887 lines
45 KiB
C++
887 lines
45 KiB
C++
/**
|
|
@file x64dbg.cpp
|
|
|
|
@brief Implements the 64 debug class.
|
|
*/
|
|
|
|
#include "_global.h"
|
|
#include "command.h"
|
|
#include "variable.h"
|
|
#include "debugger.h"
|
|
#include "simplescript.h"
|
|
#include "console.h"
|
|
#include "x64dbg.h"
|
|
#include "msgqueue.h"
|
|
#include "threading.h"
|
|
#include "watch.h"
|
|
#include "plugin_loader.h"
|
|
#include "_dbgfunctions.h"
|
|
#include <zydis_wrapper.h>
|
|
#include "_scriptapi_gui.h"
|
|
#include "filehelper.h"
|
|
#include "database.h"
|
|
#include "mnemonichelp.h"
|
|
#include "datainst_helper.h"
|
|
#include "exception.h"
|
|
#include "expressionfunctions.h"
|
|
#include "formatfunctions.h"
|
|
#include "stringformat.h"
|
|
#include "dbghelp_safe.h"
|
|
|
|
static MESSAGE_STACK* gMsgStack = 0;
|
|
static HANDLE hCommandLoopThread = 0;
|
|
static bool bStopCommandLoopThread = false;
|
|
static char alloctrace[MAX_PATH] = "";
|
|
static bool bIsStopped = true;
|
|
static char scriptDllDir[MAX_PATH] = "";
|
|
static String notesFile;
|
|
|
|
static bool cbStrLen(int argc, char* argv[])
|
|
{
|
|
if(IsArgumentsLessThan(argc, 2))
|
|
return false;
|
|
dprintf_untranslated("\"%s\"[%d]\n", argv[1], int(strlen(argv[1])));
|
|
return true;
|
|
}
|
|
|
|
static bool cbClearLog(int argc, char* argv[])
|
|
{
|
|
GuiLogClear();
|
|
return true;
|
|
}
|
|
|
|
static bool cbPrintf(int argc, char* argv[])
|
|
{
|
|
if(argc < 2)
|
|
dprintf("\n");
|
|
else
|
|
dprintf("%s", argv[1]);
|
|
return true;
|
|
}
|
|
|
|
static bool DbgScriptDllExec(const char* dll);
|
|
|
|
static bool cbScriptDll(int argc, char* argv[])
|
|
{
|
|
if(IsArgumentsLessThan(argc, 2))
|
|
return false;
|
|
return DbgScriptDllExec(argv[1]);
|
|
}
|
|
|
|
#include "cmd-all.h"
|
|
|
|
/**
|
|
\brief register the all the commands
|
|
*/
|
|
static void registercommands()
|
|
{
|
|
cmdinit();
|
|
|
|
//general purpose
|
|
dbgcmdnew("inc", cbInstrInc, false);
|
|
dbgcmdnew("dec", cbInstrDec, false);
|
|
dbgcmdnew("add", cbInstrAdd, false);
|
|
dbgcmdnew("sub", cbInstrSub, false);
|
|
dbgcmdnew("mul", cbInstrMul, false);
|
|
dbgcmdnew("div", cbInstrDiv, false);
|
|
dbgcmdnew("and", cbInstrAnd, false);
|
|
dbgcmdnew("or", cbInstrOr, false);
|
|
dbgcmdnew("xor", cbInstrXor, false);
|
|
dbgcmdnew("neg", cbInstrNeg, false);
|
|
dbgcmdnew("not", cbInstrNot, false);
|
|
dbgcmdnew("bswap", cbInstrBswap, false);
|
|
dbgcmdnew("rol", cbInstrRol, false);
|
|
dbgcmdnew("ror", cbInstrRor, false);
|
|
dbgcmdnew("shl,sal", cbInstrShl, false);
|
|
dbgcmdnew("shr", cbInstrShr, false);
|
|
dbgcmdnew("sar", cbInstrSar, false);
|
|
dbgcmdnew("push", cbInstrPush, true);
|
|
dbgcmdnew("pop", cbInstrPop, true);
|
|
dbgcmdnew("test", cbInstrTest, false);
|
|
dbgcmdnew("cmp", cbInstrCmp, false);
|
|
dbgcmdnew("mov,set", cbInstrMov, false); //mov a variable, arg1:dest,arg2:src
|
|
|
|
//debug control
|
|
dbgcmdnew("InitDebug,init,initdbg", cbDebugInit, false); //init debugger arg1:exefile,[arg2:commandline]
|
|
dbgcmdnew("StopDebug,stop,dbgstop", cbDebugStop, true); //stop debugger
|
|
dbgcmdnew("AttachDebugger,attach", cbDebugAttach, false); //attach
|
|
dbgcmdnew("DetachDebugger,detach", cbDebugDetach, true); //detach
|
|
dbgcmdnew("run,go,r,g", cbDebugRun, true); //unlock WAITID_RUN
|
|
dbgcmdnew("erun,egun,er,eg", cbDebugErun, true); //run + skip first chance exceptions
|
|
dbgcmdnew("serun,sego", cbDebugSerun, true); //run + swallow exception
|
|
dbgcmdnew("pause", cbDebugPause, false); //pause debugger
|
|
dbgcmdnew("DebugContinue,con", cbDebugContinue, true); //set continue status
|
|
dbgcmdnew("StepInto,sti,SingleStep,sstep,sst", cbDebugStepInto, true); //StepInto
|
|
dbgcmdnew("eStepInto,esti", cbDebugeStepInto, true); //StepInto + skip first chance exceptions
|
|
dbgcmdnew("seStepInto,sesti,eSingleStep,esstep,esst", cbDebugseStepInto, true); //StepInto + swallow exception
|
|
dbgcmdnew("StepOver,step,sto,st", cbDebugStepOver, true); //StepOver
|
|
dbgcmdnew("eStepOver,estep,esto,est", cbDebugeStepOver, true); //StepOver + skip first chance exceptions
|
|
dbgcmdnew("seStepOver,sestep,sesto,sest", cbDebugseStepOver, true); //StepOver + swallow exception
|
|
dbgcmdnew("StepOut,rtr", cbDebugStepOut, true); //StepOut
|
|
dbgcmdnew("eStepOut,ertr", cbDebugeStepOut, true); //rtr + skip first chance exceptions
|
|
dbgcmdnew("skip", cbDebugSkip, true); //skip one instruction
|
|
dbgcmdnew("InstrUndo", cbInstrInstrUndo, true); //Instruction undo
|
|
|
|
//breakpoint control
|
|
dbgcmdnew("SetBPX,bp,bpx", cbDebugSetBPX, true); //breakpoint
|
|
dbgcmdnew("DeleteBPX,bpc,bc", cbDebugDeleteBPX, true); //breakpoint delete
|
|
dbgcmdnew("EnableBPX,bpe,be", cbDebugEnableBPX, true); //breakpoint enable
|
|
dbgcmdnew("DisableBPX,bpd,bd", cbDebugDisableBPX, true); //breakpoint disable
|
|
dbgcmdnew("SetHardwareBreakpoint,bph,bphws", cbDebugSetHardwareBreakpoint, true); //hardware breakpoint
|
|
dbgcmdnew("DeleteHardwareBreakpoint,bphc,bphwc", cbDebugDeleteHardwareBreakpoint, true); //delete hardware breakpoint
|
|
dbgcmdnew("EnableHardwareBreakpoint,bphe,bphwe", cbDebugEnableHardwareBreakpoint, true); //enable hardware breakpoint
|
|
dbgcmdnew("DisableHardwareBreakpoint,bphd,bphwd", cbDebugDisableHardwareBreakpoint, true); //disable hardware breakpoint
|
|
dbgcmdnew("SetMemoryBPX,membp,bpm", cbDebugSetMemoryBpx, true); //SetMemoryBPX
|
|
dbgcmdnew("DeleteMemoryBPX,membpc,bpmc", cbDebugDeleteMemoryBreakpoint, true); //delete memory breakpoint
|
|
dbgcmdnew("EnableMemoryBreakpoint,membpe,bpme", cbDebugEnableMemoryBreakpoint, true); //enable memory breakpoint
|
|
dbgcmdnew("DisableMemoryBreakpoint,membpd,bpmd", cbDebugDisableMemoryBreakpoint, true); //enable memory breakpoint
|
|
dbgcmdnew("LibrarianSetBreakpoint,bpdll", cbDebugBpDll, true); //set dll breakpoint
|
|
dbgcmdnew("LibrarianRemoveBreakpoint,bcdll", cbDebugBcDll, true); //remove dll breakpoint
