with NOPs. </P>
|
||||
<P class=rvps3><U>result<BR></U><EM>$result</EM> will be set to the
|
||||
assembled instruction size. 0 on failure.</P></body>
|
||||
</html>
|
||||
|
|
@ -25,4 +25,5 @@ result
|
|||
|
||||
</U>
|
||||
<BR>This command does not set any result
|
||||
variables.</P></body>
|
||||
variables.</P></body>
|
||||
</html>
|
||||
|
|
@ -20,4 +20,5 @@ bookmark.</P>
|
|||
<P><U>arguments </U><BR> arg1: Address of the
|
||||
bookmark to delete. </P>
|
||||
<P><U>result</U> <BR>This command does not set any result
|
||||
variables.</P></body>
|
||||
variables.</P></body>
|
||||
</html>
|
||||
|
|
@ -19,3 +19,4 @@ html,body {
|
|||
<P><U>arguments</U><BR>This command has no arguments.</P>
|
||||
<P><U>result<BR></U><EM>$result</EM> will be set to
|
||||
the number of user-defined bookmarks.</P></body>
|
||||
</html>
|
||||
|
|
|
|||
|
|
@ -32,4 +32,5 @@ the way of setting memory breakpoints.</P>
|
|||
<P><EM>ADDRESS</EM> is the breakpoint address, given in 32 and 64
|
||||
bits for the x32 and x64 debugger respectively.</P>
|
||||
<P><EM>NAME</EM> is the name assigned
|
||||
to the breakpoint.</P></body>
|
||||
to the breakpoint.</P></body>
|
||||
</html>
|
||||
|
|
@ -17,12 +17,10 @@ html,body {
|
|||
<body>
|
||||
<P><STRONG>call<BR></STRONG>A call works exactly the same as an uncondentional
|
||||
branch, but it places it's address on the script stack.</P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>arguments </U><BR></SPAN><SPAN
|
||||
class=rvts9> arg1: The label to jump
|
||||
to.</SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts11>
|
||||
<P class=rvps3><U>arguments </U><BR> arg1: The label to jump to.</P>
|
||||
<P class=rvps3>
|
||||
<U>
|
||||
result
|
||||
<BR></U></SPAN>
|
||||
<SPAN class=rvts9>This command does not set any result variables.</SPAN>
|
||||
</P></body>
|
||||
<BR></U>This command does not set any result variables.
|
||||
</P></body>
|
||||
</html>
|
||||
|
|
@ -19,5 +19,6 @@ html,body {
|
|||
(SetCurrentDirectory).</P>
|
||||
<P><U>arguments</U><BR> arg1: Path of a directory to change
|
||||
to.</P>
|
||||
<P><U>result<BR></U><SPAN class=rvts9>This command does not set any result
|
||||
variables.</SPAN></P></head>
|
||||
<P><U>result<BR></U>This command does not set any result
|
||||
variables.</P></body>
|
||||
</html>
|
||||
|
|
@ -15,7 +15,8 @@ html,body {
|
|||
</head>
|
||||
|
||||
<body>
|
||||
<P class=rvps3><SPAN class=rvts10><STRONG>cls[,lc,lclr]</STRONG><BR></SPAN><SPAN class=rvts9>Clear the log window.</SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts9> </SPAN><SPAN class=rvts11><U>arguments</U><BR></SPAN><SPAN class=rvts9>This command has no arguments.</SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts9> </SPAN><SPAN class=rvts11><U>result<BR></U></SPAN><SPAN class=rvts9>This command does not set any result
|
||||
variables.</SPAN></P></body></HTML>
|
||||
<P class=rvps3><STRONG>cls[,lc,lclr]</STRONG><BR>Clear the log
|
||||
window.</P>
|
||||
<P class=rvps3><U>arguments</U><BR>This command has no arguments.</P>
|
||||
<P class=rvps3><U>result<BR></U>This command does not set any result
|
||||
variables.</P></body></HTML>
|
||||
|
|
@ -31,4 +31,5 @@ arg2: Comment text.</P>
|
|||
result</U>
|
||||
<BR>
|
||||
This command does not set
|
||||
any result variables.</P></body>
|
||||
any result variables.</P></body>
|
||||
</html>
|
||||
|
|
@ -27,3 +27,4 @@ arguments
|
|||
|
||||
<BR>
|
||||
This command does not set any result variables.</P></body>
|
||||
</html>
|
||||
|
|
@ -20,3 +20,4 @@ comments in reference view.</P>
|
|||
<P><U>arguments</U><BR>This command has no arguments.</P>
|
||||
<P><U>result<BR></U><EM>$result</EM> will be set to the
|
||||
number of user-defined comments.</P></body>
|
||||
</html>
|
||||
|
|
|
|||
|
|
@ -17,7 +17,7 @@ html,body {
|
|||
<body>
|
||||
<P><STRONG>dec</STRONG><BR>Decrease a
|
||||
value.</P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>arguments </U><BR> arg1:
|
||||
Destination.</SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>result <BR></U>This command does not set
|
||||
any result variables.</SPAN></P></body>
|
||||
<P class=rvps3><U>arguments </U><BR> arg1: Destination.</P>
|
||||
<P class=rvps3><U>result <BR></U>This command does not set any
|
||||
result variables.</P></body>
|
||||
</html>
|
||||
|
|
@ -18,15 +18,11 @@ html,body {
|
|||
<P><STRONG>disasm[,dis,d]<BR></STRONG>
|
||||
Disassemble at a certain position.</P>
|
||||
<P class=rvps3>
|
||||
<SPAN class=rvts11>
|
||||
<U>arguments</U>
|
||||
<BR >
|
||||
|
||||
</SPAN>
|
||||
<SPAN class=rvts9 ></SPAN>
|
||||
|
||||
<SPAN class=rvts9>
|
||||
[arg1]: The address to disassemble at. When not specified,
|
||||
there will be assembled at CIP.</SPAN>
|
||||
</P><P class=rvps3><SPAN class=rvts11><U>result<BR></U></SPAN><SPAN class=rvts9>This command does not set any result
|
||||
variables.</SPAN></P></body>
|
||||
there will be assembled at CIP.
