StepInt3-Plugin-x64/StepInt3.Inc at master · mrfearless/StepInt3-Plugin-x64 · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
;=====================================================================================
; x64dbg plugin SDK for Masm - fearless 2015
;
; StepInt3.inc
;
;-------------------------------------------------------------------------------------
include windows.inc
include CommCtrl.inc
include shellapi.inc

includelib user32.lib
includelib kernel32.lib
includelib gdi32.lib
includelib comctl32.lib
includelib shell32.lib

include Masm64.inc
includelib Masm64.lib


StepInt3LoadMenuIcon    PROTO :QWORD, :QWORD
IniGetStepInt3Enabled   PROTO
IniSetStepInt3Enabled   PROTO :QWORD
JustFnameExt            PROTO :QWORD, :QWORD

.CONST
CRLF                TEXTEQU <13,10,0> ; carriage return and linefeed for strings that require them (GuiAddLogMessage for example)

MENU_STEPINT3       EQU 1

ICO_STEPINT3        EQU 100
IMG_STEPINT3        EQU 101 ; PNG image for plugin menu icon
IMG_MENU_CHECK      EQU 121 ; Checkmark (tick)
IMG_MENU_NOCHECK    EQU 122 ; No checkmark, just blank space

.DATA
align 01
szStepInt3          DB "StepInt3",0
szEnabled           DB "Enabled",0
szPluginLoaded      DB "StepInt3 loaded.",CRLF
szPluginUnloaded    DB "StepInt3 unloaded.",CRLF
szStepInt3Info       DB 13,10
                    DB "StepInt3 x64dbg plugin by fearless 2016 - www.LetTheLight.in",13,10
                    DB 13,10
                    DB "StepInt3 Features & Usage:",13,10
                    DB " - Steps over int3 instructions, swallowing the breakpoint exception.",13,10
                    DB 13,10,0

szStepInt3FoundSkipping     DB "StepInt3 - Found an int3 (EXCEPTION_BREAKPOINT), stepping over it.",CRLF
szStepInt3NtdllSkipping     DB "StepInt3 - Found an int3 (EXCEPTION_BREAKPOINT) in ntdll.dll, skipping this.",CRLF


szStepInt3LogMsg            DB 512 DUP (0)
szStepInt3FoundNotModule    DB "StepInt3 - Found an int3 (EXCEPTION_BREAKPOINT) in another module: [",0
szStepInt3FoundModule       DB MAX_PATH DUP (0)
szStepInt3IgnoreContinue    DB " ], ignoring this and continuing.",CRLF

szLogStepInt3Enabled DB "StepInt3 - Enabled",CRLF
szLogStepInt3Disabled DB "StepInt3 - Disabled",CRLF

StepInt3Ini         DB MAX_PATH DUP (0)
szModuleFilename    DB MAX_PATH DUP (0)

szIni               DB "ini",0
szOne               DB "1",0
szZero              DB "0",0
szNtdll             DB "ntdll.dll",0
szInt3              DB "int3",0
szRet               DB "ret",0
szSkip              DB "skip",0
szCon               DB "con",0
szRun               DB "run",0
szInstruction       DB MAX_PATH DUP (0)
sel                 SELECTIONDATA <>


hImgCheck           ICONDATA <> ; IMG_MENU_CHECK
hImgNoCheck         ICONDATA <> ; IMG_MENU_NOCHECK


g_StepInt3Enabled   DQ 1


.DATA?
align 08
hInstance           HINSTANCE ?
DbgVar              DQ ?
DebugFilename       DQ ?