|
|
dbgcmdnew("LibrarianEnableBreakpoint,bpedll", cbDebugBpDllEnable, true); //enable dll breakpoint
|
|
dbgcmdnew("LibrarianDisableBreakpoint,bpddll", cbDebugBpDllDisable, true); //disable dll breakpoint
|
|
dbgcmdnew("SetExceptionBPX", cbDebugSetExceptionBPX, true); //set exception breakpoint
|
|
dbgcmdnew("DeleteExceptionBPX", cbDebugDeleteExceptionBPX, true); //delete exception breakpoint
|
|
dbgcmdnew("EnableExceptionBPX", cbDebugEnableExceptionBPX, true); //enable exception breakpoint
|
|
dbgcmdnew("DisableExceptionBPX", cbDebugDisableExceptionBPX, true); //disable exception breakpoint
|
|
dbgcmdnew("bpgoto", cbDebugSetBPGoto, true);
|
|
dbgcmdnew("bplist", cbDebugBplist, true); //breakpoint list
|
|
dbgcmdnew("SetBPXOptions,bptype", cbDebugSetBPXOptions, false); //breakpoint type
|
|
|
|
//conditional breakpoint control
|
|
dbgcmdnew("SetBreakpointName,bpname", cbDebugSetBPXName, true); //set breakpoint name
|
|
dbgcmdnew("SetBreakpointCondition,bpcond,bpcnd", cbDebugSetBPXCondition, true); //set breakpoint breakCondition
|
|
dbgcmdnew("SetBreakpointLog,bplog,bpl", cbDebugSetBPXLog, true); //set breakpoint logText
|
|
dbgcmdnew("SetBreakpointLogCondition,bplogcondition", cbDebugSetBPXLogCondition, true); //set breakpoint logCondition
|
|
dbgcmdnew("SetBreakpointCommand", cbDebugSetBPXCommand, true); //set breakpoint command on hit
|
|
dbgcmdnew("SetBreakpointCommandCondition", cbDebugSetBPXCommandCondition, true); //set breakpoint commandCondition
|
|
dbgcmdnew("SetBreakpointFastResume", cbDebugSetBPXFastResume, true); //set breakpoint fast resume
|
|
dbgcmdnew("SetBreakpointSingleshoot", cbDebugSetBPXSingleshoot, true); //set breakpoint singleshoot
|
|
dbgcmdnew("SetBreakpointSilent", cbDebugSetBPXSilent, true); //set breakpoint fast resume
|
|
dbgcmdnew("GetBreakpointHitCount", cbDebugGetBPXHitCount, true); //get breakpoint hit count
|
|
dbgcmdnew("ResetBreakpointHitCount", cbDebugResetBPXHitCount, true); //reset breakpoint hit count
|
|
|
|
dbgcmdnew("SetHardwareBreakpointName,bphwname", cbDebugSetBPXHardwareName, true); //set breakpoint name
|
|
dbgcmdnew("SetHardwareBreakpointCondition,bphwcond", cbDebugSetBPXHardwareCondition, true); //set breakpoint breakCondition
|
|
dbgcmdnew("SetHardwareBreakpointLog,bphwlog", cbDebugSetBPXHardwareLog, true); //set breakpoint logText
|
|
dbgcmdnew("SetHardwareBreakpointLogCondition,bphwlogcondition", cbDebugSetBPXHardwareLogCondition, true); //set breakpoint logText
|
|
dbgcmdnew("SetHardwareBreakpointCommand", cbDebugSetBPXHardwareCommand, true); //set breakpoint command on hit
|
|
dbgcmdnew("SetHardwareBreakpointCommandCondition", cbDebugSetBPXHardwareCommandCondition, true); //set breakpoint commandCondition
|
|
dbgcmdnew("SetHardwareBreakpointFastResume", cbDebugSetBPXHardwareFastResume, true); //set breakpoint fast resume
|
|
dbgcmdnew("SetHardwareBreakpointSingleshoot", cbDebugSetBPXHardwareSingleshoot, true); //set breakpoint singleshoot
|
|
dbgcmdnew("SetHardwareBreakpointSilent", cbDebugSetBPXHardwareSilent, true); //set breakpoint fast resume
|
|
dbgcmdnew("GetHardwareBreakpointHitCount", cbDebugGetBPXHardwareHitCount, true); //get breakpoint hit count
|
|
dbgcmdnew("ResetHardwareBreakpointHitCount", cbDebugResetBPXHardwareHitCount, true); //reset breakpoint hit count
|
|
|
|
dbgcmdnew("SetMemoryBreakpointName,bpmname", cbDebugSetBPXMemoryName, true); //set breakpoint name
|
|
dbgcmdnew("SetMemoryBreakpointCondition,bpmcond", cbDebugSetBPXMemoryCondition, true); //set breakpoint breakCondition
|
|
dbgcmdnew("SetMemoryBreakpointLog,bpmlog", cbDebugSetBPXMemoryLog, true); //set breakpoint log
|
|
dbgcmdnew("SetMemoryBreakpointLogCondition,bpmlogcondition", cbDebugSetBPXMemoryLogCondition, true); //set breakpoint logCondition
|
|
dbgcmdnew("SetMemoryBreakpointCommand", cbDebugSetBPXMemoryCommand, true); //set breakpoint command on hit
|
|
dbgcmdnew("SetMemoryBreakpointCommandCondition", cbDebugSetBPXMemoryCommandCondition, true); //set breakpoint commandCondition
|
|
dbgcmdnew("SetMemoryBreakpointFastResume", cbDebugSetBPXMemoryFastResume, true); //set breakpoint fast resume
|
|
dbgcmdnew("SetMemoryBreakpointSingleshoot", cbDebugSetBPXMemorySingleshoot, true); //set breakpoint singleshoot
|
|
dbgcmdnew("SetMemoryBreakpointSilent", cbDebugSetBPXMemorySilent, true); //set breakpoint fast resume
|
|
dbgcmdnew("GetMemoryBreakpointHitCount", cbDebugGetBPXMemoryHitCount, true); //get breakpoint hit count
|
|
dbgcmdnew("ResetMemoryBreakpointHitCount", cbDebugResetBPXMemoryHitCount, true); //reset breakpoint hit count
|
|
|
|
dbgcmdnew("SetLibrarianBreakpointName", cbDebugSetBPXDLLName, true); //set breakpoint name
|
|
dbgcmdnew("SetLibrarianBreakpointCondition", cbDebugSetBPXDLLCondition, true); //set breakpoint breakCondition
|
|
dbgcmdnew("SetLibrarianBreakpointLog", cbDebugSetBPXDLLLog, true); //set breakpoint log
|
|
dbgcmdnew("SetLibrarianBreakpointLogCondition", cbDebugSetBPXDLLLogCondition, true); //set breakpoint logCondition
|
|
dbgcmdnew("SetLibrarianBreakpointCommand", cbDebugSetBPXDLLCommand, true); //set breakpoint command on hit
|
|
dbgcmdnew("SetLibrarianBreakpointCommandCondition", cbDebugSetBPXDLLCommandCondition, true); //set breakpoint commandCondition
|
|
dbgcmdnew("SetLibrarianBreakpointFastResume", cbDebugSetBPXDLLFastResume, true); //set breakpoint fast resume
|
|
dbgcmdnew("SetLibrarianBreakpointSingleshoot", cbDebugSetBPXDLLSingleshoot, true); //set breakpoint singleshoot
|
|
dbgcmdnew("SetLibrarianBreakpointSilent", cbDebugSetBPXDLLSilent, true); //set breakpoint fast resume
|
|
dbgcmdnew("GetLibrarianBreakpointHitCount", cbDebugGetBPXDLLHitCount, true); //get breakpoint hit count
|
|
dbgcmdnew("ResetLibrarianBreakpointHitCount", cbDebugResetBPXDLLHitCount, true); //reset breakpoint hit count
|
|
|
|
