SoftICE-like kernel debugger for Windows 11
Features :
Support for Windows XP up to Windows 11, x86 and x64, and SMP kernels. Support for WOW64 processes on x64.
Integration of QuickJSPP, which is a port of QuickJS to MSVC++. Before calling QuickJS, BugChecker saves the FPU state (on x86) and switches to an expanded stack of 128KB.
Commands accept JS expressions. For example, "U rip+rax*4" and "U MyJsFn(rax+2)" are valid commands. Custom functions can be defined in the Script Window. CPU registers are declared as global scope variables automatically by BugChecker.
Support for PDB symbol files. PDB files can be specified manually or Symbol Loader can download them from a symbol server.
JavaScript code can call the following asynchronous functions: WriteReg, ReadMem, WriteMem.
Breakpoints can have a JS condition: if condition evaluates to 0, no "breakin" happens. This allows to set "Logpoints" and breakpoints that can change the flow of execution.
Log window shows the messages sent to the kernel debugger (for example DbgPrint messages).
JavaScript window with syntax highlighting.
The tab key allows, given few digits, to cycle through all the hex numbers on the screen or, given few characters, to cycle through all the symbols containing those characters.
EASTL and C++20 coroutines make creating new commands a breeze. Feel free to send your pull requests!
🦅 کانال بایت امن | گروه بایت امن
_