|
||||
</P><P class=rvps3><U>result<BR></U>This command does not set any result
|
||||
variables.</P></body>
|
||||
</html>
|
||||
11
help/div.htm
11
help/div.htm
|
|
@ -17,9 +17,8 @@ html,body {
|
|||
<body>
|
||||
<P><STRONG>div</STRONG><BR>Devide two
|
||||
values.</P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>arguments </U><BR> arg1:
|
||||
Destination.</SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts11>
|
||||
arg2: Source.</SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>result<BR></U>This command does not set
|
||||
any result variables.</SPAN></P></body>
|
||||
<P class=rvps3><U>arguments </U><BR> arg1: Destination.</P>
|
||||
<P class=rvps3> arg2: Source.</P>
|
||||
<P class=rvps3><U>result<BR></U>This command does not set any
|
||||
result variables.</P></body>
|
||||
</html>
|
||||
|
|
@ -12,16 +12,16 @@ html,body {
|
|||
}
|
||||
</style>
|
||||
|
||||
</head>
|
||||
</head>
|
||||
|
||||
<body>
|
||||
<P><STRONG>dump<BR></STRONG>Dump at a certain position.</P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>arguments</U> <BR></SPAN><SPAN
|
||||
class=rvts9></SPAN><SPAN class=rvts9>[arg1]: The address to dump at.</SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts11>
|
||||
<U>
|
||||
result
|
||||
<BR>
|
||||
</U></SPAN>
|
||||
<SPAN class=rvts9>This command does not set any result variables.</SPAN></P></body>
|
||||
|
||||
<body>
|
||||
<P><STRONG>dump<BR></STRONG>Dump at a certain position.</P>
|
||||
<P class=rvps3><U>arguments</U> <BR>[arg1]: The address to dump at.</P>
|
||||
<P class=rvps3>
|
||||
<U>
|
||||
result
|
||||
<BR>
|
||||
</U>This command does not set any result
|
||||
variables.</P></body>
|
||||
</html>
|
||||
|
|
@ -21,8 +21,9 @@ html,body {
|
|||
|
||||
<BR></STRONG>Step a specified number of instructions using the
|
||||
Trap-Flag, skipping first-chance exceptions.</P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>arguments</U><BR></SPAN><SPAN
|
||||
class=rvts9></SPAN><SPAN class=rvts9>[arg1]: The number of instructions to executre (this can be
|
||||
any valid expression). When not specified, a StepInto is performed.<BR></SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>result<BR></U></SPAN><SPAN class=rvts9>This command does not set any result variables.</SPAN></P>
|
||||
<P> </P></body>
|
||||
<P class=rvps3><U>arguments</U><BR>[arg1]: The number of instructions to executre (this can be
|
||||
any valid expression). When not specified, a StepInto is performed.</P>
|
||||
<P class=rvps3><U>result<BR></U>This command does not set any result
|
||||
variables.</P>
|
||||
</body>
|
||||
</html>
|
||||
|
|
|
|||
|
|
@ -24,13 +24,11 @@ eStepInto[,esti]
|
|||
first-chance exceptions.
|
||||
</P>
|
||||
<P class=rvps3 >
|
||||
<SPAN class=rvts11 >
|
||||
|
||||
<U>
|
||||
arguments</U>
|
||||
<BR></SPAN><SPAN
|
||||
class=rvts9>This command has no arguments.</SPAN><SPAN
|
||||
class=rvts9><BR></SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>result<BR></U></SPAN><SPAN class=rvts9>This command does not set any result variables.</SPAN></P>
|
||||
<P> </P></body>
|
||||
<BR>This command has no arguments.</P>
|
||||
<P class=rvps3><U>result<BR></U>This command does not set any result
|
||||
variables.</P>
|
||||
</body>
|
||||
</html>
|
||||
|
|
@ -22,13 +22,10 @@ eStepOut[,ertr]
|
|||
</STRONG>Return from function by calling eStepOver until
|
||||
the current instruction is a RET.</P>
|
||||
<P class=rvps3>
|
||||
<SPAN class=rvts11 >
|
||||
<U >
|
||||
arguments</U>
|
||||
|
||||
<BR></SPAN>
|
||||
<SPAN
|
||||
class=rvts9>This command has no arguments.</SPAN> </P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>result<BR></U></SPAN><SPAN class=rvts9>This command does not set any result
|
||||
variables.</SPAN></P></body>
|
||||
<BR>This command has no arguments. </P>
|
||||
<P class=rvps3><U>result<BR></U>This command does not set any result
|
||||
variables.</P></body>
|
||||
</html>
|
||||
|
|
@ -23,13 +23,10 @@ eStepOver[,estep,esto,est]
|
|||
exceptions. When the instruction at CIP isn't a call, a StepInto is
|
||||
performed.</P>
|
||||
<P>
|
||||
<SPAN class=rvts11 >
|
||||
<U >
|
||||
arguments</U>
|
||||
|
||||
<BR></SPAN>
|
||||
<SPAN
|
||||
class=rvts9>This command has no arguments.</SPAN><SPAN
|
||||
class=rvts9> </P></SPAN>
|
||||
<P class=rvps3><SPAN class=rvts11><U>result<BR></U></SPAN><SPAN class=rvts9>This command does not set any result
|
||||
variables.</SPAN></P></body>
|
||||
<BR>This command has no arguments. </P>
|
||||
<P class=rvps3><U>result<BR></U>This command does not set any result
|
||||
variables.</P></body>
|
||||
</html>
|
||||
|
|
@ -28,5 +28,5 @@ This command has no arguments.</P>
|
|||
result</U>
|
||||
<BR >
|
||||
This command does not set any result variables.</P>
|
||||
<P> </P></body>
|
||||
</body>
|
||||
</html>
|
||||
|
|
@ -16,16 +16,16 @@ html,body {
|
|||
|
||||
<body>
|
||||
<P><STRONG>find<BR></STRONG> Find a pattern.</P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>arguments</U> <BR></SPAN><SPAN class=rvts9> arg1: The address to start searching
|
||||
from. Notice that the searching will stop when the end of the memory page this
|
||||
address resides in has been reached. This means you cannot search the complete
|
||||
process memory without enumerating the memory pages first.</SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts9> arg2: The byte pattern to search for. This byte
|
||||
pattern can contain wildcards (?) for example: "EB0?90??8D".</SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts9> [arg3]:
|
||||
The size of the data to search in.</SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>result <BR></U></SPAN><SPAN
|
||||
class=rvts9>The $result variable is set to the virtual
|
||||
address of the address that matches the byte pattern. $result will be 0 when the pattern could not be
|
||||
matched.</SPAN></P>
|
||||
<P> </P></head>
|
||||
<P class=rvps3><U>arguments</U> <BR> arg1: The address to start searching from. Notice
|
||||
that the searching will stop when the end of the memory page this address
|
||||
resides in has been reached. This means you cannot search the complete process
|
||||
memory without enumerating the memory pages first.</P>
|
||||
<P class=rvps3> arg2: The byte pattern to search for.