dbgcmdnew("SetExceptionBreakpointName", cbDebugSetBPXExceptionName, true); //set breakpoint name
|
|
dbgcmdnew("SetExceptionBreakpointCondition", cbDebugSetBPXExceptionCondition, true); //set breakpoint breakCondition
|
|
dbgcmdnew("SetExceptionBreakpointLog", cbDebugSetBPXExceptionLog, true); //set breakpoint log
|
|
dbgcmdnew("SetExceptionBreakpointLogCondition", cbDebugSetBPXExceptionLogCondition, true); //set breakpoint logCondition
|
|
dbgcmdnew("SetExceptionBreakpointCommand", cbDebugSetBPXExceptionCommand, true); //set breakpoint command on hit
|
|
dbgcmdnew("SetExceptionBreakpointCommandCondition", cbDebugSetBPXExceptionCommandCondition, true); //set breakpoint commandCondition
|
|
dbgcmdnew("SetExceptionBreakpointFastResume", cbDebugSetBPXExceptionFastResume, true); //set breakpoint fast resume
|
|
dbgcmdnew("SetExceptionBreakpointSingleshoot", cbDebugSetBPXExceptionSingleshoot, true); //set breakpoint singleshoot
|
|
dbgcmdnew("SetExceptionBreakpointSilent", cbDebugSetBPXExceptionSilent, true); //set breakpoint fast resume
|
|
dbgcmdnew("GetExceptionBreakpointHitCount", cbDebugGetBPXExceptionHitCount, true); //get breakpoint hit count
|
|
dbgcmdnew("ResetExceptionBreakpointHitCount", cbDebugResetBPXExceptionHitCount, true); //reset breakpoint hit count
|
|
|
|
//tracing
|
|
dbgcmdnew("TraceIntoConditional,ticnd", cbDebugTraceIntoConditional, true); //Trace into conditional
|
|
dbgcmdnew("TraceOverConditional,tocnd", cbDebugTraceOverConditional, true); //Trace over conditional
|
|
dbgcmdnew("TraceIntoBeyondTraceCoverage,TraceIntoBeyondTraceRecord,tibt", cbDebugTraceIntoBeyondTraceRecord, true); //Trace into beyond trace record
|
|
dbgcmdnew("TraceOverBeyondTraceCoverage,TraceOverBeyondTraceRecord,tobt", cbDebugTraceOverBeyondTraceRecord, true); //Trace over beyond trace record
|
|
dbgcmdnew("TraceIntoIntoTraceCoverage,TraceIntoIntoTraceRecord,tiit", cbDebugTraceIntoIntoTraceRecord, true); //Trace into into trace record
|
|
dbgcmdnew("TraceOverIntoTraceCoverage,TraceOverIntoTraceRecord,toit", cbDebugTraceOverIntoTraceRecord, true); //Trace over into trace record
|
|
dbgcmdnew("RunToParty", cbDebugRunToParty, true); //Run to code in a party
|
|
dbgcmdnew("RunToUserCode,rtu", cbDebugRunToUserCode, true); //Run to user code
|
|
dbgcmdnew("TraceSetLog,SetTraceLog", cbDebugTraceSetLog, true); //Set trace log text + condition
|
|
dbgcmdnew("TraceSetCommand,SetTraceCommand", cbDebugTraceSetCommand, true); //Set trace command text + condition
|
|
dbgcmdnew("TraceSetSwitchCondition,SetTraceSwitchCondition", cbDebugTraceSetSwitchCondition, true); //Set trace switch condition
|
|
dbgcmdnew("TraceSetLogFile,SetTraceLogFile", cbDebugTraceSetLogFile, true); //Set trace log file
|
|
dbgcmdnew("StartTraceRecording,StartRunTrace,opentrace", cbDebugStartTraceRecording, true); //start run trace (Ollyscript command "opentrace" "opens run trace window")
|
|
dbgcmdnew("StopTraceRecording,StopRunTrace,tc", cbDebugStopTraceRecording, true); //stop run trace (and Ollyscript command)
|
|
|
|
//thread control
|
|
dbgcmdnew("createthread,threadcreate,newthread,threadnew", cbDebugCreatethread, true); //create thread
|
|
dbgcmdnew("switchthread,threadswitch", cbDebugSwitchthread, true); //switch thread
|
|
dbgcmdnew("suspendthread,threadsuspend", cbDebugSuspendthread, true); //suspend thread
|
|
dbgcmdnew("resumethread,threadresume", cbDebugResumethread, true); //resume thread
|
|
dbgcmdnew("killthread,threadkill", cbDebugKillthread, true); //kill thread
|
|
dbgcmdnew("suspendallthreads,threadsuspendall", cbDebugSuspendAllThreads, true); //suspend all threads
|
|
dbgcmdnew("resumeallthreads,threadresumeall", cbDebugResumeAllThreads, true); //resume all threads
|
|
dbgcmdnew("setthreadpriority,setprioritythread,threadsetpriority", cbDebugSetPriority, true); //set thread priority
|
|
dbgcmdnew("threadsetname,setthreadname", cbDebugSetthreadname, true); //set thread name
|
|
|
|
//memory operations
|
|
dbgcmdnew("alloc", cbDebugAlloc, true); //allocate memory
|
|
dbgcmdnew("free", cbDebugFree, true); //free memory
|
|
dbgcmdnew("Fill,memset", cbDebugMemset, true); //memset
|
|
dbgcmdnew("memcpy", cbDebugMemcpy, true); //memcpy
|
|
dbgcmdnew("getpagerights,getrightspage", cbDebugGetPageRights, true);
|
|
dbgcmdnew("setpagerights,setrightspage", cbDebugSetPageRights, true);
|
|
dbgcmdnew("savedata", cbInstrSavedata, true); //save data to disk
|
|
|
|
//operating system control
|
|
dbgcmdnew("GetPrivilegeState", cbGetPrivilegeState, true); //get priv state
|
|
dbgcmdnew("EnablePrivilege", cbEnablePrivilege, true); //enable priv
|
|
dbgcmdnew("DisablePrivilege", cbDisablePrivilege, true); //disable priv
|
|
dbgcmdnew("handleclose,closehandle", cbHandleClose, true); //close remote handle
|
|
dbgcmdnew("EnableWindow", cbEnableWindow, true); //enable remote window
|
|
dbgcmdnew("DisableWindow", cbDisableWindow, true); //disable remote window
|
|
|
|
//watch control
|
|
dbgcmdnew("AddWatch", cbAddWatch, true); // add watch
|
|
dbgcmdnew("DelWatch", cbDelWatch, true); // delete watch
|
|
dbgcmdnew("SetWatchdog", cbSetWatchdog, true); // Setup watchdog
|
|
dbgcmdnew("SetWatchExpression", cbSetWatchExpression, true); // Set watch expression
|
|
dbgcmdnew("SetWatchName", cbSetWatchName, true); // Set watch name
|
|
dbgcmdnew("SetWatchType", cbSetWatchType, true); // Set watch type
|
|
dbgcmdnew("CheckWatchdog", cbCheckWatchdog, true); // Watchdog
|
|
|
|
|
|
//variables
|
|
dbgcmdnew("varnew,var", cbInstrVar, false); //make a variable arg1:name,[arg2:value]
|
|
dbgcmdnew("vardel", cbInstrVarDel, false); //delete a variable, arg1:variable name
|
|
dbgcmdnew("varlist", cbInstrVarList, false); //list variables[arg1:type filter]
|
|
|
|
//searching
|
|
dbgcmdnew("find", cbInstrFind, true); //find a pattern
|
|
dbgcmdnew("findall", cbInstrFindAll, true); //find all patterns
|
|
