DBGCEmulateCodeView.cpp@ 73351

Last change on this file since 73351 was 73351, checked in by vboxsync, 6 years ago
VBoxGuest,VMMDev,DBGF,VM: Added bug check report to VBoxGuest/VMMDev and hooked it up to DBGF. Made DBGF remember the last reported bug check, adding an info handler for displaying it. Added VM reset counters w/ getters for use in bug check reporting.
Property svn:eol-style set to `native` Property svn:keywords set to `Author Date Id Revision`
File size: 287.1 KB

Line
1	/* $Id: DBGCEmulateCodeView.cpp 73351 2018-07-25 13:02:11Z vboxsync $ */
2	/** @file
3	* DBGC - Debugger Console, CodeView / WinDbg Emulation.
4	*/
5
6	/*
7	* Copyright (C) 2006-2017 Oracle Corporation
8	*
9	* This file is part of VirtualBox Open Source Edition (OSE), as
10	* available from http://www.virtualbox.org. This file is free software;
11	* you can redistribute it and/or modify it under the terms of the GNU
12	* General Public License (GPL) as published by the Free Software
13	* Foundation, in version 2 as it comes in the "COPYING" file of the
14	* VirtualBox OSE distribution. VirtualBox OSE is distributed in the
15	* hope that it will be useful, but WITHOUT ANY WARRANTY of any kind.
16	*/
17
18
19	/*********************************************************************************************************************************
20	* Header Files *
21	*********************************************************************************************************************************/
22	#define LOG_GROUP LOG_GROUP_DBGC
23	#include <VBox/dbg.h>
24	#include <VBox/vmm/dbgf.h>
25	#include <VBox/vmm/pgm.h>
26	#include <VBox/vmm/cpum.h>
27	#include <VBox/dis.h>
28	#include <VBox/param.h>
29	#include <VBox/err.h>
30	#include <VBox/log.h>
31
32	#include <iprt/asm.h>
33	#include <iprt/mem.h>
34	#include <iprt/string.h>
35	#include <iprt/assert.h>
36	#include <iprt/ctype.h>
37
38	#include <stdlib.h>
39	#include <stdio.h>
40
41	#include "DBGCInternal.h"
42
43
44	/*********************************************************************************************************************************
45	* Internal Functions *
46	*********************************************************************************************************************************/
47	static FNDBGCCMD dbgcCmdBrkAccess;
48	static FNDBGCCMD dbgcCmdBrkClear;
49	static FNDBGCCMD dbgcCmdBrkDisable;
50	static FNDBGCCMD dbgcCmdBrkEnable;
51	static FNDBGCCMD dbgcCmdBrkList;
52	static FNDBGCCMD dbgcCmdBrkSet;
53	static FNDBGCCMD dbgcCmdBrkREM;
54	static FNDBGCCMD dbgcCmdDumpMem;
55	static FNDBGCCMD dbgcCmdDumpDT;
56	static FNDBGCCMD dbgcCmdDumpIDT;
57	static FNDBGCCMD dbgcCmdDumpPageDir;
58	static FNDBGCCMD dbgcCmdDumpPageDirBoth;
59	static FNDBGCCMD dbgcCmdDumpPageHierarchy;
60	static FNDBGCCMD dbgcCmdDumpPageTable;
61	static FNDBGCCMD dbgcCmdDumpPageTableBoth;
62	static FNDBGCCMD dbgcCmdDumpTSS;
63	static FNDBGCCMD dbgcCmdDumpTypeInfo;
64	static FNDBGCCMD dbgcCmdDumpTypedVal;
65	static FNDBGCCMD dbgcCmdEditMem;
66	static FNDBGCCMD dbgcCmdGo;
67	static FNDBGCCMD dbgcCmdGoUp;
68	static FNDBGCCMD dbgcCmdListModules;
69	static FNDBGCCMD dbgcCmdListNear;
70	static FNDBGCCMD dbgcCmdListSource;
71	static FNDBGCCMD dbgcCmdMemoryInfo;
72	static FNDBGCCMD dbgcCmdReg;
73	static FNDBGCCMD dbgcCmdRegGuest;
74	static FNDBGCCMD dbgcCmdRegHyper;
75	static FNDBGCCMD dbgcCmdRegTerse;
76	static FNDBGCCMD dbgcCmdSearchMem;
77	static FNDBGCCMD dbgcCmdSearchMemType;
78	static FNDBGCCMD dbgcCmdStepTrace;
79	static FNDBGCCMD dbgcCmdStepTraceTo;
80	static FNDBGCCMD dbgcCmdStepTraceToggle;
81	static FNDBGCCMD dbgcCmdEventCtrl;
82	static FNDBGCCMD dbgcCmdEventCtrlList;
83	static FNDBGCCMD dbgcCmdEventCtrlReset;
84	static FNDBGCCMD dbgcCmdStack;
85	static FNDBGCCMD dbgcCmdUnassemble;
86	static FNDBGCCMD dbgcCmdUnassembleCfg;
87
88
89	/*********************************************************************************************************************************
90	* Global Variables *
91	*********************************************************************************************************************************/
92	/** 'ba' arguments. */
93	static const DBGCVARDESC g_aArgBrkAcc[] =
94	{
95	/* cTimesMin, cTimesMax, enmCategory, fFlags, pszName, pszDescription */