|
||||
This byte pattern can contain wildcards (?) for example: "EB0?90??8D".</P>
|
||||
<P class=rvps3>[arg3]: The size of the data to search
|
||||
in.</P>
|
||||
<P class=rvps3><U>result <BR></U>The $result variable is set to the virtual address of
|
||||
the address that matches the byte pattern. $result will be 0 when the pattern
|
||||
could not be matched.</P>
|
||||
<P> </P></body>
|
||||
</html>
|
||||
|
|
@ -12,20 +12,19 @@ html,body {
|
|||
}
|
||||
</style>
|
||||
|
||||
</head>
|
||||
</head>
|
||||
|
||||
<body>
|
||||
<P><STRONG>findall<BR></STRONG>Find all occurrences of a pattern.</P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>arguments</U> <BR></SPAN><SPAN
|
||||
class=rvts9> arg1: The address to start searching
|
||||
from. Notice that the searching will stop when the end of the memory page this
|
||||
address resides in has been reached. This means you cannot search the complete
|
||||
process memory without enumerating the memory pages first.</SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts9>
|
||||
arg2: The byte pattern to search for. This byte pattern can contain wildcards
|
||||
(?) for example: "EB0?90??8D".</SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts9>[arg3]:
|
||||
The size of the data to search in.</SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>result <BR></U></SPAN><SPAN class=rvts9><EM>$result</EM> is set to the number of
|
||||
occurrences.</SPAN></P>
|
||||
<P> </P></body>
|
||||
|
||||
<body>
|
||||
<P><STRONG>findall<BR></STRONG>Find all occurrences of a pattern.</P>
|
||||
<P class=rvps3><U>arguments</U> <BR> arg1: The address to start searching from. Notice
|
||||
that the searching will stop when the end of the memory page this address
|
||||
resides in has been reached. This means you cannot search the complete process
|
||||
memory without enumerating the memory pages first.</P>
|
||||
<P class=rvps3> arg2: The byte pattern to search for.
|
||||
This byte pattern can contain wildcards (?) for example: "EB0?90??8D".</P>
|
||||
<P class=rvps3>[arg3]: The size of the data to search
|
||||
in.</P>
|
||||
<P class=rvps3><U>result <BR></U><EM>$result</EM> is set to the
|
||||
number of occurrences.</P></body>
|
||||
</html>
|
||||
|
|
|
|||
|
|
@ -17,13 +17,11 @@ html,body {
|
|||
<body>
|
||||
<P><STRONG>findasm[,asmfind]<BR></STRONG>Find assembled
|
||||
instruction.</P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>arguments</U> <BR></SPAN><SPAN class=rvts9> arg1: Instruction to look for (make sure to use "mov
|
||||
eax, ebx" to ensure you actually search for that instruction). </SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts9>[arg2]:
|
||||
Address of/inside a memory page to look in. When not specified CIP will be
|
||||
used. </SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts9>[arg3]: The
|
||||
size of the data to search in. </SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>result <BR></U></SPAN><SPAN class=rvts9>The $result variable is set to the number of references
|
||||
found.</SPAN> </P></body>
|
||||
<P class=rvps3><U>arguments</U> <BR> arg1: Instruction to look for (make sure to use "mov
|
||||
eax, ebx" to ensure you actually search for that instruction).</P>
|
||||
<P class=rvps3>[arg2]: Address of/inside a memory page
|
||||
to look in. When not specified CIP will be used. </P>
|
||||
<P class=rvps3>[arg3]: The size of the data to search in.</P>
|
||||
<P class=rvps3><U>result <BR></U>The $result variable is set to the number of references
|
||||
found. </P></body>
|
||||
</html>
|
||||
|
|
@ -29,3 +29,4 @@ This command sets $result
|
|||
to 1 if VirtualFreeEx succeeded, otherwise it's set to
|
||||
0. $lastalloc is set to zero when the address specified is equal
|
||||
to $lastalloc.</P></body>
|
||||
</html>
|
||||
|
|
@ -28,5 +28,5 @@ delete.</P>
|
|||
|
||||
<BR>
|
||||
This command does not set any result variables.</P>
|
||||
<P> </P></body>
|
||||
</html>
|
||||
</body>
|
||||
</html>
|
||||
|
|
@ -19,5 +19,5 @@ html,body {
|
|||
<P><U>arguments</U><BR>This command has no arguments.</P>
|
||||
<P><U>result<BR></U><EM>$result</EM> will be set to
|
||||
the number of user-defined functions.</P>
|
||||
<P> </P></body>
|
||||
</html>
|
||||
</body>
|
||||
</html>
|
||||
|
|
|
|||
|
|
@ -16,7 +16,8 @@ html,body {
|
|||
|
||||
<body>
|
||||
<P><STRONG>getcommandline[,getcmdline]<BR></STRONG>It gets the actual command line.</P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>No arguments </U></SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>result <BR></U></SPAN><SPAN class=rvts9>This command does not set any result variables.</SPAN></P>
|
||||
<P> </P></body>
|
||||
</html>
|
||||
<P><U>arguments</U><BR>This command has no arguments.</P>
|
||||
<P class=rvps3><U>result <BR></U>This command does not set any result
|
||||
variables.</P>
|
||||
</body>
|
||||
</html>
|
||||
|
|
@ -28,28 +28,22 @@ entry. Important notes:</P>
|
|||
<DIV>Its possible get the x64-JIT entry from the
|
||||
x32 debugger ONLY if the x32 debugger its running in a WIN64
|
||||
System (using the x64 arg).</DIV></LI></UL>
|
||||
<P><SPAN class=rvts11><U>arguments</U> </SPAN> </P>
|
||||
<P class=rvps3><SPAN class=rvts11><SPAN
|
||||
class=rvts9> without args: Get the current JIT
|
||||
debugger. </SPAN></SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts11><SPAN
|
||||
class=rvts9> arg2: </SPAN></SPAN></P>
|
||||
<P><U>arguments</U> </P>
|
||||
<P class=rvps3> without args: Get the current JIT
|
||||
debugger. </P>
|
||||
<P class=rvps3> arg2:</P>
|
||||
<OL>
|
||||
<OL>
|
||||
<LI>
|
||||
<DIV class=rvps3><SPAN class=rvts9
|
||||
><SPAN class=rvts9>old: Get the
|
||||
old JIT entry stored. </SPAN></SPAN><SPAN class=rvts9
|
||||
></DIV></LI>
|
||||
<DIV class=rvps3>old: Get the old JIT entry
|
||||
stored.</DIV>
|
||||
<DIV class=rvps3></DIV>
|
||||
<LI>
|
||||
<DIV class=rvps3><SPAN class=rvts9
|
||||
>x32: Get the x32-JIT entry.</SPAN></DIV>
|
||||
<DIV class=rvps3>x32: Get the x32-JIT entry.</DIV>
|
||||
<LI>
|
||||
<DIV class=rvps3><SPAN class=rvts9
|
||||
>x64: Get the
|
||||
x64-JIT entry.</SPAN></SPAN></DIV></LI></OL></OL>
|
||||
<P class=rvps3><SPAN class=rvts11><U>result <BR></U></SPAN><SPAN class=rvts9><SPAN class=rvts9>This command does not
|
||||
set any result variables.</SPAN> </SPAN></P>
|
||||
<P> </P></body>
|
||||
<DIV class=rvps3>x64: Get the
|
||||
x64-JIT entry.</DIV></LI></OL></OL>
|
||||
<P class=rvps3><U>result <BR></U>This command does not set any result
|
||||
variables.</P>
|
||||
</body>
|
||||
</html>
|
||||
|
|
@ -31,30 +31,19 @@ arg).</DIV>
|
|||
<DIV>Its possible get the x64-JIT
|
||||
AUTO FLAG entry from the x32 debugger ONLY if the x32
|
||||
debugger its running in a WIN64 System (using the x64 arg).</DIV></LI></UL>
|
||||
<P><SPAN class=rvts11><U>arguments</U> </SPAN> <SPAN class=rvts11><SPAN class=rvts9>
|
||||
<P><U>arguments</U> <SPAN class=rvts11><SPAN class=rvts9>
|
||||
</SPAN></SPAN></P>
|
||||
<P><SPAN class=rvts11><SPAN class=rvts9> without args: Get current JIT entry
|
||||
FLAG.