dbgcmdnew("findallmem,findmemall", cbInstrFindAllMem, true); //memory map pattern find
|
|
dbgcmdnew("findasm,asmfind", cbInstrFindAsm, true); //find instruction
|
|
dbgcmdnew("reffind,findref,ref", cbInstrRefFind, true); //find references to a value
|
|
dbgcmdnew("reffindrange,findrefrange,refrange", cbInstrRefFindRange, true);
|
|
dbgcmdnew("refstr,strref", cbInstrRefStr, true); //find string references
|
|
dbgcmdnew("reffunctionpointer", cbInstrRefFuncionPointer, true); //find function pointers
|
|
dbgcmdnew("modcallfind", cbInstrModCallFind, true); //find intermodular calls
|
|
dbgcmdnew("setmaxfindresult,findsetmaxresult", cbInstrSetMaxFindResult, false); //set the maximum number of occurences found
|
|
dbgcmdnew("guidfind,findguid", cbInstrGUIDFind, true); //find GUID references TODO: undocumented
|
|
|
|
//user database
|
|
dbgcmdnew("dbsave,savedb", cbInstrDbsave, true); //save program database
|
|
dbgcmdnew("dbload,loaddb", cbInstrDbload, true); //load program database
|
|
dbgcmdnew("dbclear,cleardb", cbInstrDbclear, true); //clear program database
|
|
|
|
dbgcmdnew("commentset,cmt,cmtset", cbInstrCommentSet, true); //set/edit comment
|
|
dbgcmdnew("commentdel,cmtc,cmtdel", cbInstrCommentDel, true); //delete comment
|
|
dbgcmdnew("commentlist", cbInstrCommentList, true); //list comments
|
|
dbgcmdnew("commentclear", cbInstrCommentClear, true); //clear comments
|
|
|
|
dbgcmdnew("labelset,lbl,lblset", cbInstrLabelSet, true); //set/edit label
|
|
dbgcmdnew("labeldel,lblc,lbldel", cbInstrLabelDel, true); //delete label
|
|
dbgcmdnew("labellist", cbInstrLabelList, true); //list labels
|
|
dbgcmdnew("labelclear", cbInstrLabelClear, true); //clear labels
|
|
|
|
dbgcmdnew("bookmarkset,bookmark", cbInstrBookmarkSet, true); //set bookmark
|
|
dbgcmdnew("bookmarkdel,bookmarkc", cbInstrBookmarkDel, true); //delete bookmark
|
|
dbgcmdnew("bookmarklist", cbInstrBookmarkList, true); //list bookmarks
|
|
dbgcmdnew("bookmarkclear", cbInstrBookmarkClear, true); //clear bookmarks
|
|
|
|
dbgcmdnew("functionadd,func", cbInstrFunctionAdd, true); //function
|
|
dbgcmdnew("functiondel,funcc", cbInstrFunctionDel, true); //function
|
|
dbgcmdnew("functionlist", cbInstrFunctionList, true); //list functions
|
|
dbgcmdnew("functionclear", cbInstrFunctionClear, false); //delete all functions
|
|
|
|
dbgcmdnew("argumentadd", cbInstrArgumentAdd, true); //add argument
|
|
dbgcmdnew("argumentdel", cbInstrArgumentDel, true); //delete argument
|
|
dbgcmdnew("argumentlist", cbInstrArgumentList, true); //list arguments
|
|
dbgcmdnew("argumentclear", cbInstrArgumentClear, false); //delete all arguments
|
|
|
|
dbgcmdnew("loopadd", cbInstrLoopAdd, true); //add loop TODO: undocumented
|
|
dbgcmdnew("loopdel", cbInstrLoopDel, true); //delete loop TODO: undocumented
|
|
dbgcmdnew("looplist", cbInstrLoopList, true); //list loops TODO: undocumented
|
|
dbgcmdnew("loopclear", cbInstrLoopClear, true); //clear loops TODO: undocumented
|
|
|
|
//analysis
|
|
dbgcmdnew("analyse,analyze,anal", cbInstrAnalyse, true); //secret analysis command
|
|
dbgcmdnew("exanal,exanalyse,exanalyze", cbInstrExanalyse, true); //exception directory analysis
|
|
dbgcmdnew("cfanal,cfanalyse,cfanalyze", cbInstrCfanalyse, true); //control flow analysis
|
|
dbgcmdnew("analyse_nukem,analyze_nukem,anal_nukem", cbInstrAnalyseNukem, true); //secret analysis command #2
|
|
dbgcmdnew("analxrefs,analx", cbInstrAnalxrefs, true); //analyze xrefs
|
|
dbgcmdnew("analrecur,analr", cbInstrAnalrecur, true); //analyze a single function
|
|
dbgcmdnew("analadv", cbInstrAnalyseadv, true); //analyze xref,function and data
|
|
dbgcmdnew("traceexecute", cbInstrTraceexecute, true); //execute trace record on address TODO: undocumented
|
|
|
|
dbgcmdnew("virtualmod", cbInstrVirtualmod, true); //virtual module
|
|
dbgcmdnew("symdownload,downloadsym", cbDebugDownloadSymbol, true); //download symbols
|
|
dbgcmdnew("symload,loadsym", cbDebugLoadSymbol, true); //load symbols
|
|
dbgcmdnew("symunload,unloadsym", cbDebugUnloadSymbol, true); //unload symbols
|
|
dbgcmdnew("imageinfo,modimageinfo", cbInstrImageinfo, true); //print module image information
|
|
dbgcmdnew("GetRelocSize,grs", cbInstrGetRelocSize, true); //get relocation table size
|
|
dbgcmdnew("exhandlers", cbInstrExhandlers, true); //enumerate exception handlers
|
|
dbgcmdnew("exinfo", cbInstrExinfo, true); //dump last exception information
|
|
|
|
//types
|
|
dbgcmdnew("DataUnknown", cbInstrDataUnknown, true); //mark as Unknown
|
|
dbgcmdnew("DataByte,db", cbInstrDataByte, true); //mark as Byte
|
|
dbgcmdnew("DataWord,dw", cbInstrDataWord, true); //mark as Word
|
|
dbgcmdnew("DataDword,dd", cbInstrDataDword, true); //mark as Dword
|
|
dbgcmdnew("DataFword", cbInstrDataFword, true); //mark as Fword
|
|
dbgcmdnew("DataQword,dq", cbInstrDataQword, true); //mark as Qword
|
|
dbgcmdnew("DataTbyte", cbInstrDataTbyte, true); //mark as Tbyte
|
|
dbgcmdnew("DataOword", cbInstrDataOword, true); //mark as Oword
|
|
dbgcmdnew("DataMmword", cbInstrDataMmword, true); //mark as Mmword
|
|
dbgcmdnew("DataXmmword", cbInstrDataXmmword, true); //mark as Xmmword
|
|
dbgcmdnew("DataYmmword", cbInstrDataYmmword, true); //mark as Ymmword
|
|
dbgcmdnew("DataFloat,DataReal4,df", cbInstrDataFloat, true); //mark as Float
|
|
dbgcmdnew("DataDouble,DataReal8", cbInstrDataDouble, true); //mark as Double
|
|
dbgcmdnew("DataLongdouble,DataReal10", cbInstrDataLongdouble, true); //mark as Longdouble
|
|
dbgcmdnew("DataAscii,da", cbInstrDataAscii, true); //mark as Ascii
|
|
dbgcmdnew("DataUnicode,du", cbInstrDataUnicode, true); //mark as Unicode
|
|
dbgcmdnew("DataCode,dc", cbInstrDataCode, true); //mark as Code
|
|
dbgcmdnew("DataJunk", cbInstrDataJunk, true); //mark as Junk
|
|
dbgcmdnew("DataMiddle", cbInstrDataMiddle, true); //mark as Middle
|
|
|
|
dbgcmdnew("AddType", cbInstrAddType, false); //AddType
|
|
