winutil

package
v0.0.1 Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: Oct 27, 2024 License: MIT Imports: 7 Imported by: 0

Documentation

Index

Constants

View Source 
const (
	ARM64_MAX_BREAKPOINTS = 8
	ARM64_MAX_WATCHPOINTS = 2
)

Variables

This section is empty.

Functions

This section is empty.

Types

type AMD64CONTEXT 

type AMD64CONTEXT struct {
	P1Home uint64
	P2Home uint64
	P3Home uint64
	P4Home uint64
	P5Home uint64
	P6Home uint64

	ContextFlags uint32
	MxCsr        uint32

	SegCs  uint16
	SegDs  uint16
	SegEs  uint16
	SegFs  uint16
	SegGs  uint16
	SegSs  uint16
	EFlags uint32

	Dr0 uint64
	Dr1 uint64
	Dr2 uint64
	Dr3 uint64
	Dr6 uint64
	Dr7 uint64

	Rax uint64
	Rcx uint64
	Rdx uint64
	Rbx uint64
	Rsp uint64
	Rbp uint64
	Rsi uint64
	Rdi uint64
	R8  uint64
	R9  uint64
	R10 uint64
	R11 uint64
	R12 uint64
	R13 uint64
	R14 uint64
	R15 uint64

	Rip uint64

	FltSave XMM_SAVE_AREA32

	VectorRegister [26]M128A
	VectorControl  uint64

	DebugControl         uint64
	LastBranchToRip      uint64
	LastBranchFromRip    uint64
	LastExceptionToRip   uint64
	LastExceptionFromRip uint64
}

AMD64CONTEXT tracks the _CONTEXT of windows.

func NewAMD64CONTEXT 

func NewAMD64CONTEXT() *AMD64CONTEXT

NewAMD64CONTEXT allocates Windows CONTEXT structure aligned to 16 bytes.

func (*AMD64CONTEXT) SetFlags 

func (ctx *AMD64CONTEXT) SetFlags(flags uint32)

func (*AMD64CONTEXT) SetPC 

func (ctx *AMD64CONTEXT) SetPC(pc uint64)

func (*AMD64CONTEXT) SetReg 

func (ctx *AMD64CONTEXT) SetReg(regNum uint64, reg *op.DwarfRegister) error

func (*AMD64CONTEXT) SetTrap 

func (ctx *AMD64CONTEXT) SetTrap(trap bool)

type AMD64Registers 

type AMD64Registers struct {
	Context *AMD64CONTEXT
	// contains filtered or unexported fields
}

AMD64Registers represents CPU registers on an AMD64 processor.

func NewAMD64Registers 

func NewAMD64Registers(context *AMD64CONTEXT, TebBaseAddress uint64) *AMD64Registers

NewAMD64Registers creates a new AMD64Registers struct from a CONTEXT struct and the TEB base address of the thread.

func (*AMD64Registers) BP 

func (r *AMD64Registers) BP() uint64

func (*AMD64Registers) Copy 

func (r *AMD64Registers) Copy() (proc.Registers, error)

Copy returns a copy of these registers that is guaranteed not to change.

func (*AMD64Registers) GAddr 

func (r *AMD64Registers) GAddr() (uint64, bool)

GAddr returns the address of the G variable if it is known, 0 and false otherwise.

func (*AMD64Registers) LR 

func (r *AMD64Registers) LR() uint64

LR returns the link register.

func (*AMD64Registers) PC 

func (r *AMD64Registers) PC() uint64

PC returns the current program counter i.e. the RIP CPU register.

func (*AMD64Registers) SP 

func (r *AMD64Registers) SP() uint64

SP returns the stack pointer location, i.e. the RSP register.

func (*AMD64Registers) Slice 

func (r *AMD64Registers) Slice(floatingPoint bool) ([]proc.Register, error)

Slice returns the registers as a list of (name, value) pairs.

func (*AMD64Registers) TLS 

func (r *AMD64Registers) TLS() uint64

TLS returns the value of the register that contains the location of the thread local storage segment.