96	{ 1, 1, DBGCVAR_CAT_STRING, 0, "access", "The access type: x=execute, rw=read/write (alias r), w=write, i=not implemented." },
97	{ 1, 1, DBGCVAR_CAT_NUMBER, 0, "size", "The access size: 1, 2, 4, or 8. 'x' access requires 1, and 8 requires amd64 long mode." },
98	{ 1, 1, DBGCVAR_CAT_GC_POINTER, 0, "address", "The address." },
99	{ 0, 1, DBGCVAR_CAT_NUMBER, 0, "passes", "The number of passes before we trigger the breakpoint. (0 is default)" },
100	{ 0, 1, DBGCVAR_CAT_NUMBER, DBGCVD_FLAGS_DEP_PREV, "max passes", "The number of passes after which we stop triggering the breakpoint. (~0 is default)" },
101	{ 0, 1, DBGCVAR_CAT_STRING, 0, "cmds", "String of commands to be executed when the breakpoint is hit. Quote it!" },
102	};
103
104
105	/** 'bc', 'bd', 'be' arguments. */
106	static const DBGCVARDESC g_aArgBrks[] =
107	{
108	/* cTimesMin, cTimesMax, enmCategory, fFlags, pszName, pszDescription */
109	{ 0, ~0U, DBGCVAR_CAT_NUMBER, 0, "#bp", "Breakpoint number." },
110	{ 0, 1, DBGCVAR_CAT_STRING, 0, "all", "All breakpoints." },
111	};
112
113
114	/** 'bp' arguments. */
115	static const DBGCVARDESC g_aArgBrkSet[] =
116	{
117	/* cTimesMin, cTimesMax, enmCategory, fFlags, pszName, pszDescription */
118	{ 1, 1, DBGCVAR_CAT_GC_POINTER, 0, "address", "The address." },
119	{ 0, 1, DBGCVAR_CAT_NUMBER, 0, "passes", "The number of passes before we trigger the breakpoint. (0 is default)" },
120	{ 0, 1, DBGCVAR_CAT_NUMBER, DBGCVD_FLAGS_DEP_PREV, "max passes", "The number of passes after which we stop triggering the breakpoint. (~0 is default)" },
121	{ 0, 1, DBGCVAR_CAT_STRING, 0, "cmds", "String of commands to be executed when the breakpoint is hit. Quote it!" },
122	};
123
124
125	/** 'br' arguments. */
126	static const DBGCVARDESC g_aArgBrkREM[] =
127	{
128	/* cTimesMin, cTimesMax, enmCategory, fFlags, pszName, pszDescription */
129	{ 1, 1, DBGCVAR_CAT_GC_POINTER, 0, "address", "The address." },
130	{ 0, 1, DBGCVAR_CAT_NUMBER, 0, "passes", "The number of passes before we trigger the breakpoint. (0 is default)" },
131	{ 0, 1, DBGCVAR_CAT_NUMBER, DBGCVD_FLAGS_DEP_PREV, "max passes", "The number of passes after which we stop triggering the breakpoint. (~0 is default)" },
132	{ 0, 1, DBGCVAR_CAT_STRING, 0, "cmds", "String of commands to be executed when the breakpoint is hit. Quote it!" },
133	};
134
135
136	/** 'd?' arguments. */
137	static const DBGCVARDESC g_aArgDumpMem[] =
138	{
139	/* cTimesMin, cTimesMax, enmCategory, fFlags, pszName, pszDescription */
140	{ 0, 1, DBGCVAR_CAT_POINTER, 0, "address", "Address where to start dumping memory." },
141	};
142
143
144	/** 'dg', 'dga', 'dl', 'dla' arguments. */
145	static const DBGCVARDESC g_aArgDumpDT[] =
146	{
147	/* cTimesMin, cTimesMax, enmCategory, fFlags, pszName, pszDescription */
148	{ 0, ~0U, DBGCVAR_CAT_NUMBER, 0, "sel", "Selector or selector range." },
149	{ 0, ~0U, DBGCVAR_CAT_POINTER, 0, "address", "Far address which selector should be dumped." },
150	};
151
152
153	/** 'di', 'dia' arguments. */
154	static const DBGCVARDESC g_aArgDumpIDT[] =
155	{
156	/* cTimesMin, cTimesMax, enmCategory, fFlags, pszName, pszDescription */
157	{ 0, ~0U, DBGCVAR_CAT_NUMBER, 0, "int", "The interrupt vector or interrupt vector range." },
158	};
159
160
161	/** 'dpd' arguments. /
162	static const DBGCVARDESC g_aArgDumpPD[] =
163	{
164	/* cTimesMin, cTimesMax, enmCategory, fFlags, pszName, pszDescription */
165	{ 0, 1, DBGCVAR_CAT_NUMBER, 0, "index", "Index into the page directory." },
166	{ 0, 1, DBGCVAR_CAT_POINTER, 0, "address", "Address which page directory entry to start dumping from. Range is applied to the page directory." },
167	};
168
169
170	/** 'dpda' arguments. */
171	static const DBGCVARDESC g_aArgDumpPDAddr[] =
172	{
173	/* cTimesMin, cTimesMax, enmCategory, fFlags, pszName, pszDescription */
174	{ 0, 1, DBGCVAR_CAT_POINTER, 0, "address", "Address of the page directory entry to start dumping from." },
175	};
176
177
178	/** 'dph' arguments. /
179	static const DBGCVARDESC g_aArgDumpPH[] =
180	{
181	/* cTimesMin, cTimesMax, enmCategory, fFlags, pszName, pszDescription */
182	{ 0, 1, DBGCVAR_CAT_GC_POINTER, 0, "address", "Where in the address space to start dumping and for how long (range). The default address/range will be used if omitted." },
183	{ 0, 1, DBGCVAR_CAT_NUMBER, DBGCVD_FLAGS_DEP_PREV, "cr3", "The CR3 value to use. The current CR3 of the context will be used if omitted." },