dbgcmdnew("AddStruct", cbInstrAddStruct, false); //AddStruct
|
|
dbgcmdnew("AddUnion", cbInstrAddUnion, false); //AddUnion
|
|
dbgcmdnew("AddMember", cbInstrAddMember, false); //AddMember
|
|
dbgcmdnew("AppendMember", cbInstrAppendMember, false); //AppendMember
|
|
dbgcmdnew("AddFunction", cbInstrAddFunction, false); //AddFunction
|
|
dbgcmdnew("AddArg", cbInstrAddArg, false); //AddArg
|
|
dbgcmdnew("AppendArg", cbInstrAppendArg, false); //AppendArg
|
|
dbgcmdnew("SizeofType", cbInstrSizeofType, false); //SizeofType
|
|
dbgcmdnew("VisitType", cbInstrVisitType, false); //VisitType
|
|
dbgcmdnew("ClearTypes", cbInstrClearTypes, false); //ClearTypes
|
|
dbgcmdnew("RemoveType", cbInstrRemoveType, false); //RemoveType
|
|
dbgcmdnew("EnumTypes", cbInstrEnumTypes, false); //EnumTypes
|
|
dbgcmdnew("LoadTypes", cbInstrLoadTypes, false); //LoadTypes
|
|
dbgcmdnew("ParseTypes", cbInstrParseTypes, false); //ParseTypes
|
|
|
|
//plugins
|
|
dbgcmdnew("StartScylla,scylla,imprec", cbDebugStartScylla, false); //start scylla
|
|
dbgcmdnew("plugload,pluginload,loadplugin", cbInstrPluginLoad, false); //load plugin
|
|
dbgcmdnew("plugunload,pluginunload,unloadplugin", cbInstrPluginUnload, false); //unload plugin
|
|
dbgcmdnew("plugreload,pluginreload,reloadplugin", cbInstrPluginReload, false); //reload plugin
|
|
|
|
//script
|
|
dbgcmdnew("scriptload", cbScriptLoad, false);
|
|
dbgcmdnew("msg", cbScriptMsg, false);
|
|
dbgcmdnew("msgyn", cbScriptMsgyn, false);
|
|
dbgcmdnew("log", cbInstrLog, false); //log command with superawesome hax
|
|
dbgcmdnew("htmllog", cbInstrHtmlLog, false); //command for testing
|
|
dbgcmdnew("scriptdll,dllscript", cbScriptDll, false); //execute a script DLL
|
|
dbgcmdnew("scriptcmd", cbScriptCmd, false); // execute a script command TODO: undocumented
|
|
|
|
//gui
|
|
dbgcmdnew("disasm,dis,d", cbDebugDisasm, true); //doDisasm
|
|
dbgcmdnew("dump", cbDebugDump, true); //dump at address
|
|
dbgcmdnew("sdump", cbDebugStackDump, true); //dump at stack address
|
|
dbgcmdnew("memmapdump", cbDebugMemmapdump, true);
|
|
dbgcmdnew("graph", cbInstrGraph, true); //graph function
|
|
dbgcmdnew("guiupdateenable", cbInstrEnableGuiUpdate, true); //enable gui message
|
|
dbgcmdnew("guiupdatedisable", cbInstrDisableGuiUpdate, true); //disable gui message
|
|
dbgcmdnew("setfreezestack", cbDebugSetfreezestack, false); //freeze the stack from auto updates
|
|
dbgcmdnew("refinit", cbInstrRefinit, false);
|
|
dbgcmdnew("refadd", cbInstrRefadd, false);
|
|
dbgcmdnew("refget", cbInstrRefGet, false);
|
|
dbgcmdnew("EnableLog,LogEnable", cbInstrEnableLog, false); //enable log
|
|
dbgcmdnew("DisableLog,LogDisable", cbInstrDisableLog, false); //disable log
|
|
dbgcmdnew("ClearLog,cls,lc,lclr", cbClearLog, false); //clear the log
|
|
dbgcmdnew("AddFavouriteTool", cbInstrAddFavTool, false); //add favourite tool
|
|
dbgcmdnew("AddFavouriteCommand", cbInstrAddFavCmd, false); //add favourite command
|
|
dbgcmdnew("AddFavouriteToolShortcut,SetFavouriteToolShortcut", cbInstrSetFavToolShortcut, false); //set favourite tool shortcut
|
|
dbgcmdnew("FoldDisassembly", cbInstrFoldDisassembly, true); //fold disassembly segment
|
|
dbgcmdnew("guiupdatetitle", cbDebugUpdateTitle, true); // set relevant disassembly title
|
|
dbgcmdnew("showref", cbShowReferences, false); // show references window
|
|
dbgcmdnew("symfollow", cbSymbolsFollow, false); // follow address in symbols tab
|
|
dbgcmdnew("gototrace,tracegoto", cbGotoTrace, false); // goto index in trace tab
|
|
|
|
//misc
|
|
dbgcmdnew("chd", cbInstrChd, false); //Change directory
|
|
dbgcmdnew("zzz,doSleep", cbInstrZzz, false); //sleep
|
|
|
|
dbgcmdnew("HideDebugger,dbh,hide", cbDebugHide, true); //HideDebugger
|
|
dbgcmdnew("loadlib", cbDebugLoadLib, true); //Load DLL
|
|
dbgcmdnew("freelib", cbDebugFreeLib, true); //Unload DLL TODO: undocumented
|
|
dbgcmdnew("asm", cbInstrAssemble, true); //assemble instruction
|
|
dbgcmdnew("gpa", cbInstrGpa, true); //get proc address
|
|
|
|
dbgcmdnew("setjit,jitset", cbDebugSetJIT, false); //set JIT
|
|
dbgcmdnew("getjit,jitget", cbDebugGetJIT, false); //get JIT
|
|
dbgcmdnew("getjitauto,jitgetauto", cbDebugGetJITAuto, false); //get JIT Auto
|
|
dbgcmdnew("setjitauto,jitsetauto", cbDebugSetJITAuto, false); //set JIT Auto
|
|
|
|
dbgcmdnew("getcommandline,getcmdline", cbDebugGetCmdline, true); //Get CmdLine
|
|
dbgcmdnew("setcommandline,setcmdline", cbDebugSetCmdline, true); //Set CmdLine
|
|
|
|
dbgcmdnew("mnemonichelp", cbInstrMnemonichelp, false); //mnemonic help
|
|
dbgcmdnew("mnemonicbrief", cbInstrMnemonicbrief, false); //mnemonic brief
|
|
|
|
dbgcmdnew("config", cbInstrConfig, false); //get or set config uint
|
|
dbgcmdnew("restartadmin,runas,adminrestart", cbInstrRestartadmin, false); //restart x64dbg as administrator
|
|
|
|
//undocumented
|
|
dbgcmdnew("bench", cbDebugBenchmark, true); //benchmark test (readmem etc)
|
|
dbgcmdnew("dprintf", cbPrintf, false); //printf
|
|
dbgcmdnew("setstr,strset", cbInstrSetstr, false); //set a string variable
|
|
dbgcmdnew("getstr,strget", cbInstrGetstr, false); //get a string variable
|
|
dbgcmdnew("copystr,strcpy", cbInstrCopystr, true); //write a string variable to memory
|
|
dbgcmdnew("zydis", cbInstrZydis, true); //disassemble using zydis
|
|
dbgcmdnew("visualize", cbInstrVisualize, true); //visualize analysis
|
|
dbgcmdnew("meminfo", cbInstrMeminfo, true); //command to debug memory map bugs
|
|
dbgcmdnew("briefcheck", cbInstrBriefcheck, true); //check if mnemonic briefs are missing
|
|
dbgcmdnew("focusinfo", cbInstrFocusinfo, false);
|
|
dbgcmdnew("printstack,logstack", cbInstrPrintStack, true); //print the call stack
|
|
dbgcmdnew("flushlog", cbInstrFlushlog, false); //flush the log
|
|
dbgcmdnew("AnimateWait", cbInstrAnimateWait, true); //Wait for the debuggee to pause.
|
|
dbgcmdnew("dbdecompress", cbInstrDbdecompress, false); //Decompress a database.