|
||||
</SPAN></SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts11><SPAN
|
||||
class=rvts9> arg1: </SPAN></SPAN><SPAN class=rvts9
|
||||
><SPAN class=rvts9></P>
|
||||
<P> without args: Get current JIT entry FLAG.</P>
|
||||
<P class=rvps3> arg1:</P>
|
||||
<OL>
|
||||
<OL>
|
||||
<DIV class=rvps3></DIV>
|
||||
<LI>
|
||||
<DIV class=rvps3><SPAN class=rvts9
|
||||
>
|
||||
x32: Get the x32-JIT AUTO FLAG.</SPAN></DIV>
|
||||
<DIV class=rvps3>x32: Get the x32-JIT
|
||||
AUTO FLAG.</DIV>
|
||||
<LI>
|
||||
<DIV class=rvps3><SPAN class=rvts9
|
||||
>
|
||||
</SPAN></SPAN><SPAN class=rvts9
|
||||
><SPAN class=rvts9>
|
||||
x64: Get the x64-JIT
|
||||
AUTO FLAG.</SPAN> </SPAN></SPAN></DIV></LI>
|
||||
<DIV></DIV></OL></OL>
|
||||
<P class=rvps3><SPAN class=rvts11><U>result <BR></U></SPAN><SPAN class=rvts9><SPAN class=rvts9>This command does not
|
||||
set any result variables.</SPAN> </SPAN></P>
|
||||
<P> </P></body>
|
||||
<DIV class=rvps3>x64: Get the x64-JIT AUTO FLAG.</DIV>
|
||||
<DIV></DIV></LI></OL></OL>
|
||||
<P class=rvps3><U>result <BR></U>This command does not set any result variables.</P>
|
||||
</body>
|
||||
</html>
|
||||
|
|
@ -16,10 +16,9 @@ html,body {
|
|||
|
||||
<body>
|
||||
<P><STRONG>getpagerights[,getpagerights,getrightspage]<BR></STRONG>Get the rights of a memory page.</P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>arguments</U> <BR></SPAN><SPAN
|
||||
class=rvts9> arg1: Memory Address of page
|
||||
(it fix the address if this arg is not the top address of a
|
||||
page). </SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts9></SPAN><SPAN class=rvts11><U>result <BR></U></SPAN><SPAN class=rvts9>This command does not set any result variables.</SPAN></P>
|
||||
<P> </P></body>
|
||||
<P class=rvps3><U>arguments</U> <BR> arg1: Memory Address of page (it
|
||||
fix the address if this arg is not the top address of a page).</P>
|
||||
<P class=rvps3><U>result <BR></U>This command does not set any result
|
||||
variables.</P>
|
||||
</body>
|
||||
</html>
|
||||
18
help/gpa.htm
18
help/gpa.htm
|
|
@ -17,19 +17,13 @@ html,body {
|
|||
<body>
|
||||
<P><STRONG>gpa</STRONG><BR>Get the address of an export
|
||||
inside a DLL.</P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>arguments </U><BR> arg1: Export
|
||||
name.</SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts11>[arg2]: DLL name.</SPAN></P>
|
||||
<P class=rvps3><U>arguments </U><BR> arg1: Export name.</P>
|
||||
<P class=rvps3>[arg2]: DLL name.</P>
|
||||
<P class=rvps3>
|
||||
<SPAN class=rvts11>
|
||||
<U >
|
||||
result
|
||||
<BR ></U></SPAN>
|
||||
|
||||
<SPAN class=rvts9>
|
||||
<BR ></U>
|
||||
The <U>$result</U> variable is set to the
|
||||
export address. When the export is not found, <U>$result</U>
|
||||
will be set to
|
||||
0.</SPAN>
|
||||
|
||||
</P></body>
|
||||
export address. When the export is not found, <U>$result</U> will be set to 0.
|
||||
</P></body>
|
||||
</html>
|
||||
|
|
@ -17,7 +17,7 @@ html,body {
|
|||
<body>
|
||||
<P><STRONG>inc<BR></STRONG>Increase a
|
||||
value.</P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>arguments </U><BR> arg1:
|
||||
Destination.</SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>result<BR></U>This command does not set
|
||||
any result variables.</SPAN></P></body>
|
||||
<P class=rvps3><U>arguments </U><BR> arg1: Destination.</P>
|
||||
<P class=rvps3><U>result<BR></U>This command does not set any
|
||||
result variables.</P></body>
|
||||
</html>
|
||||
|
|
@ -17,7 +17,7 @@ html,body {
|
|||
<body>
|
||||
<P><STRONG>invalid</STRONG><BR>Invalid command to throw an error message. This command will halt the
|
||||
script execution.</P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>arguments </U><BR></SPAN><SPAN
|
||||
class=rvts9>This command has no arguments. </SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>result <BR></U></SPAN><SPAN class=rvts9>This command does not set any result variables.</SPAN>
|
||||
</P></body>
|
||||
<P class=rvps3><U>arguments </U><BR>This command has no arguments.</P>
|
||||
<P class=rvps3><U>result <BR></U>This command does not set any result variables.