184	{ 0, 1, DBGCVAR_CAT_STRING, DBGCVD_FLAGS_DEP_PREV, "mode", "The paging mode: legacy, pse, pae, long, ept. Append '-np' for nested paging and '-nx' for no-execute. The current mode will be used if omitted." },
185	};
186
187
188	/** 'dpt?' arguments. */
189	static const DBGCVARDESC g_aArgDumpPT[] =
190	{
191	/* cTimesMin, cTimesMax, enmCategory, fFlags, pszName, pszDescription */
192	{ 1, 1, DBGCVAR_CAT_POINTER, 0, "address", "Address which page directory entry to start dumping from." },
193	};
194
195
196	/** 'dpta' arguments. */
197	static const DBGCVARDESC g_aArgDumpPTAddr[] =
198	{
199	/* cTimesMin, cTimesMax, enmCategory, fFlags, pszName, pszDescription */
200	{ 1, 1, DBGCVAR_CAT_POINTER, 0, "address", "Address of the page table entry to start dumping from." },
201	};
202
203
204	/** 'dt' arguments. */
205	static const DBGCVARDESC g_aArgDumpTSS[] =
206	{
207	/* cTimesMin, cTimesMax, enmCategory, fFlags, pszName, pszDescription */
208	{ 0, 1, DBGCVAR_CAT_NUMBER, 0, "tss", "TSS selector number." },
209	{ 0, 1, DBGCVAR_CAT_POINTER, 0, "tss:ign\|addr", "TSS address. If the selector is a TSS selector, the offset will be ignored." }
210	};
211
212
213	/** 'dti' arguments. */
214	static const DBGCVARDESC g_aArgDumpTypeInfo[] =
215	{
216	/* cTimesMin, cTimesMax, enmCategory, fFlags, pszName, pszDescription */
217	{ 1, 1, DBGCVAR_CAT_STRING, 0, "type", "The type to dump" },
218	{ 0, 1, DBGCVAR_CAT_NUMBER, 0, "levels", "How many levels to dump the type information" }
219	};
220
221
222	/** 'dtv' arguments. */
223	static const DBGCVARDESC g_aArgDumpTypedVal[] =
224	{
225	/* cTimesMin, cTimesMax, enmCategory, fFlags, pszName, pszDescription */
226	{ 1, 1, DBGCVAR_CAT_STRING, 0, "type", "The type to use" },
227	{ 1, 1, DBGCVAR_CAT_POINTER, 0, "address", "Address to start dumping from." },
228	{ 0, 1, DBGCVAR_CAT_NUMBER, 0, "levels", "How many levels to dump" }
229	};
230
231
232	/** 'e?' arguments. */
233	static const DBGCVARDESC g_aArgEditMem[] =
234	{
235	/* cTimesMin, cTimesMax, enmCategory, fFlags, pszName, pszDescription */
236	{ 1, 1, DBGCVAR_CAT_POINTER, 0, "address", "Address where to write." },
237	{ 1, ~0U, DBGCVAR_CAT_NUMBER, 0, "value", "Value to write." },
238	};
239
240
241	/** 'lm' arguments. */
242	static const DBGCVARDESC g_aArgListMods[] =
243	{
244	/* cTimesMin, cTimesMax, enmCategory, fFlags, pszName, pszDescription */
245	{ 0, ~0U, DBGCVAR_CAT_STRING, 0, "module", "Module name." },
246	};
247
248
249	/** 'ln' arguments. */
250	static const DBGCVARDESC g_aArgListNear[] =
251	{
252	/* cTimesMin, cTimesMax, enmCategory, fFlags, pszName, pszDescription */
253	{ 0, ~0U, DBGCVAR_CAT_POINTER, 0, "address", "Address of the symbol to look up." },
254	{ 0, ~0U, DBGCVAR_CAT_SYMBOL, 0, "symbol", "Symbol to lookup." },
255	};
256
257
258	/** 'ls' arguments. */
259	static const DBGCVARDESC g_aArgListSource[] =
260	{
261	/* cTimesMin, cTimesMax, enmCategory, fFlags, pszName, pszDescription */
262	{ 0, 1, DBGCVAR_CAT_POINTER, 0, "address", "Address where to start looking for source lines." },
263	};
264
265
266	/** 'm' argument. */
267	static const DBGCVARDESC g_aArgMemoryInfo[] =
268	{
269	/* cTimesMin, cTimesMax, enmCategory, fFlags, pszName, pszDescription */
270	{ 1, 1, DBGCVAR_CAT_POINTER, 0, "address", "Pointer to obtain info about." },
271	};
272
273
274	/** 'p', 'pc', 'pt', 't', 'tc' and 'tt' arguments. */
275	static const DBGCVARDESC g_aArgStepTrace[] =
276	{
277	/* cTimesMin, cTimesMax, enmCategory, fFlags, pszName, pszDescription */
278	{ 0, 1, DBGCVAR_CAT_NUMBER, 0, "count", "Number of instructions or source lines to step." },
279	{ 0, 1, DBGCVAR_CAT_STRING, 0, "cmds", "String of commands to be executed afterwards. Quote it!" },
280	};
281
282
283	/** 'pa' and 'ta' arguments. */
284	static const DBGCVARDESC g_aArgStepTraceTo[] =
285	{
286	/* cTimesMin, cTimesMax, enmCategory, fFlags, pszName, pszDescription */
287	{ 1, 1, DBGCVAR_CAT_POINTER, 0, "address", "Where to stop" },
288	{ 0, 1, DBGCVAR_CAT_STRING, 0, "cmds", "String of commands to be executed afterwards. Quote it!" },
289	};
290
291
292	/** 'r' arguments. */
293	static const DBGCVARDESC g_aArgReg[] =
294	{
295	/* cTimesMin, cTimesMax, enmCategory, fFlags, pszName, pszDescription */
296	{ 0, 1, DBGCVAR_CAT_SYMBOL, 0, "register", "Register to show or set." },