|
|
dbgcmdnew("DebugFlags", cbInstrDebugFlags, false); //Set ntdll LdrpDebugFlags
|
|
dbgcmdnew("LabelRuntimeFunctions", cbInstrLabelRuntimeFunctions, true); //Label exception directory entries
|
|
dbgcmdnew("cmdtest", cbInstrCmdTest, false); //log argv verbatim
|
|
};
|
|
|
|
bool cbCommandProvider(char* cmd, int maxlen)
|
|
{
|
|
MESSAGE msg;
|
|
MsgWait(gMsgStack, &msg);
|
|
if(bStopCommandLoopThread)
|
|
return false;
|
|
char* newcmd = (char*)msg.param1;
|
|
if(strlen(newcmd) >= deflen)
|
|
{
|
|
dprintf(QT_TRANSLATE_NOOP("DBG", "command cut at ~%d characters\n"), deflen);
|
|
newcmd[deflen - 2] = 0;
|
|
}
|
|
strcpy_s(cmd, deflen, newcmd);
|
|
efree(newcmd, "cbCommandProvider:newcmd"); //free allocated command
|
|
return true;
|
|
}
|
|
|
|
/**
|
|
\brief Execute command asynchronized.
|
|
*/
|
|
extern "C" DLL_EXPORT bool _dbg_dbgcmdexec(const char* cmd)
|
|
{
|
|
int len = (int)strlen(cmd);
|
|
char* newcmd = (char*)emalloc((len + 1) * sizeof(char), "_dbg_dbgcmdexec:newcmd");
|
|
strcpy_s(newcmd, len + 1, cmd);
|
|
return MsgSend(gMsgStack, 0, (duint)newcmd, 0);
|
|
}
|
|
|
|
static DWORD WINAPI DbgCommandLoopThread(void* a)
|
|
{
|
|
cmdloop();
|
|
return 0;
|
|
}
|
|
|
|
typedef void(*SCRIPTDLLSTART)();
|
|
|
|
struct DLLSCRIPTEXECTHREADINFO
|
|
{
|
|
DLLSCRIPTEXECTHREADINFO(HINSTANCE hScriptDll, SCRIPTDLLSTART AsyncStart)
|
|
: hScriptDll(hScriptDll),
|
|
AsyncStart(AsyncStart)
|
|
{
|
|
}
|
|
|
|
HINSTANCE hScriptDll;
|
|
SCRIPTDLLSTART AsyncStart;
|
|
};
|
|
|
|
static DWORD WINAPI DbgScriptDllExecThread(void* a)
|
|
{
|
|
auto info = (DLLSCRIPTEXECTHREADINFO*)a;
|
|
auto AsyncStart = info->AsyncStart;
|
|
auto hScriptDll = info->hScriptDll;
|
|
delete info;
|
|
|
|
dputs(QT_TRANSLATE_NOOP("DBG", "[Script DLL] Calling export \"AsyncStart\"...\n"));
|
|
AsyncStart();
|
|
dputs(QT_TRANSLATE_NOOP("DBG", "[Script DLL] \"AsyncStart\" returned!\n"));
|
|
|
|
dputs(QT_TRANSLATE_NOOP("DBG", "[Script DLL] Calling FreeLibrary..."));
|
|
if(FreeLibrary(hScriptDll))
|
|
dputs(QT_TRANSLATE_NOOP("DBG", "success!\n"));
|
|
else
|
|
{
|
|
String error = stringformatinline(StringUtils::sprintf("{winerror@%d}", GetLastError()));
|
|
dprintf(QT_TRANSLATE_NOOP("DBG", "failure (%s)...\n"), error.c_str());
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|
|
static bool DbgScriptDllExec(const char* dll)
|
|
{
|
|
String dllPath = dll;
|
|
if(dllPath.find('\\') == String::npos)
|
|
dllPath = String(scriptDllDir) + String(dll);
|
|
|
|
dprintf(QT_TRANSLATE_NOOP("DBG", "[Script DLL] Loading Script DLL \"%s\"...\n"), dllPath.c_str());
|
|
|
|
auto hScriptDll = LoadLibraryW(StringUtils::Utf8ToUtf16(dllPath).c_str());
|
|
if(hScriptDll)
|
|
{
|
|
dprintf(QT_TRANSLATE_NOOP("DBG", "[Script DLL] DLL loaded on 0x%p!\n"), hScriptDll);
|
|
|
|
auto AsyncStart = SCRIPTDLLSTART(GetProcAddress(hScriptDll, "AsyncStart"));
|
|
if(AsyncStart)
|
|
{
|
|
dputs(QT_TRANSLATE_NOOP("DBG", "[Script DLL] Creating thread to call the export \"AsyncStart\"...\n"));
|
|
CloseHandle(CreateThread(nullptr, 0, DbgScriptDllExecThread, new DLLSCRIPTEXECTHREADINFO(hScriptDll, AsyncStart), 0, nullptr)); //on-purpose memory leak here
|
|
}
|
|
else
|
|
{
|
|
auto Start = SCRIPTDLLSTART(GetProcAddress(hScriptDll, "Start"));
|
|
if(Start)
|
|
{
|
|
dputs(QT_TRANSLATE_NOOP("DBG", "[Script DLL] Calling export \"Start\"...\n"));
|
|
Start();
|
|
dputs(QT_TRANSLATE_NOOP("DBG", "[Script DLL] \"Start\" returned!\n"));
|
|
}
|
|
else
|
|
{
|
|
String error = stringformatinline(StringUtils::sprintf("{winerror@%d}", GetLastError()));
|
|
dprintf(QT_TRANSLATE_NOOP("DBG", "[Script DLL] Failed to find the exports \"AsyncStart\" or \"Start\" (%s)!\n"), error.c_str());
|
|
}
|
|
|
|
dprintf(QT_TRANSLATE_NOOP("DBG", "[Script DLL] Calling FreeLibrary..."));
|
|
if(FreeLibrary(hScriptDll))
|
|
dputs(QT_TRANSLATE_NOOP("DBG", "success!\n"));
|
|
else
|
|
{
|
|
String error = stringformatinline(StringUtils::sprintf("{winerror@%d}", GetLastError()));
|
|
dprintf(QT_TRANSLATE_NOOP("DBG", "failure (%s)...\n"), error.c_str());
|
|
}
|
|
}
|
|
}
|
|
else
|
|
{
|
|
String error = stringformatinline(StringUtils::sprintf("{winerror@%d}", GetLastError()));
|
|
dprintf(QT_TRANSLATE_NOOP("DBG", "[Script DLL] LoadLibary failed (%s)!\n"), error.c_str());
|
|
}
|
|
|
|
return true;
|
|
}
|
|
|
|
static DWORD WINAPI loadDbThread(LPVOID hEvent)
|
|
{
|
|
{
|
|
// Take exclusive ownership over the modules to prevent a race condition with cbCreateProcess
|
|
EXCLUSIVE_ACQUIRE(LockModules);
|
|
|
|
// Signal the startup thread that we have the lock
|
|
SetEvent(hEvent);
|
|
|
|
// Load syscall indices
|
|
dputs(QT_TRANSLATE_NOOP("DBG", "Retrieving syscall indices..."));
|
|
if(SyscallInit())
|
|
dputs(QT_TRANSLATE_NOOP("DBG", "Syscall indices loaded!"));
|
|
else
|
|
dputs(QT_TRANSLATE_NOOP("DBG", "Failed to load syscall indices..."));
|
|
}
|
|
|
|
// Load error codes
|
|
if(ErrorCodeInit(StringUtils::sprintf("%s\\..\\errordb.txt", szProgramDir)))
|
|
dputs(QT_TRANSLATE_NOOP("DBG", "Error codes database loaded!"));
|
|
else
|
|
dputs(QT_TRANSLATE_NOOP("DBG", "Failed to load error codes..."));
|
|
|
|
// Load exception codes
|
|
if(ExceptionCodeInit(StringUtils::sprintf("%s\\..\\exceptiondb.txt", szProgramDir)))
|
|
dputs(QT_TRANSLATE_NOOP("DBG", "Exception codes database loaded!"));
|
|
else
|
|
dputs(QT_TRANSLATE_NOOP("DBG", "Failed to load exception codes..."));
|
|
|
|
// Load NTSTATUS codes
|
|