|
||||
</P></body>
|
||||
</html>
|
||||
|
|
@ -17,16 +17,10 @@ html,body {
|
|||
<body>
|
||||
<P><STRONG>killthread[,threadkill]<BR></STRONG>Kill a
|
||||
thread in the debuggee.</P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>arguments</U> <BR></SPAN><SPAN
|
||||
class=rvts9> [arg1]: ThreadId of the thread
|
||||
to kill (see the Threads tab). When not specified, the main thread is
|
||||
used. </SPAN></P>
|
||||
<P class=rvps3><SPAN
|
||||
class=rvts9>
|
||||
[arg2]: Thread exit code. When not
|
||||
specified, 0 will be
|
||||
used.</SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>result <BR></U></SPAN><SPAN
|
||||
class=rvts9>This command does not set any result
|
||||
variables.</SPAN></P></body>
|
||||
<P class=rvps3><U>arguments</U> <BR>[arg1]: ThreadId of the thread to kill (see
|
||||
the Threads tab). When not specified, the main thread is used. </P>
|
||||
<P class=rvps3>[arg2]: Thread exit code. When not specified,
|
||||
0 will be used.</P>
|
||||
<P class=rvps3><U>result <BR></U>This command does not set any result
|
||||
variables.</P></body>
|
||||
</html>
|
||||
|
|
@ -12,22 +12,23 @@ html,body {
|
|||
}
|
||||
</style>
|
||||
|
||||
</head>
|
||||
</head>
|
||||
|
||||
<body>
|
||||
<P><STRONG>labellist<BR></STRONG>List user-defined labels in reference view.</P>
|
||||
<P>
|
||||
<U>
|
||||
arguments
|
||||
</U>
|
||||
<BR>
|
||||
This command has no arguments.</P>
|
||||
<P>
|
||||
<U >
|
||||
result
|
||||
<BR ></U>
|
||||
|
||||
<EM>
|
||||
$result</EM> will be set to
|
||||
the number of user-defined labels.</P>
|
||||
<P> </P></body>
|
||||
<body>
|
||||
<P><STRONG>labellist<BR></STRONG>List user-defined labels in reference view.</P>
|
||||
<P>
|
||||
<U>
|
||||
arguments
|
||||
</U>
|
||||
<BR>
|
||||
This command has no arguments.</P>
|
||||
<P>
|
||||
<U >
|
||||
result
|
||||
<BR ></U>
|
||||
|
||||
<EM>
|
||||
$result</EM> will be set to
|
||||
the number of user-defined labels.</P></body>
|
||||
</html>
|
||||
|
|
|
|||
|
|
@ -30,4 +30,5 @@ inside a module).
|
|||
<U>
|
||||
result</U>
|
||||
<BR>This command does not set any result
|
||||
variables.</P></body>
|
||||
variables.</P></body>
|
||||
</html>
|
||||
|
|
@ -21,13 +21,10 @@ loaddb[,dbload]
|
|||
<BR>
|
||||
</STRONG>Load the program database from disk in memory.</P>
|
||||
<P>
|
||||
<SPAN class=rvts11 >
|
||||
<U >
|
||||
arguments</U>
|
||||
|
||||
<BR></SPAN>
|
||||
<SPAN
|
||||
class=rvts9>This command has no arguments.</SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>result <BR></U></SPAN><SPAN class=rvts9>This command does not set any result variables.</SPAN> </P>
|
||||
<P> </P></body>
|
||||
<BR>This command has no arguments.</P>
|
||||
<P class=rvps3><U>result <BR></U>This command does not set any result
|
||||
variables. </P></body>
|
||||
</html>
|
||||
|
|
@ -0,0 +1,22 @@
|
|||
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
|
||||
<html>
|
||||
<head>
|
||||
<title>loadlib</title>
|
||||
<meta name="GENERATOR" content="WinCHM">
|
||||
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
|
||||
<style>
|
||||
html,body {
|
||||
/* Default Font */
|
||||
font-family: Courier New;
|
||||
font-size: 11pt;
|
||||
}
|
||||
</style>
|
||||
|
||||
</head>
|
||||
|
||||
<body>
|
||||
<P><STRONG>loadlib<BR></STRONG>Load a DLL into debugged program memory.</P>
|
||||
<P><U>arguments<BR></U> arg1: The name of the module to load. </P>
|
||||
<P><U>result <BR></U>The <U>$result</U>
|
||||
variable will be set to the address of the loaded library.</P></body>
|
||||
</html>
|
||||
|
|
@ -12,20 +12,20 @@ html,body {
|
|||
}
|
||||
</style>
|
||||
|
||||
</head>
|
||||
</head>
|
||||
|
||||
<body>
|
||||
<P><STRONG>modcallfind<BR></STRONG>Find all inter-modular
|
||||
calls.</P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>arguments</U> <BR></SPAN><SPAN
|
||||
class=rvts9></SPAN><SPAN class=rvts9>[arg1]: Address of/inside a memory page to find
|
||||
inter-modular calls in. When not specified CIP will be used.</SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts9>[arg2]: The size of the data to search in.</SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts11>
|
||||
<U>
|
||||
result
|
||||
<BR>
|
||||
</U></SPAN>
|
||||
<SPAN
|
||||
class=rvts9>The $result variable is set to the number of
|
||||
inter-modular calls found.</SPAN></P></body>
|
||||
|
||||
<body>
|
||||
<P><STRONG>modcallfind<BR></STRONG>Find all inter-modular
|
||||
calls.</P>
|
||||
<P class=rvps3><U>arguments</U> <BR>[arg1]: Address of/inside a memory page to find
|
||||
inter-modular calls in. When not specified CIP will be used.</P>
|
||||
<P class=rvps3>[arg2]: The size of the data to search
|
||||
in.</P>
|
||||
<P class=rvps3>
|
||||
<U>
|
||||
result
|
||||
<BR>
|
||||
</U>The $result variable is set to the number of
|
||||
inter-modular calls found.</P></body>
|
||||
</html>
|
||||
|
|
|
|||
|
|
@ -15,15 +15,12 @@ html,body {
|
|||
</head>
|
||||
|
||||
<body>
|
||||
<P class=rvps3><SPAN class=rvts10><STRONG>mov[,set]</STRONG><BR></SPAN><SPAN class=rvts9>Set a variable.</SPAN><SPAN class=rvts9><BR></SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>arguments</U><BR></SPAN><SPAN class=rvts9> arg1:</SPAN><SPAN class=rvts9> </SPAN><SPAN
|
||||
class=rvts9></SPAN><SPAN class=rvts9>Variable name (optionally prefixed with a $) to
|
||||
set. When the variable does not exist, it will be
|
||||
created.