type ARM64CONTEXT 

type ARM64CONTEXT struct {
	ContextFlags   uint32
	Cpsr           uint32
	Regs           [31]uint64
	Sp             uint64
	Pc             uint64
	FloatRegisters [32]neon128
	Fpcr           uint32
	Fpsr           uint32
	Bcr            [ARM64_MAX_BREAKPOINTS]uint32
	Bvr            [ARM64_MAX_BREAKPOINTS]uint64
	Wcr            [ARM64_MAX_WATCHPOINTS]uint32
	Wvr            [ARM64_MAX_WATCHPOINTS]uint64
}

ARM64CONTEXT tracks the _ARM64_NT_CONTEXT of windows.

func NewARM64CONTEXT 

func NewARM64CONTEXT() *ARM64CONTEXT

NewARM64CONTEXT allocates Windows CONTEXT structure aligned to 16 bytes.

func (*ARM64CONTEXT) SetFlags 

func (ctx *ARM64CONTEXT) SetFlags(flags uint32)

func (*ARM64CONTEXT) SetPC 

func (ctx *ARM64CONTEXT) SetPC(pc uint64)

func (*ARM64CONTEXT) SetReg 

func (ctx *ARM64CONTEXT) SetReg(regNum uint64, reg *op.DwarfRegister) error

func (*ARM64CONTEXT) SetTrap 

func (ctx *ARM64CONTEXT) SetTrap(trap bool)

type ARM64Registers 

type ARM64Registers struct {
	Regs           [31]uint64
	Sp             uint64
	Pc             uint64
	FloatRegisters [32]neon128
	Fpcr           uint32
	Fpsr           uint32
	Bcr            [ARM64_MAX_BREAKPOINTS]uint32
	Bvr            [ARM64_MAX_BREAKPOINTS]uint64
	Wcr            [ARM64_MAX_WATCHPOINTS]uint32
	Wvr            [ARM64_MAX_WATCHPOINTS]uint64
	Context        *ARM64CONTEXT
	// contains filtered or unexported fields
}

ARM64Registers represents CPU registers on an ARM64 processor.

func NewARM64Registers 

func NewARM64Registers(context *ARM64CONTEXT, iscgo bool) *ARM64Registers

NewARM64Registers creates a new ARM64Registers struct from a CONTEXT.

func (*ARM64Registers) BP 

func (r *ARM64Registers) BP() uint64

func (*ARM64Registers) Copy 

func (r *ARM64Registers) Copy() (proc.Registers, error)

Copy returns a copy of these registers that is guaranteed not to change.

func (*ARM64Registers) GAddr 

func (r *ARM64Registers) GAddr() (uint64, bool)

GAddr returns the address of the G variable if it is known, 0 and false otherwise.

func (*ARM64Registers) LR 

func (r *ARM64Registers) LR() uint64

LR returns the link register.

func (*ARM64Registers) PC 

func (r *ARM64Registers) PC() uint64

PC returns the value of RIP register.

func (*ARM64Registers) SP 

func (r *ARM64Registers) SP() uint64

SP returns the value of RSP register.

func (*ARM64Registers) Slice 

func (r *ARM64Registers) Slice(floatingPoint bool) ([]proc.Register, error)

Slice returns the registers as a list of (name, value) pairs.

func (*ARM64Registers) TLS 

func (r *ARM64Registers) TLS() uint64

TLS returns the address of the thread local storage memory segment.

type M128A 

type M128A struct {
	Low  uint64
	High int64
}

M128A tracks the _M128A windows struct.

type XMM_SAVE_AREA32 

type XMM_SAVE_AREA32 struct {
	ControlWord    uint16
	StatusWord     uint16
	TagWord        byte
	Reserved1      byte
	ErrorOpcode    uint16
	ErrorOffset    uint32
	ErrorSelector  uint16
	Reserved2      uint16
	DataOffset     uint32
	DataSelector   uint16
	Reserved3      uint16
	MxCsr          uint32
	MxCsr_Mask     uint32
	FloatRegisters [8]M128A
	XmmRegisters   [256]byte
	Reserved4      [96]byte
}

XMM_SAVE_AREA32 tracks the _XMM_SAVE_AREA32 windows struct.

Source Files

View all Source files

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.