if(NtStatusCodeInit(StringUtils::sprintf("%s\\..\\ntstatusdb.txt", szProgramDir)))
|
|
dputs(QT_TRANSLATE_NOOP("DBG", "NTSTATUS codes database loaded!"));
|
|
else
|
|
dputs(QT_TRANSLATE_NOOP("DBG", "Failed to load NTSTATUS codes..."));
|
|
|
|
// Load Windows constants
|
|
if(ConstantCodeInit(StringUtils::sprintf("%s\\..\\winconstants.txt", szProgramDir)))
|
|
dputs(QT_TRANSLATE_NOOP("DBG", "Windows constant database loaded!"));
|
|
else
|
|
dputs(QT_TRANSLATE_NOOP("DBG", "Failed to load Windows constants..."));
|
|
|
|
// Load global notes
|
|
dputs(QT_TRANSLATE_NOOP("DBG", "Reading notes file..."));
|
|
notesFile = String(szProgramDir) + "\\notes.txt";
|
|
String text;
|
|
if(!FileExists(notesFile.c_str()) || FileHelper::ReadAllText(notesFile, text))
|
|
GuiSetGlobalNotes(text.c_str());
|
|
else
|
|
dputs(QT_TRANSLATE_NOOP("DBG", "Reading notes failed..."));
|
|
|
|
dputs(QT_TRANSLATE_NOOP("DBG", "File read thread finished!"));
|
|
|
|
return 0;
|
|
}
|
|
|
|
static WString escape(WString cmdline)
|
|
{
|
|
StringUtils::ReplaceAll(cmdline, L"\\", L"\\\\");
|
|
StringUtils::ReplaceAll(cmdline, L"\"", L"\\\"");
|
|
return cmdline;
|
|
}
|
|
|
|
#include <delayimp.h>
|
|
|
|
// https://devblogs.microsoft.com/oldnewthing/20170126-00/?p=95265
|
|
static FARPROC WINAPI delayHook(unsigned dliNotify, PDelayLoadInfo pdli)
|
|
{
|
|
if(dliNotify == dliNotePreLoadLibrary && _stricmp(pdli->szDll, "TitanEngine.dll") == 0)
|
|
{
|
|
String fullPath = szProgramDir;
|
|
fullPath += '\\';
|
|
|
|
switch(DbgGetDebugEngine())
|
|
{
|
|
case DebugEngineGleeBug:
|
|
fullPath += "GleeBug\\TitanEngine.dll";
|
|
break;
|
|
case DebugEngineStaticEngine:
|
|
fullPath += "StaticEngine\\TitanEngine.dll";
|
|
break;
|
|
case DebugEngineTitanEngine:
|
|
default:
|
|
return 0;
|
|
}
|
|
|
|
auto hModule = LoadLibraryW(StringUtils::Utf8ToUtf16(fullPath).c_str());
|
|
if(hModule)
|
|
{
|
|
dprintf(QT_TRANSLATE_NOOP("DBG", "Successfully loaded %s!\n"), fullPath.c_str());
|
|
}
|
|
else
|
|
{
|
|
dprintf(QT_TRANSLATE_NOOP("DBG", "Failed to load %s, falling back to regular TitanEngine.dll"), fullPath.c_str());
|
|
}
|
|
return (FARPROC)hModule;
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|
|
// Visual Studio 2015 Update 3 made this const per default
|
|
// https://dev.to/yumetodo/list-of-mscver-and-mscfullver-8nd
|
|
#if _MSC_FULL_VER >= 190024210
|
|
const
|
|
#endif // _MSC_FULL_VER
|
|
PfnDliHook __pfnDliNotifyHook2 = delayHook;
|
|
|
|
extern "C" DLL_EXPORT const char* _dbg_dbginit()
|
|
{
|
|
if(!*szProgramDir)
|
|
return "GetModuleFileNameW failed!";
|
|
|
|
if(!EngineCheckStructAlignment(UE_STRUCT_TITAN_ENGINE_CONTEXT, sizeof(TITAN_ENGINE_CONTEXT_t)))
|
|
return "Invalid TITAN_ENGINE_CONTEXT_t alignment!";
|
|
|
|
static_assert(sizeof(TITAN_ENGINE_CONTEXT_t) == sizeof(REGISTERCONTEXT), "Invalid REGISTERCONTEXT alignment!");
|
|
|
|
strcpy_s(szDllLoaderPath, szProgramDir);
|
|
strcat_s(szDllLoaderPath, "\\loaddll.exe");
|
|
|
|
#ifdef ENABLE_MEM_TRACE
|
|
strcpy_s(alloctrace, szProgramDir);
|
|
strcat_s(alloctrace, "\\alloctrace.txt");
|
|
DeleteFileW(StringUtils::Utf8ToUtf16(alloctrace).c_str());
|
|
setalloctrace(alloctrace);
|
|
#endif //ENABLE_MEM_TRACE
|
|
|
|
dputs(QT_TRANSLATE_NOOP("DBG", "Initializing wait objects..."));
|
|
waitinitialize();
|
|
SafeDbghelpInitialize();
|
|
dputs(QT_TRANSLATE_NOOP("DBG", "Initializing debugger..."));
|
|
dbginit();
|
|
dputs(QT_TRANSLATE_NOOP("DBG", "Initializing debugger functions..."));
|
|
dbgfunctionsinit();
|
|
//#ifdef ENABLE_MEM_TRACE
|
|
dputs(QT_TRANSLATE_NOOP("DBG", "Setting JSON memory management functions..."));
|
|
json_set_alloc_funcs(json_malloc, json_free);
|
|
//#endif //ENABLE_MEM_TRACE
|
|
dputs(QT_TRANSLATE_NOOP("DBG", "Initializing Zydis..."));
|
|
Zydis::GlobalInitialize();
|
|
dputs(QT_TRANSLATE_NOOP("DBG", "Getting directory information..."));
|
|
|
|
strcpy_s(scriptDllDir, szProgramDir);
|
|
strcat_s(scriptDllDir, "\\scripts\\");
|
|
initDataInstMap();
|
|
|
|
dputs(QT_TRANSLATE_NOOP("DBG", "Start file read thread..."));
|
|
{
|
|
auto hEvent = CreateEventW(nullptr, false, FALSE, nullptr);
|
|
CloseHandle(CreateThread(nullptr, 0, loadDbThread, hEvent, 0, nullptr));
|
|
// Wait until the loadDbThread signals it's finished
|
|
WaitForSingleObject(hEvent, INFINITE);
|
|
CloseHandle(hEvent);
|
|
}
|
|
|
|
// Create database directory in the local debugger folder
|
|
DbSetPath(StringUtils::sprintf("%s\\db", szProgramDir).c_str(), nullptr);
|
|
|
|
char szLocalSymbolPath[MAX_PATH] = "";
|
|
strcpy_s(szLocalSymbolPath, szProgramDir);
|
|
strcat_s(szLocalSymbolPath, "\\symbols");
|
|
|
|
Memory<char*> cachePath(MAX_SETTING_SIZE + 1);
|
|
if(!BridgeSettingGet("Symbols", "CachePath", cachePath()) || !*cachePath())
|
|
{
|
|
strcpy_s(szSymbolCachePath, szLocalSymbolPath);
|
|
BridgeSettingSet("Symbols", "CachePath", ".\\symbols");
|
|
}
|
|
else
|
|
{
|
|
if(_strnicmp(cachePath(), ".\\", 2) == 0)
|
|
{
|
|
strncpy_s(szSymbolCachePath, szProgramDir, _TRUNCATE);
|
|
strncat_s(szSymbolCachePath, cachePath() + 1, _TRUNCATE);
|
|
}
|
|
else
|
|
{
|
|
// Trim the buffer to fit inside MAX_PATH
|
|
strncpy_s(szSymbolCachePath, cachePath(), _TRUNCATE);
|
|
}
|
|
|
|
if(strstr(szSymbolCachePath, "http://") || strstr(szSymbolCachePath, "https://"))
|
|
{
|
|
if(Script::Gui::MessageYesNo(GuiTranslateText(QT_TRANSLATE_NOOP("DBG", "It is strongly discouraged to use symbol servers in your path directly (use the store option instead).\n\nDo you want me to fix this?"))))