297	{ 0, 1, DBGCVAR_CAT_STRING, DBGCVD_FLAGS_DEP_PREV, "=", "Equal sign." },
298	{ 0, 1, DBGCVAR_CAT_NUMBER, DBGCVD_FLAGS_DEP_PREV, "value", "New register value." },
299	};
300
301
302	/** 's' arguments. */
303	static const DBGCVARDESC g_aArgSearchMem[] =
304	{
305	/* cTimesMin, cTimesMax, enmCategory, fFlags, pszName, pszDescription */
306	{ 0, 1, DBGCVAR_CAT_OPTION, 0, "-b", "Byte string." },
307	{ 0, 1, DBGCVAR_CAT_OPTION, 0, "-w", "Word string." },
308	{ 0, 1, DBGCVAR_CAT_OPTION, 0, "-d", "DWord string." },
309	{ 0, 1, DBGCVAR_CAT_OPTION, 0, "-q", "QWord string." },
310	{ 0, 1, DBGCVAR_CAT_OPTION, 0, "-a", "ASCII string." },
311	{ 0, 1, DBGCVAR_CAT_OPTION, 0, "-u", "Unicode string." },
312	{ 0, 1, DBGCVAR_CAT_OPTION_NUMBER, 0, "-n <Hits>", "Maximum number of hits." },
313	{ 0, 1, DBGCVAR_CAT_GC_POINTER, 0, "range", "Register to show or set." },
314	{ 0, ~0U, DBGCVAR_CAT_ANY, 0, "pattern", "Pattern to search for." },
315	};
316
317
318	/** 's?' arguments. */
319	static const DBGCVARDESC g_aArgSearchMemType[] =
320	{
321	/* cTimesMin, cTimesMax, enmCategory, fFlags, pszName, pszDescription */
322	{ 1, 1, DBGCVAR_CAT_GC_POINTER, 0, "range", "Register to show or set." },
323	{ 1, ~0U, DBGCVAR_CAT_ANY, 0, "pattern", "Pattern to search for." },
324	};
325
326
327	/** 'sxe', 'sxn', 'sxi', 'sx-' arguments. */
328	static const DBGCVARDESC g_aArgEventCtrl[] =
329	{
330	/* cTimesMin, cTimesMax, enmCategory, fFlags, pszName, pszDescription */
331	{ 0, 1, DBGCVAR_CAT_STRING, 0, "-c", "The -c option, requires <cmds>." },
332	{ 0, 1, DBGCVAR_CAT_STRING, DBGCVD_FLAGS_DEP_PREV, "cmds", "Command to execute on this event." },
333	{ 0 /weird/, ~0U, DBGCVAR_CAT_STRING, 0, "event", "One or more events, 'all' refering to all events." },
334	};
335
336	/** 'sx' and 'sr' arguments. */
337	static const DBGCVARDESC g_aArgEventCtrlOpt[] =
338	{
339	/* cTimesMin, cTimesMax, enmCategory, fFlags, pszName, pszDescription */
340	{ 0, ~0U, DBGCVAR_CAT_STRING, 0, "event", "Zero or more events, 'all' refering to all events and being the default." },
341	};
342
343	/** 'u' arguments. */
344	static const DBGCVARDESC g_aArgUnassemble[] =
345	{
346	/* cTimesMin, cTimesMax, enmCategory, fFlags, pszName, pszDescription */
347	{ 0, 1, DBGCVAR_CAT_POINTER, 0, "address", "Address where to start disassembling." },
348	};
349
350	/** 'ucfg' arguments. */
351	static const DBGCVARDESC g_aArgUnassembleCfg[] =
352	{
353	/* cTimesMin, cTimesMax, enmCategory, fFlags, pszName, pszDescription */
354	{ 0, 1, DBGCVAR_CAT_POINTER, 0, "address", "Address where to start disassembling." },
355	};
356
357
358	/** Command descriptors for the CodeView / WinDbg emulation.
359	* The emulation isn't attempting to be identical, only somewhat similar.
360	*/
361	const DBGCCMD g_aCmdsCodeView[] =
362	{
363	/* pszCmd, cArgsMin, cArgsMax, paArgDescs, cArgDescs, fFlags, pfnHandler pszSyntax, ....pszDescription */
364	{ "ba", 3, 6, &g_aArgBrkAcc[0], RT_ELEMENTS(g_aArgBrkAcc), 0, dbgcCmdBrkAccess, "<access> <size> <address> [passes [max passes]] [cmds]",
365	"Sets a data access breakpoint." },
366	{ "bc", 1, ~0U, &g_aArgBrks[0], RT_ELEMENTS(g_aArgBrks), 0, dbgcCmdBrkClear, "all \| <bp#> [bp# []]", "Deletes a set of breakpoints." },
367	{ "bd", 1, ~0U, &g_aArgBrks[0], RT_ELEMENTS(g_aArgBrks), 0, dbgcCmdBrkDisable, "all \| <bp#> [bp# []]", "Disables a set of breakpoints." },
368	{ "be", 1, ~0U, &g_aArgBrks[0], RT_ELEMENTS(g_aArgBrks), 0, dbgcCmdBrkEnable, "all \| <bp#> [bp# []]", "Enables a set of breakpoints." },
369	{ "bl", 0, 0, NULL, 0, 0, dbgcCmdBrkList, "", "Lists all the breakpoints." },
370	{ "bp", 1, 4, &g_aArgBrkSet[0], RT_ELEMENTS(g_aArgBrkSet), 0, dbgcCmdBrkSet, "<address> [passes [max passes]] [cmds]",
371	"Sets a breakpoint (int 3)." },
372	{ "br", 1, 4, &g_aArgBrkREM[0], RT_ELEMENTS(g_aArgBrkREM), 0, dbgcCmdBrkREM, "<address> [passes [max passes]] [cmds]",
373	"Sets a recompiler specific breakpoint." },
374	{ "d", 0, 1, &g_aArgDumpMem[0], RT_ELEMENTS(g_aArgDumpMem), 0, dbgcCmdDumpMem, "[addr]", "Dump memory using last element size and type." },
375	{ "dF", 0, 1, &g_aArgDumpMem[0], RT_ELEMENTS(g_aArgDumpMem), 0, dbgcCmdDumpMem, "[addr]", "Dump memory as far 16:16." },
376	{ "dFs", 0, 1, &g_aArgDumpMem[0], RT_ELEMENTS(g_aArgDumpMem), 0, dbgcCmdDumpMem, "[addr]", "Dump memory as far 16:16 with near symbols." },