|
||||
</SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts9>
|
||||
</SPAN><SPAN class=rvts9>
|
||||
arg2:</SPAN><SPAN class=rvts9> </SPAN><SPAN
|
||||
class=rvts9></SPAN><SPAN class=rvts9>Value to store in the variable.</SPAN><SPAN class=rvts9><BR></P></SPAN>
|
||||
<P class=rvps3><SPAN class=rvts11><U>result<BR></U></SPAN><SPAN class=rvts9>This command does not set any result
|
||||
variables.</SPAN></P></head>
|
||||
<P class=rvps3><STRONG>mov[,set]</STRONG><BR>Set a
|
||||
variable.</P>
|
||||
<P class=rvps3><U>arguments</U><BR> arg1: Variable name (optionally prefixed with a $) to
|
||||
set. When the variable does not exist, it will be created.</P>
|
||||
<P class=rvps3> arg2: Value to store in the
|
||||
variable.</P>
|
||||
<P class=rvps3><U>result<BR></U>This command does not set any result
|
||||
variables.</P></body>
|
||||
</html>
|
||||
|
|
@ -19,4 +19,5 @@ html,body {
|
|||
box.</P>
|
||||
<P><U>arguments<BR></U> arg1: Message box text.</P>
|
||||
<P><U>result<BR></U>This command does not set any result
|
||||
variables.</P></body>
|
||||
variables.</P></body>
|
||||
</html>
|
||||
|
|
|
|||
|
|
@ -23,4 +23,5 @@ answer yes or no.</P>
|
|||
result
|
||||
<BR>
|
||||
</U>The <U>$result</U> variable will be set to 1 when the
|
||||
user answered yes. Otherwise it's set to 0.</P></body>
|
||||
user answered yes. Otherwise it's set to 0.</P></body>
|
||||
</html>
|
||||
11
help/mul.htm
11
help/mul.htm
|
|
@ -17,9 +17,8 @@ html,body {
|
|||
<body>
|
||||
<P><STRONG>mul</STRONG><BR>Multiply two
|
||||
values.</P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>arguments </U><BR> arg1:
|
||||
Destination.</SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts11>
|
||||
arg2: Source.</SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>result<BR></U>This command does not set
|
||||
any result variables.</SPAN></P></body>
|
||||
<P class=rvps3><U>arguments </U><BR> arg1: Destination.</P>
|
||||
<P class=rvps3> arg2: Source.</P>
|
||||
<P class=rvps3><U>result<BR></U>This command does not set any
|
||||
result variables.</P></body>
|
||||
</html>
|
||||
|
|
@ -17,7 +17,7 @@ html,body {
|
|||
<body>
|
||||
<P><STRONG>neg</STRONG><BR>Negate a
|
||||
value.</P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>arguments </U><BR> arg1:
|
||||
Destination.</SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>result<BR></U>This command does not set
|
||||
any result variables.</SPAN></P></body>
|
||||
<P class=rvps3><U>arguments </U><BR> arg1: Destination.</P>
|
||||
<P class=rvps3><U>result<BR></U>This command does not set any
|
||||
result variables.</P></body>
|
||||
</html>
|
||||
|
|
@ -17,7 +17,7 @@ html,body {
|
|||
<body>
|
||||
<P><STRONG>not</STRONG><BR>Binary NOT a
|
||||
value.</P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>arguments </U><BR> arg1:
|
||||
Destination.</SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>result<BR></U>This command does not set
|
||||
any result variables.</SPAN></P></body>
|
||||
<P class=rvps3><U>arguments </U><BR> arg1: Destination.</P>
|
||||
<P class=rvps3><U>result<BR></U>This command does not set any
|
||||
result variables.</P></body>
|
||||
</html>
|
||||
11
help/or.htm
11
help/or.htm
|
|
@ -17,9 +17,8 @@ html,body {
|
|||
<body>
|
||||
<P><STRONG>or<BR></STRONG>Binary OR two
|
||||
values.</P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>arguments </U><BR> arg1:
|
||||
Destination.</SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts11>
|
||||
arg2: Source.</SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>result<BR></U>This command does not set
|
||||
any result variables.</SPAN></P></body>
|
||||
<P class=rvps3><U>arguments </U><BR> arg1: Destination.</P>
|
||||
<P class=rvps3> arg2: Source.</P>
|
||||
<P class=rvps3><U>result<BR></U>This command does not set any
|
||||
result variables.</P></body>
|
||||
</html>
|
||||
|
|
@ -16,8 +16,8 @@ html,body {
|
|||
|
||||
<body>
|
||||
<P><STRONG>pause<BR></STRONG>Pause the debuggee.</P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>arguments </U><BR></SPAN><SPAN
|
||||
class=rvts9>This command has no arguments.</SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>result<BR></U></SPAN><SPAN class=rvts9>This command does not set any result variables.</SPAN></P>
|
||||
<P> </P></body>
|
||||
<P class=rvps3><U>arguments </U><BR>This command has no arguments.</P>
|
||||
<P class=rvps3><U>result<BR></U>This command does not set any result
|
||||
variables.</P>
|
||||
</body>
|
||||
</html>
|
||||
|
|
@ -18,17 +18,14 @@ html,body {
|
|||
<P><STRONG>pause<BR></STRONG>Halt the script execution. The
|
||||
user can resume the script after this command.</P>
|
||||
<P class=rvps3>
|
||||
<SPAN class=rvts11>
|
||||
<U>
|
||||
arguments
|
||||
|
||||
</U>
|
||||
<BR>
|
||||
</SPAN>
|
||||
<SPAN class=rvts9 >
|
||||
This command has no arguments.</SPAN></P>
|
||||
This command has no arguments.</P>
|
||||
<P class=rvps3 >
|
||||
|
||||
<SPAN class=rvts11>
|
||||
<U>result<BR>
|
||||
</U></SPAN><SPAN class=rvts9>This command does not set any result variables.</SPAN></P></body>
|
||||
</U>This command does not set any result
|
||||
variables.</P></body>
|
||||
</html>
|
||||
|
|
@ -32,5 +32,5 @@ _plugin_debugpause();</STRONG></P>
|
|||
<STRONG>Return Values</STRONG>
|
||||
<BR >
|
||||
This function does not return a value.