|
|
{
|
|
strcpy_s(szSymbolCachePath, szLocalSymbolPath);
|
|
BridgeSettingSet("Symbols", "CachePath", ".\\symbols");
|
|
}
|
|
}
|
|
}
|
|
dprintf(QT_TRANSLATE_NOOP("DBG", "Symbol Path: %s\n"), szSymbolCachePath);
|
|
SetCurrentDirectoryW(StringUtils::Utf8ToUtf16(szProgramDir).c_str());
|
|
dputs(QT_TRANSLATE_NOOP("DBG", "Allocating message stack..."));
|
|
gMsgStack = MsgAllocStack();
|
|
if(!gMsgStack)
|
|
return "Could not allocate message stack!";
|
|
dputs(QT_TRANSLATE_NOOP("DBG", "Initializing global script variables..."));
|
|
varinit();
|
|
dputs(QT_TRANSLATE_NOOP("DBG", "Registering debugger commands..."));
|
|
registercommands();
|
|
dputs(QT_TRANSLATE_NOOP("DBG", "Registering GUI command handler..."));
|
|
ExpressionFunctions::Init();
|
|
dputs(QT_TRANSLATE_NOOP("DBG", "Registering expression functions..."));
|
|
FormatFunctions::Init();
|
|
dputs(QT_TRANSLATE_NOOP("DBG", "Registering format functions..."));
|
|
SCRIPTTYPEINFO info;
|
|
strcpy_s(info.name, GuiTranslateText(QT_TRANSLATE_NOOP("DBG", "Default")));
|
|
info.id = 0;
|
|
info.execute = [](const char* cmd)
|
|
{
|
|
if(!DbgCmdExec(cmd))
|
|
return false;
|
|
GuiFlushLog();
|
|
return true;
|
|
};
|
|
info.completeCommand = nullptr;
|
|
GuiRegisterScriptLanguage(&info);
|
|
dputs(QT_TRANSLATE_NOOP("DBG", "Registering Script DLL command handler..."));
|
|
strcpy_s(info.name, GuiTranslateText(QT_TRANSLATE_NOOP("DBG", "Script DLL")));
|
|
info.execute = DbgScriptDllExec;
|
|
GuiRegisterScriptLanguage(&info);
|
|
dputs(QT_TRANSLATE_NOOP("DBG", "Starting command loop..."));
|
|
hCommandLoopThread = CreateThread(nullptr, 0, DbgCommandLoopThread, nullptr, 0, nullptr);
|
|
char plugindir[deflen] = "";
|
|
strcpy_s(plugindir, szProgramDir);
|
|
strcat_s(plugindir, "\\plugins");
|
|
CreateDirectoryW(StringUtils::Utf8ToUtf16(plugindir).c_str(), nullptr);
|
|
CreateDirectoryW(StringUtils::Utf8ToUtf16(StringUtils::sprintf("%s\\memdumps", szProgramDir)).c_str(), nullptr);
|
|
dputs(QT_TRANSLATE_NOOP("DBG", "Initialization successful!"));
|
|
bIsStopped = false;
|
|
dputs(QT_TRANSLATE_NOOP("DBG", "Loading plugins..."));
|
|
pluginloadall(plugindir);
|
|
dputs(QT_TRANSLATE_NOOP("DBG", "Handling command line..."));
|
|
dprintf(" %s\n", StringUtils::Utf16ToUtf8(GetCommandLineW()).c_str());
|
|
//handle command line
|
|
int argc = 0;
|
|
wchar_t** argv = CommandLineToArgvW(GetCommandLineW(), &argc);
|
|
//MessageBoxW(0, GetCommandLineW(), StringUtils::sprintf(L"%d", argc).c_str(), MB_SYSTEMMODAL);
|
|
if(argc == 2) //1 argument (init filename)
|
|
DbgCmdExec(StringUtils::Utf16ToUtf8(StringUtils::sprintf(L"init \"%s\"", escape(argv[1]).c_str())).c_str());
|
|
else if(argc == 3 && !_wcsicmp(argv[1], L"-p")) //2 arguments (-p PID)
|
|
DbgCmdExec(StringUtils::Utf16ToUtf8(StringUtils::sprintf(L"attach .%s", argv[2])).c_str()); //attach pid
|
|
else if(argc == 3) //2 arguments (init filename, cmdline)
|
|
DbgCmdExec(StringUtils::Utf16ToUtf8(StringUtils::sprintf(L"init \"%s\", \"%s\"", escape(argv[1]).c_str(), escape(argv[2]).c_str())).c_str());
|
|
else if(argc == 4) //3 arguments (init filename, cmdline, currentdir)
|
|
DbgCmdExec(StringUtils::Utf16ToUtf8(StringUtils::sprintf(L"init \"%s\", \"%s\", \"%s\"", escape(argv[1]).c_str(), escape(argv[2]).c_str(), escape(argv[3]).c_str())).c_str());
|
|
else if(argc == 5 && (!_wcsicmp(argv[1], L"-a") || !_wcsicmp(argv[1], L"-p")) && !_wcsicmp(argv[3], L"-e")) //4 arguments (JIT)
|
|
DbgCmdExec(StringUtils::Utf16ToUtf8(StringUtils::sprintf(L"attach .%s, .%s", argv[2], argv[4])).c_str()); //attach pid, event
|
|
else if(argc == 5 && !_wcsicmp(argv[1], L"-p") && !_wcsicmp(argv[3], L"-tid")) //4 arguments (PLMDebug)
|
|
DbgCmdExec(StringUtils::Utf16ToUtf8(StringUtils::sprintf(L"attach .%s, 0, .%s", argv[2], argv[4])).c_str()); //attach pid, 0, tid
|
|
LocalFree(argv);
|
|
|
|
return nullptr;
|
|
}
|
|
|
|
/**
|
|
@brief This function is called when the user closes the debugger.
|
|
*/
|
|
extern "C" DLL_EXPORT void _dbg_dbgexitsignal()
|
|
{
|
|
dputs(QT_TRANSLATE_NOOP("DBG", "Stopping command thread..."));
|
|
bStopCommandLoopThread = true;
|
|
MsgFreeStack(gMsgStack);
|
|
WaitForThreadTermination(hCommandLoopThread);
|
|
dputs(QT_TRANSLATE_NOOP("DBG", "Stopping running debuggee..."));
|
|
cbDebugStop(0, 0); //after this, debugging stopped
|
|
dputs(QT_TRANSLATE_NOOP("DBG", "Aborting scripts..."));
|
|
scriptabort();
|
|
dputs(QT_TRANSLATE_NOOP("DBG", "Unloading plugins..."));
|
|
pluginunloadall();
|
|
dputs(QT_TRANSLATE_NOOP("DBG", "Cleaning up allocated data..."));
|
|
cmdfree();
|
|
varfree();
|
|
Zydis::GlobalFinalize();
|
|
dputs(QT_TRANSLATE_NOOP("DBG", "Cleaning up wait objects..."));
|
|
waitdeinitialize();
|
|
SafeDbghelpDeinitialize();
|
|
dputs(QT_TRANSLATE_NOOP("DBG", "Cleaning up debugger threads..."));
|
|
dbgstop();
|
|
dputs(QT_TRANSLATE_NOOP("DBG", "Saving notes..."));
|
|
char* text = nullptr;
|
|
GuiGetGlobalNotes(&text);
|
|
if(text)
|
|
{
|
|
FileHelper::WriteAllText(notesFile, String(text));
|
|
BridgeFree(text);
|
|
}
|
|
else
|
|
DeleteFileW(StringUtils::Utf8ToUtf16(notesFile).c_str());
|
|
dputs(QT_TRANSLATE_NOOP("DBG", "Exit signal processed successfully!"));
|
|
#ifdef ENABLE_MEM_TRACE
|
|
if(!memleaks())
|
|
DeleteFileW(StringUtils::Utf8ToUtf16(alloctrace).c_str());
|
|
#endif //ENABLE_MEM_TRACE
|
|
bIsStopped = true;
|
|
}
|
|
|
|
extern "C" DLL_EXPORT bool _dbg_dbgcmddirectexec(const char* cmd)
|
|
{
|
|
return cmddirectexec(cmd);
|
|
}
|
|
|
|
bool dbgisstopped()
|
|
{
|
|
return bIsStopped;
|
|
}
|