377	{ "da", 0, 1, &g_aArgDumpMem[0], RT_ELEMENTS(g_aArgDumpMem), 0, dbgcCmdDumpMem, "[addr]", "Dump memory as ascii string." },
378	{ "db", 0, 1, &g_aArgDumpMem[0], RT_ELEMENTS(g_aArgDumpMem), 0, dbgcCmdDumpMem, "[addr]", "Dump memory in bytes." },
379	{ "dd", 0, 1, &g_aArgDumpMem[0], RT_ELEMENTS(g_aArgDumpMem), 0, dbgcCmdDumpMem, "[addr]", "Dump memory in double words." },
380	{ "dds", 0, 1, &g_aArgDumpMem[0], RT_ELEMENTS(g_aArgDumpMem), 0, dbgcCmdDumpMem, "[addr]", "Dump memory as double words with near symbols." },
381	{ "da", 0, 1, &g_aArgDumpMem[0], RT_ELEMENTS(g_aArgDumpMem), 0, dbgcCmdDumpMem, "[addr]", "Dump memory as ascii string." },
382	{ "dg", 0, ~0U, &g_aArgDumpDT[0], RT_ELEMENTS(g_aArgDumpDT), 0, dbgcCmdDumpDT, "[sel [..]]", "Dump the global descriptor table (GDT)." },
383	{ "dga", 0, ~0U, &g_aArgDumpDT[0], RT_ELEMENTS(g_aArgDumpDT), 0, dbgcCmdDumpDT, "[sel [..]]", "Dump the global descriptor table (GDT) including not-present entries." },
384	{ "di", 0, ~0U, &g_aArgDumpIDT[0], RT_ELEMENTS(g_aArgDumpIDT), 0, dbgcCmdDumpIDT, "[int [..]]", "Dump the interrupt descriptor table (IDT)." },
385	{ "dia", 0, ~0U, &g_aArgDumpIDT[0], RT_ELEMENTS(g_aArgDumpIDT), 0, dbgcCmdDumpIDT, "[int [..]]", "Dump the interrupt descriptor table (IDT) including not-present entries." },
386	{ "dl", 0, ~0U, &g_aArgDumpDT[0], RT_ELEMENTS(g_aArgDumpDT), 0, dbgcCmdDumpDT, "[sel [..]]", "Dump the local descriptor table (LDT)." },
387	{ "dla", 0, ~0U, &g_aArgDumpDT[0], RT_ELEMENTS(g_aArgDumpDT), 0, dbgcCmdDumpDT, "[sel [..]]", "Dump the local descriptor table (LDT) including not-present entries." },
388	{ "dpd", 0, 1, &g_aArgDumpPD[0], RT_ELEMENTS(g_aArgDumpPD), 0, dbgcCmdDumpPageDir, "[addr\|index]", "Dumps page directory entries of the default context." },
389	{ "dpda", 0, 1, &g_aArgDumpPDAddr[0],RT_ELEMENTS(g_aArgDumpPDAddr), 0, dbgcCmdDumpPageDir, "[addr]", "Dumps memory at given address as a page directory." },
390	{ "dpdb", 0, 1, &g_aArgDumpPD[0], RT_ELEMENTS(g_aArgDumpPD), 0, dbgcCmdDumpPageDirBoth, "[addr\|index]", "Dumps page directory entries of the guest and the hypervisor. " },
391	{ "dpdg", 0, 1, &g_aArgDumpPD[0], RT_ELEMENTS(g_aArgDumpPD), 0, dbgcCmdDumpPageDir, "[addr\|index]", "Dumps page directory entries of the guest." },
392	{ "dpdh", 0, 1, &g_aArgDumpPD[0], RT_ELEMENTS(g_aArgDumpPD), 0, dbgcCmdDumpPageDir, "[addr\|index]", "Dumps page directory entries of the hypervisor. " },
393	{ "dph", 0, 3, &g_aArgDumpPH[0], RT_ELEMENTS(g_aArgDumpPH), 0, dbgcCmdDumpPageHierarchy, "[addr [cr3 [mode]]", "Dumps the paging hierarchy at for specfied address range. Default context." },
394	{ "dphg", 0, 3, &g_aArgDumpPH[0], RT_ELEMENTS(g_aArgDumpPH), 0, dbgcCmdDumpPageHierarchy, "[addr [cr3 [mode]]", "Dumps the paging hierarchy at for specfied address range. Guest context." },
395	{ "dphh", 0, 3, &g_aArgDumpPH[0], RT_ELEMENTS(g_aArgDumpPH), 0, dbgcCmdDumpPageHierarchy, "[addr [cr3 [mode]]", "Dumps the paging hierarchy at for specfied address range. Hypervisor context." },
396	{ "dp", 0, 1, &g_aArgDumpMem[0], RT_ELEMENTS(g_aArgDumpMem), 0, dbgcCmdDumpMem, "[addr]", "Dump memory in mode sized words." },
397	{ "dps", 0, 1, &g_aArgDumpMem[0], RT_ELEMENTS(g_aArgDumpMem), 0, dbgcCmdDumpMem, "[addr]", "Dump memory in mode sized words with near symbols." },
398	{ "dpt", 1, 1, &g_aArgDumpPT[0], RT_ELEMENTS(g_aArgDumpPT), 0, dbgcCmdDumpPageTable,"<addr>", "Dumps page table entries of the default context." },
399	{ "dpta", 1, 1, &g_aArgDumpPTAddr[0],RT_ELEMENTS(g_aArgDumpPTAddr), 0, dbgcCmdDumpPageTable,"<addr>", "Dumps memory at given address as a page table." },
400	{ "dptb", 1, 1, &g_aArgDumpPT[0], RT_ELEMENTS(g_aArgDumpPT), 0, dbgcCmdDumpPageTableBoth,"<addr>", "Dumps page table entries of the guest and the hypervisor." },
401	{ "dptg", 1, 1, &g_aArgDumpPT[0], RT_ELEMENTS(g_aArgDumpPT), 0, dbgcCmdDumpPageTable,"<addr>", "Dumps page table entries of the guest." },
402	{ "dpth", 1, 1, &g_aArgDumpPT[0], RT_ELEMENTS(g_aArgDumpPT), 0, dbgcCmdDumpPageTable,"<addr>", "Dumps page table entries of the hypervisor." },
403	{ "dq", 0, 1, &g_aArgDumpMem[0], RT_ELEMENTS(g_aArgDumpMem), 0, dbgcCmdDumpMem, "[addr]", "Dump memory in quad words." },
404	{ "dqs", 0, 1, &g_aArgDumpMem[0], RT_ELEMENTS(g_aArgDumpMem), 0, dbgcCmdDumpMem, "[addr]", "Dump memory as quad words with near symbols." },