|
||||
|
||||
</P></body>
|
||||
</P></body>
|
||||
</html>
|
||||
|
|
|
|||
|
|
@ -23,4 +23,5 @@ a single line to the log window.</P>
|
|||
</P> <P><U>text</U>: Piece of text to put to
|
||||
the log window. This text can
|
||||
contain line breaks.</P>
|
||||
<P><STRONG>Return Values</STRONG><BR>This function does not return a value. </P></body>
|
||||
<P><STRONG>Return Values</STRONG><BR>This function does not return a value. </P></body>
|
||||
</html>
|
||||
|
|
|
|||
|
|
@ -39,4 +39,5 @@ executed when there is no target is being debugged. </P>
|
|||
true when the command was successfully registered, <U>make sure to check this,
|
||||
other plugins may have already registered the same
|
||||
command.</U>
|
||||
</P></body>
|
||||
</P></body>
|
||||
</html>
|
||||
|
|
|
|||
|
|
@ -26,8 +26,5 @@ name<BR><STRONG>);</STRONG> </P>
|
|||
calling plugin. </P>
|
||||
<P><U>command</U>: Command name. </P>
|
||||
<P><STRONG>Return Values<BR></STRONG>This function returns true when the callback was
|
||||
removed without problems. </P>
|
||||
<P> </P>
|
||||
|
||||
|
||||
</body>
|
||||
removed without problems.</P></body>
|
||||
</html>
|
||||
|
|
|
|||
|
|
@ -19,21 +19,14 @@ html,body {
|
|||
view. You <STRONG>need</STRONG> to call 'refinit' before using
|
||||
refadd.</P>
|
||||
<P class=rvps3>
|
||||
<SPAN class=rvts11>
|
||||
<U>
|
||||
arguments
|
||||
|
||||
</U>
|
||||
<BR> arg1: Address
|
||||
to put in the reference
|
||||
view.
|
||||
</SPAN></P>
|
||||
<P class=rvps3>
|
||||
<SPAN class=rvts11> arg2: Text to put after the address.
|
||||
</SPAN></P>
|
||||
<BR> arg1: Address to put in the reference view.</P>
|
||||
<P class=rvps3> arg2: Text to put after the address.</P>
|
||||
<P class=rvps3 >
|
||||
|
||||
<SPAN class=rvts11>
|
||||
<U>result<BR>
|
||||
</U></SPAN><SPAN class=rvts9>This command does not set any result
|
||||
variables.</SPAN></P></body>
|
||||
</U>This command does not set any result
|
||||
variables.</P></body>
|
||||
</html>
|
||||
|
|
@ -16,31 +16,15 @@ html,body {
|
|||
|
||||
<body>
|
||||
<P><STRONG>reffind[,findref,ref]<BR></STRONG>Find references to a certain value.</P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>arguments</U> <BR></SPAN>
|
||||
<SPAN class=rvts9>
|
||||
arg1: The value to look for.
|
||||
|
||||
</SPAN></P>
|
||||
<P class=rvps3><U>arguments</U> <BR> arg1: The value to look for.</P>
|
||||
<P class=rvps3>
|
||||
<SPAN class=rvts9>
|
||||
[arg2]: Address of/inside a memory page to look
|
||||
in. When
|
||||
not specified CIP will be used.
|
||||
|
||||
</SPAN></P>
|
||||
[arg2]: Address of/inside a memory page
|
||||
to look in. When not specified CIP will be used. </P>
|
||||
<P class=rvps3>
|
||||
<SPAN class=rvts9>
|
||||
[arg3]:
|
||||
The size
|
||||
of the data to search in.
|
||||
|
||||
</SPAN></P>
|
||||
[arg3]: The size of the data to search in.</P>
|
||||
<P class=rvps3>
|
||||
<SPAN class=rvts11 >
|
||||
<U >
|
||||
result
|
||||
|
||||
<BR></U></SPAN>
|
||||
<SPAN
|
||||
class=rvts9>The $result variable is set to the number of references
|
||||
found.</SPAN> </P></BODY></HTML>
|
||||
<BR></U>The $result variable is set to the number of references
|
||||
found. </P></body></HTML>
|
||||
|
|
@ -17,27 +17,21 @@ html,body {
|
|||
<body>
|
||||
<P><STRONG>reffindrange[,findrefrange,ref</STRONG><STRONG>range</STRONG><STRONG>]<BR></STRONG>Find references to a certain range of values.</P>
|
||||
<P class=rvps3>
|
||||
<SPAN class=rvts11>
|
||||
<U>
|
||||
arguments
|
||||
|
||||
</U>
|
||||
<BR>
|
||||
</SPAN>
|
||||
<SPAN class=rvts9 > arg1: Start of the range (will be
|
||||
included in the results when found).</SPAN></P>
|
||||
<BR> arg1: Start of the range (will be included in the
|
||||
results when found).</P>
|
||||
<P class=rvps3>
|
||||
<SPAN class=rvts9 >
|
||||
[arg2]: End of range (will be included in the results when
|
||||
found). When not specified the first argument will be used.</SPAN></P>
|
||||
[arg2]: End of range (will be included in
|
||||
the results when found). When not specified the first argument will be used.</P>
|
||||
<P class=rvps3 >
|
||||
|
||||
<SPAN class=rvts9>
|
||||
[arg3]: Address of/inside a memory page to look in.
|
||||
When not specified CIP will be used. </SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts9>[arg4]: The size of the data to search in. </SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>result <BR></U></SPAN><SPAN
|
||||
class=rvts9>The $result variable is set to the number of
|
||||
references found.</SPAN> </P>
|
||||
<P> </P></body>
|
||||
[arg3]: Address of/inside a memory page
|
||||
to look in. When not specified CIP will be used. </P>
|
||||
<P class=rvps3>[arg4]: The size of the data to search in.</P>
|
||||
<P class=rvps3><U>result <BR></U>The $result variable is set to the number of references
|
||||
found. </P>
|
||||
</body>
|
||||
</html>
|
||||
|
|
@ -12,23 +12,19 @@ html,body {
|
|||
}
|
||||
</style>
|
||||
|
||||
</head>
|
||||
</head>
|
||||
|
||||
<body>
|
||||
<P><STRONG>refinit<BR></STRONG>Initialize reference view
|
||||
for command usage.</P>
|
||||
<P class=rvps3>
|
||||
<SPAN class=rvts11>
|
||||
<U>arguments</U>
|
||||
<BR >
|
||||
|
||||
</SPAN>
|
||||
<SPAN class=rvts9 >
|
||||
This command has no arguments.</SPAN>
|
||||
</P>
|
||||
|
||||
<P class=rvps3>
|
||||
<SPAN class=rvts11><U>result<BR></U>
|
||||
</SPAN><SPAN
|
||||
class=rvts9>This command does not set any result
|
||||
variables.</SPAN></P></body>
|
||||
<body>
|
||||
<P><STRONG>refinit<BR></STRONG>Initialize reference view
|
||||
for command usage.</P>
|
||||
<P class=rvps3>
|
||||
<U>arguments</U>
|
||||
<BR >
|
||||
|
||||
This command has no arguments.
