HyperDbg/hyperdbg/hprdbgctrl/readmem.cpp

/**
 * @file readmem.cpp
 * @author Sina Karvandi (sina@rayanfam.com)
 * @brief HyperDbg command for u and d*
 * @details
 * @version 0.1
 * @date 2020-05-27
 *
 * @copyright This project is released under the GNU Public License v3.
 *
 */
#include "pch.h"

/**
 * @brief Read memory and disassembler
 *
 */
void HyperDbgReadMemoryAndDisassemble(DEBUGGER_SHOW_MEMORY_STYLE Style,
                                      UINT64 Address,
                                      DEBUGGER_READ_MEMORY_TYPE MemoryType,
                                      DEBUGGER_READ_READING_TYPE ReadingType,
                                      UINT32 Pid, UINT Size) {

  BOOL Status;
  ULONG ReturnedLength;
  DEBUGGER_READ_MEMORY ReadMem;
  UINT32 OperationCode;
  CHAR Character;

  if (!g_DeviceHandle) {
    ShowMessages("Handle not found, probably the driver is not loaded.\n");
    return;
  }

  ReadMem.Address = Address;
  ReadMem.Pid = Pid;
  ReadMem.Size = Size;
  ReadMem.MemoryType = MemoryType;
  ReadMem.ReadingType = ReadingType;

  //
  // allocate buffer for transfering messages
  //
  unsigned char *OutputBuffer = (unsigned char *)malloc(Size);

  ZeroMemory(OutputBuffer, Size);

  Status = DeviceIoControl(g_DeviceHandle,             // Handle to device
                           IOCTL_DEBUGGER_READ_MEMORY, // IO Control code
                           &ReadMem, // Input Buffer to driver.
                           SIZEOF_DEBUGGER_READ_MEMORY, // Input buffer length
                           OutputBuffer,    // Output Buffer from driver.
                           Size,            // Length of output buffer in bytes.
                           &ReturnedLength, // Bytes placed in buffer.
                           NULL             // synchronous call
  );

  if (!Status) {
    ShowMessages("Ioctl failed with code 0x%x\n", GetLastError());
    return;
  }

  if (Style == DEBUGGER_SHOW_COMMAND_DB) {
    for (int i = 0; i < Size; i += 16) {

      if (MemoryType == DEBUGGER_READ_PHYSICAL_ADDRESS) {
        ShowMessages("#\t");
      }
      //
      // Print address
      //
      ShowMessages("%s  ", SeparateTo64BitValue((UINT64)(Address + i)).c_str());

      //
      // Print the hex code
      //
      for (size_t j = 0; j < 16; j++) {

        //
        // check to see if the address is valid or not
        //
        if (i + j >= ReturnedLength) {
          ShowMessages("?? ");
        } else {
          ShowMessages("%02X ", OutputBuffer[i + j]);
        }
      }

      //
      // Print the character
      //
      ShowMessages(" ");
      for (size_t j = 0; j < 16; j++) {
        Character = (OutputBuffer[i + j]);
        if (isprint(Character)) {
          ShowMessages("%c", Character);
        } else {
          ShowMessages(".");
        }
      }

      //
      // Go to new line
      //
      ShowMessages("\n");
    }
  } else if (Style == DEBUGGER_SHOW_COMMAND_DC ||
             Style == DEBUGGER_SHOW_COMMAND_DD) {
    for (int i = 0; i < Size; i += 16) {

      if (MemoryType == DEBUGGER_READ_PHYSICAL_ADDRESS) {
        ShowMessages("#\t");
      }
      //
      // Print address
      //
      ShowMessages("%s  ", SeparateTo64BitValue((UINT64)(Address + i)).c_str());

      //
      // Print the hex code
      //
      for (size_t j = 0; j < 16; j += 4) {
        //
        // check to see if the address is valid or not
        //
        if (i + j >= ReturnedLength) {
          ShowMessages("???????? ");
        } else {
          UINT32 OutputBufferVar = *((UINT32 *)&OutputBuffer[i + j]);
          ShowMessages("%08X ", OutputBufferVar);
        }
      }
      //
      // Print the character
      //
      if (Style != DEBUGGER_SHOW_COMMAND_DD) {
        ShowMessages(" ");

        for (size_t j = 0; j < 16; j++) {
          Character = (OutputBuffer[i + j]);
          if (isprint(Character)) {
            ShowMessages("%c", Character);
          } else {
            ShowMessages(".");
          }
        }
      }

      //
      // Go to new line
      //
      ShowMessages("\n");
    }
  } else if (Style == DEBUGGER_SHOW_COMMAND_DQ) {
    for (int i = 0; i < Size; i += 16) {

      if (MemoryType == DEBUGGER_READ_PHYSICAL_ADDRESS) {
        ShowMessages("#\t");
      }
      //
      // Print address
      //
      ShowMessages("%s  ", SeparateTo64BitValue((UINT64)(Address + i)).c_str());

      //
      // Print the hex code
      //
      for (size_t j = 0; j < 16; j += 8) {
        //
        // check to see if the address is valid or not
        //
        if (i + j >= ReturnedLength) {
          ShowMessages("???????? ");
        } else {
          UINT32 OutputBufferVar = *((UINT32 *)&OutputBuffer[i + j + 4]);
          ShowMessages("%08X`", OutputBufferVar);

          OutputBufferVar = *((UINT32 *)&OutputBuffer[i + j]);
          ShowMessages("%08X ", OutputBufferVar);
        }
      }

      //
      // Go to new line
      //
      ShowMessages("\n");
    }
  } else if (Style == DEBUGGER_SHOW_COMMAND_DISASSEMBLE) {
    HyperDbgDisassembler(OutputBuffer, Address, ReturnedLength);
  }

  ShowMessages("\n");
}