405	{ "dt", 0, 1, &g_aArgDumpTSS[0], RT_ELEMENTS(g_aArgDumpTSS), 0, dbgcCmdDumpTSS, "[tss\|tss:ign\|addr]", "Dump the task state segment (TSS)." },
406	{ "dt16", 0, 1, &g_aArgDumpTSS[0], RT_ELEMENTS(g_aArgDumpTSS), 0, dbgcCmdDumpTSS, "[tss\|tss:ign\|addr]", "Dump the 16-bit task state segment (TSS)." },
407	{ "dt32", 0, 1, &g_aArgDumpTSS[0], RT_ELEMENTS(g_aArgDumpTSS), 0, dbgcCmdDumpTSS, "[tss\|tss:ign\|addr]", "Dump the 32-bit task state segment (TSS)." },
408	{ "dt64", 0, 1, &g_aArgDumpTSS[0], RT_ELEMENTS(g_aArgDumpTSS), 0, dbgcCmdDumpTSS, "[tss\|tss:ign\|addr]", "Dump the 64-bit task state segment (TSS)." },
409	{ "dti", 1, 2, &g_aArgDumpTypeInfo[0],RT_ELEMENTS(g_aArgDumpTypeInfo), 0, dbgcCmdDumpTypeInfo,"<type> [levels]", "Dump type information." },
410	{ "dtv", 2, 3, &g_aArgDumpTypedVal[0],RT_ELEMENTS(g_aArgDumpTypedVal), 0, dbgcCmdDumpTypedVal,"<type> <addr> [levels]", "Dump a memory buffer using the information in the given type." },
411	{ "du", 0, 1, &g_aArgDumpMem[0], RT_ELEMENTS(g_aArgDumpMem), 0, dbgcCmdDumpMem, "[addr]", "Dump memory as unicode string (little endian)." },
412	{ "dw", 0, 1, &g_aArgDumpMem[0], RT_ELEMENTS(g_aArgDumpMem), 0, dbgcCmdDumpMem, "[addr]", "Dump memory in words." },
413	/** @todo add 'e', 'ea str', 'eza str', 'eu str' and 'ezu str'. See also
414	* dbgcCmdSearchMem and its dbgcVarsToBytes usage. */
415	{ "eb", 2, 2, &g_aArgEditMem[0], RT_ELEMENTS(g_aArgEditMem), 0, dbgcCmdEditMem, "<addr> <value>", "Write a 1-byte value to memory." },
416	{ "ew", 2, 2, &g_aArgEditMem[0], RT_ELEMENTS(g_aArgEditMem), 0, dbgcCmdEditMem, "<addr> <value>", "Write a 2-byte value to memory." },
417	{ "ed", 2, 2, &g_aArgEditMem[0], RT_ELEMENTS(g_aArgEditMem), 0, dbgcCmdEditMem, "<addr> <value>", "Write a 4-byte value to memory." },
418	{ "eq", 2, 2, &g_aArgEditMem[0], RT_ELEMENTS(g_aArgEditMem), 0, dbgcCmdEditMem, "<addr> <value>", "Write a 8-byte value to memory." },
419	{ "g", 0, 0, NULL, 0, 0, dbgcCmdGo, "", "Continue execution." },
420	{ "gu", 0, 0, NULL, 0, 0, dbgcCmdGoUp, "", "Go up - continue execution till after return." },
421	{ "k", 0, 0, NULL, 0, 0, dbgcCmdStack, "", "Callstack." },
422	{ "kg", 0, 0, NULL, 0, 0, dbgcCmdStack, "", "Callstack - guest." },
423	{ "kh", 0, 0, NULL, 0, 0, dbgcCmdStack, "", "Callstack - hypervisor." },
424	{ "lm", 0, ~0U, &g_aArgListMods[0], RT_ELEMENTS(g_aArgListMods), 0, dbgcCmdListModules, "[module [..]]", "List modules." },
425	{ "lmv", 0, ~0U, &g_aArgListMods[0], RT_ELEMENTS(g_aArgListMods), 0, dbgcCmdListModules, "[module [..]]", "List modules, verbose." },
426	{ "lmo", 0, ~0U, &g_aArgListMods[0], RT_ELEMENTS(g_aArgListMods), 0, dbgcCmdListModules, "[module [..]]", "List modules and their segments." },
427	{ "lmov", 0, ~0U, &g_aArgListMods[0], RT_ELEMENTS(g_aArgListMods), 0, dbgcCmdListModules, "[module [..]]", "List modules and their segments, verbose." },
428	{ "ln", 0, ~0U, &g_aArgListNear[0], RT_ELEMENTS(g_aArgListNear), 0, dbgcCmdListNear, "[addr/sym [..]]", "List symbols near to the address. Default address is CS:EIP." },
429	{ "ls", 0, 1, &g_aArgListSource[0],RT_ELEMENTS(g_aArgListSource), 0, dbgcCmdListSource, "[addr]", "Source." },
430	{ "m", 1, 1, &g_aArgMemoryInfo[0],RT_ELEMENTS(g_aArgMemoryInfo), 0, dbgcCmdMemoryInfo, "<addr>", "Display information about that piece of memory." },
431	{ "p", 0, 2, &g_aArgStepTrace[0], RT_ELEMENTS(g_aArgStepTrace), 0, dbgcCmdStepTrace, "[count] [cmds]", "Step over." },
432	{ "pr", 0, 0, NULL, 0, 0, dbgcCmdStepTraceToggle, "", "Toggle displaying registers for tracing & stepping (no code executed)." },
433	{ "pa", 1, 1, &g_aArgStepTraceTo[0], RT_ELEMENTS(g_aArgStepTraceTo), 0, dbgcCmdStepTraceTo, "<addr> [count] [cmds]","Step to the given address." },
434	{ "pc", 0, 0, &g_aArgStepTrace[0], RT_ELEMENTS(g_aArgStepTrace), 0, dbgcCmdStepTrace, "[count] [cmds]", "Step to the next call instruction." },
435	{ "pt", 0, 0, &g_aArgStepTrace[0], RT_ELEMENTS(g_aArgStepTrace), 0, dbgcCmdStepTrace, "[count] [cmds]", "Step to the next return instruction." },
436	{ "r", 0, 3, &g_aArgReg[0], RT_ELEMENTS(g_aArgReg), 0, dbgcCmdReg, "[reg [[=] newval]]", "Show or set register(s) - active reg set." },
437	{ "rg", 0, 3, &g_aArgReg[0], RT_ELEMENTS(g_aArgReg), 0, dbgcCmdRegGuest, "[reg [[=] newval]]", "Show or set register(s) - guest reg set." },