|
||||
</P>
|
||||
|
||||
<P class=rvps3><U>result<BR></U>This command does not set any result
|
||||
variables.</P></body>
|
||||
</html>
|
||||
|
|
|
|||
|
|
@ -16,13 +16,9 @@ html,body {
|
|||
|
||||
<body>
|
||||
<P><STRONG>refstr[,strref]<BR></STRONG>Find referenced text strings.</P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>arguments</U> <BR></SPAN><SPAN
|
||||
class=rvts9></SPAN><SPAN class=rvts9>[arg1]: Address of/inside a memory page to find
|
||||
referenced text strings in. When not specified CIP
|
||||
will be used.</SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts9>
|
||||
[arg2]: The size of the data
|
||||
to search in.</SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>result <BR></U></SPAN><SPAN
|
||||
class=rvts9>The $result variable is set to the number of string references
|
||||
found.</SPAN></P></BODY></HTML>
|
||||
<P class=rvps3><U>arguments</U> <BR>[arg1]: Address of/inside a memory page to find
|
||||
referenced text strings in. When not specified CIP will be used.</P>
|
||||
<P class=rvps3>[arg2]: The size of the data to search
|
||||
in.</P>
|
||||
<P class=rvps3><U>result <BR></U>The $result variable is set to the number of string
|
||||
references found.</P></body></HTML>
|
||||
|
|
@ -0,0 +1,28 @@
|
|||
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
|
||||
<html>
|
||||
<head>
|
||||
<title>resumeallthreads/threadresumeall</title>
|
||||
<meta name="GENERATOR" content="WinCHM">
|
||||
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
|
||||
<style>
|
||||
html,body {
|
||||
/* Default Font */
|
||||
font-family: Courier New;
|
||||
font-size: 11pt;
|
||||
}
|
||||
</style>
|
||||
|
||||
</head>
|
||||
|
||||
<body>
|
||||
<P><STRONG>resumeallthreads[,threadresumeall]<BR></STRONG>Resume all threads in the debuggee.</P>
|
||||
<P class=rvps3>
|
||||
<U>
|
||||
arguments
|
||||
|
||||
</U>
|
||||
<BR>This command has no arguments.</P>
|
||||
<P class=rvps3 >
|
||||
<U>result <BR></U>This command does not set any result
|
||||
variables.</P></body>
|
||||
</html>
|
||||
|
|
@ -17,10 +17,8 @@ html,body {
|
|||
<body>
|
||||
<P><STRONG>resumethread[,threadresume]<BR></STRONG>Resume a
|
||||
thread in the debuggee.</P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>arguments</U> <BR></SPAN><SPAN
|
||||
class=rvts9>[arg1]: ThreadId of the thread to resume (see
|
||||
the Threads tab). When not specified, the main thread is used. </SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>result <BR></U></SPAN><SPAN
|
||||
class=rvts9>This command does not set any result
|
||||
variables.</SPAN></P></body>
|
||||
<P class=rvps3><U>arguments</U> <BR>[arg1]: ThreadId of the thread to resume (see
|
||||
the Threads tab). When not specified, the main thread is used. </P>
|
||||
<P class=rvps3><U>result <BR></U>This command does not set any result
|
||||
variables.</P></body>
|
||||
</html>
|
||||
|
|
@ -19,7 +19,7 @@ html,body {
|
|||
the stack, this command will end the script and set the script IP to the first
|
||||
line. When 'call' was executed before, ret will return from that
|
||||
call.</P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>arguments </U><BR></SPAN><SPAN
|
||||
class=rvts9>This command has no arguments. </SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>result <BR></U></SPAN><SPAN class=rvts9>This command does not set any result variables.</SPAN>
|
||||
<P class=rvps3><U>arguments </U><BR>This command has no arguments.</P>
|
||||
<P class=rvps3><U>result <BR></U>This command does not set any result variables.
|
||||
</P></body>
|
||||
</html>
|
||||
11
help/rol.htm
11
help/rol.htm
|
|
@ -17,9 +17,8 @@ html,body {
|
|||
<body>
|
||||
<P><STRONG>rol</STRONG><BR>Binary ROL a
|
||||
value.</P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>arguments </U><BR> arg1:
|
||||
Destination.</SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts11>
|
||||
arg2: Source.</SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>result<BR></U>This command does not set
|
||||
any result variables.</SPAN></P></body>
|
||||
<P class=rvps3><U>arguments </U><BR> arg1: Destination.</P>
|
||||
<P class=rvps3> arg2: Source.</P>
|
||||
<P class=rvps3><U>result<BR></U>This command does not set any
|
||||
result variables.</P></body>
|
||||
</html>
|
||||
11
help/ror.htm
11
help/ror.htm
|
|
@ -17,9 +17,8 @@ html,body {
|
|||
<body>
|
||||
<P><STRONG>ror</STRONG><BR>Binary ROR a
|
||||
value.</P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>arguments </U><BR> arg1:
|
||||
Destination.</SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts11>
|
||||
arg2: Source.</SPAN></P>
|
||||
<P class=rvps3><SPAN class=rvts11><U>result<BR></U>This command does not set
|
||||
any result variables.</SPAN></P></body>
|
||||
<P class=rvps3><U>arguments </U><BR> arg1: Destination.</P>
|
||||
<P class=rvps3> arg2: Source.</P>
|
||||
<P class=rvps3><U>result<BR></U>This command does not set any
|
||||
result variables.</P></body>
|
||||
</html>
|
||||
13
help/rtr.htm
13
help/rtr.htm
|
|
@ -18,19 +18,14 @@ html,body {
|
|||
<P><STRONG>StepOut[,rtr]<BR></STRONG>Return from function by calling
|
||||
StepOver until the current instruction is a RET.</P>
|
||||
<P class=rvps3>
|
||||
<SPAN class=rvts11>
|
||||
<U>
|
||||
arguments
|
||||
|
||||
</U>
|
||||
<BR>
|
||||
</SPAN>
|
||||
<SPAN class=rvts9 >
|
||||
This command has no arguments.</SPAN></P>
|
||||
This command has no arguments.</P>
|
||||
<P class=rvps3 >
|
||||
|
||||
<SPAN class=rvts11>
|
||||
<U>result<BR>
|
||||
</U></SPAN><SPAN
|
||||
class=rvts9>This command does not set any result
|
||||
variables.</SPAN></P></body>
|
||||
</U>This command does not set any result
|
||||
variables.</P></body>
|
||||
</html>
|
||||
|
|
@ -22,3 +22,4 @@ the program to run.</P>
|
|||
<BR>
|
||||
This command does not set any result
|
||||
variables.</P></body>
|
||||
</html>
|
||||
Some files were not shown because too many files have changed in this diff Show More
Loading…
Reference in New Issue