438	{ "rg32", 0, 0, NULL, 0, 0, dbgcCmdRegGuest, "", "Show 32-bit guest registers." },
439	{ "rg64", 0, 0, NULL, 0, 0, dbgcCmdRegGuest, "", "Show 64-bit guest registers." },
440	{ "rh", 0, 3, &g_aArgReg[0], RT_ELEMENTS(g_aArgReg), 0, dbgcCmdRegHyper, "[reg [[=] newval]]", "Show or set register(s) - hypervisor reg set." },
441	{ "rt", 0, 0, NULL, 0, 0, dbgcCmdRegTerse, "", "Toggles terse / verbose register info." },
442	{ "s", 0, ~0U, &g_aArgSearchMem[0], RT_ELEMENTS(g_aArgSearchMem), 0, dbgcCmdSearchMem, "[options] <range> <pattern>", "Continue last search." },
443	{ "sa", 2, ~0U, &g_aArgSearchMemType[0], RT_ELEMENTS(g_aArgSearchMemType),0, dbgcCmdSearchMemType, "<range> <pattern>", "Search memory for an ascii string." },
444	{ "sb", 2, ~0U, &g_aArgSearchMemType[0], RT_ELEMENTS(g_aArgSearchMemType),0, dbgcCmdSearchMemType, "<range> <pattern>", "Search memory for one or more bytes." },
445	{ "sd", 2, ~0U, &g_aArgSearchMemType[0], RT_ELEMENTS(g_aArgSearchMemType),0, dbgcCmdSearchMemType, "<range> <pattern>", "Search memory for one or more double words." },
446	{ "sq", 2, ~0U, &g_aArgSearchMemType[0], RT_ELEMENTS(g_aArgSearchMemType),0, dbgcCmdSearchMemType, "<range> <pattern>", "Search memory for one or more quad words." },
447	{ "su", 2, ~0U, &g_aArgSearchMemType[0], RT_ELEMENTS(g_aArgSearchMemType),0, dbgcCmdSearchMemType, "<range> <pattern>", "Search memory for an unicode string." },
448	{ "sw", 2, ~0U, &g_aArgSearchMemType[0], RT_ELEMENTS(g_aArgSearchMemType),0, dbgcCmdSearchMemType, "<range> <pattern>", "Search memory for one or more words." },
449	{ "sx", 0, ~0U, &g_aArgEventCtrlOpt[0], RT_ELEMENTS(g_aArgEventCtrlOpt), 0, dbgcCmdEventCtrlList, "[<event> [..]]", "Lists settings for exceptions, exits and other events. All if no filter is specified." },
450	{ "sx-", 3, ~0U, &g_aArgEventCtrl[0], RT_ELEMENTS(g_aArgEventCtrl), 0, dbgcCmdEventCtrl, "-c <cmd> <event> [..]", "Modifies the command for one or more exceptions, exits or other event. 'all' addresses all." },
451	{ "sxe", 1, ~0U, &g_aArgEventCtrl[0], RT_ELEMENTS(g_aArgEventCtrl), 0, dbgcCmdEventCtrl, "[-c <cmd>] <event> [..]", "Enable: Break into the debugger on the specified exceptions, exits and other events. 'all' addresses all." },
452	{ "sxn", 1, ~0U, &g_aArgEventCtrl[0], RT_ELEMENTS(g_aArgEventCtrl), 0, dbgcCmdEventCtrl, "[-c <cmd>] <event> [..]", "Notify: Display info in the debugger and continue on the specified exceptions, exits and other events. 'all' addresses all." },
453	{ "sxi", 1, ~0U, &g_aArgEventCtrl[0], RT_ELEMENTS(g_aArgEventCtrl), 0, dbgcCmdEventCtrl, "[-c <cmd>] <event> [..]", "Ignore: Ignore the specified exceptions, exits and other events ('all' = all of them). Without the -c option, the guest runs like normal." },
454	{ "sxr", 0, 0, &g_aArgEventCtrlOpt[0], RT_ELEMENTS(g_aArgEventCtrlOpt), 0, dbgcCmdEventCtrlReset, "", "Reset the settings to default for exceptions, exits and other events. All if no filter is specified." },
455	{ "t", 0, 2, &g_aArgStepTrace[0], RT_ELEMENTS(g_aArgStepTrace), 0, dbgcCmdStepTrace, "[count] [cmds]", "Trace ." },
456	{ "tr", 0, 0, NULL, 0, 0, dbgcCmdStepTraceToggle, "", "Toggle displaying registers for tracing & stepping (no code executed)." },
457	{ "ta", 1, 1, &g_aArgStepTraceTo[0], RT_ELEMENTS(g_aArgStepTraceTo), 0, dbgcCmdStepTraceTo, "<addr> [count] [cmds]","Trace to the given address." },
458	{ "tc", 0, 0, &g_aArgStepTrace[0], RT_ELEMENTS(g_aArgStepTrace), 0, dbgcCmdStepTrace, "[count] [cmds]", "Trace to the next call instruction." },
459	{ "tt", 0, 0, &g_aArgStepTrace[0], RT_ELEMENTS(g_aArgStepTrace), 0, dbgcCmdStepTrace, "[count] [cmds]", "Trace to the next return instruction." },
460	{ "u", 0, 1, &g_aArgUnassemble[0],RT_ELEMENTS(g_aArgUnassemble), 0, dbgcCmdUnassemble, "[addr]", "Unassemble." },
461	{ "u64", 0, 1, &g_aArgUnassemble[0],RT_ELEMENTS(g_aArgUnassemble), 0, dbgcCmdUnassemble, "[addr]", "Unassemble 64-bit code." },
462	{ "u32", 0, 1, &g_aArgUnassemble[0],RT_ELEMENTS(g_aArgUnassemble), 0, dbgcCmdUnassemble, "[addr]", "Unassemble 32-bit code." },
463	{ "u16", 0, 1, &g_aArgUnassemble[0],RT_ELEMENTS(g_aArgUnassemble), 0, dbgcCmdUnassemble, "[addr]", "Unassemble 16-bit code." },
464	{ "uv86", 0, 1, &g_aArgUnassemble[0],RT_ELEMENTS(g_aArgUnassemble), 0, dbgcCmdUnassemble, "[addr]", "Unassemble 16-bit code with v8086/real mode addressing." },
465	{ "ucfg", 0, 1, &g_aArgUnassembleCfg[0], RT_ELEMENTS(g_aArgUnassembleCfg), 0, dbgcCmdUnassembleCfg, "[addr]", "Unassemble creating a control flow graph." },
466	{ "ucfgc", 0, 1, &g_aArgUnassembleCfg[0], RT_ELEMENTS(g_aArgUnassembleCfg), 0, dbgcCmdUnassembleCfg, "[addr]", "Unassemble creating a control flow graph with colors." },
467	};
468
469	/** The number of commands in the CodeView/WinDbg emulation. */
470	const uint32_t g_cCmdsCodeView = RT_ELEMENTS(g_aCmdsCodeView);
471
472
473	/**
474	* Selectable debug event descriptors.
475	*
476	* @remarks Sorted by DBGCSXEVT::enmType value.
477	*/
478	const DBGCSXEVT g_aDbgcSxEvents[] =
479	{
480	{ DBGFEVENT_INTERRUPT_HARDWARE, "hwint", NULL, kDbgcSxEventKind_Interrupt, kDbgcEvtState_Disabled, 0, "Hardware interrupt" },
481	{ DBGFEVENT_INTERRUPT_SOFTWARE, "swint", NULL, kDbgcSxEventKind_Interrupt, kDbgcEvtState_Disabled, 0, "Software interrupt" },
482	{ DBGFEVENT_TRIPLE_FAULT, "triplefault", NULL, kDbgcSxEventKind_Plain, kDbgcEvtState_Enabled, 0, "Triple fault "},
483	{ DBGFEVENT_XCPT_DE, "xcpt_de", "de", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, "#DE (integer divide error)" },
484	{ DBGFEVENT_XCPT_DB, "xcpt_db", "db", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, "#DB (debug)" },
485	{ DBGFEVENT_XCPT_02, "xcpt_02", NULL, kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
486	{ DBGFEVENT_XCPT_BP, "xcpt_bp", "bp", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, "#BP (breakpoint)" },
487	{ DBGFEVENT_XCPT_OF, "xcpt_of", "of", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, "#OF (overflow (INTO))" },
488	{ DBGFEVENT_XCPT_BR, "xcpt_br", "br", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, "#BR (bound range exceeded)" },
489	{ DBGFEVENT_XCPT_UD, "xcpt_ud", "ud", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, "#UD (undefined opcode)" },
490	{ DBGFEVENT_XCPT_NM, "xcpt_nm", "nm", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, "#NM (FPU not available)" },
491	{ DBGFEVENT_XCPT_DF, "xcpt_df", "df", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, "#DF (double fault)" },
492	{ DBGFEVENT_XCPT_09, "xcpt_09", NULL, kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, "Coprocessor segment overrun" },
493	{ DBGFEVENT_XCPT_TS, "xcpt_ts", "ts", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, DBGCSXEVT_F_TAKE_ARG, "#TS (task switch)" },
494	{ DBGFEVENT_XCPT_NP, "xcpt_np", "np", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, DBGCSXEVT_F_TAKE_ARG, "#NP (segment not present)" },
495	{ DBGFEVENT_XCPT_SS, "xcpt_ss", "ss", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, DBGCSXEVT_F_TAKE_ARG, "#SS (stack segment fault)" },
496	{ DBGFEVENT_XCPT_GP, "xcpt_gp", "gp", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, DBGCSXEVT_F_TAKE_ARG, "#GP (general protection fault)" },
497	{ DBGFEVENT_XCPT_PF, "xcpt_pf", "pf", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, DBGCSXEVT_F_TAKE_ARG, "#PF (page fault)" },
498	{ DBGFEVENT_XCPT_0f, "xcpt_0f", "xcpt0f", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
499	{ DBGFEVENT_XCPT_MF, "xcpt_mf", "mf", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, "#MF (math fault)" },
500	{ DBGFEVENT_XCPT_AC, "xcpt_ac", "ac", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, "#AC (alignment check)" },
501	{ DBGFEVENT_XCPT_MC, "xcpt_mc", "mc", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, "#MC (machine check)" },
502	{ DBGFEVENT_XCPT_XF, "xcpt_xf", "xf", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, "#XF (SIMD floating-point exception)" },
503	{ DBGFEVENT_XCPT_VE, "xcpt_vd", "ve", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, "#VE (virtualization exception)" },
504	{ DBGFEVENT_XCPT_15, "xcpt_15", NULL, kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
505	{ DBGFEVENT_XCPT_16, "xcpt_16", NULL, kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
506	{ DBGFEVENT_XCPT_17, "xcpt_17", NULL, kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
507	{ DBGFEVENT_XCPT_18, "xcpt_18", NULL, kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
508	{ DBGFEVENT_XCPT_19, "xcpt_19", NULL, kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
509	{ DBGFEVENT_XCPT_1a, "xcpt_1a", NULL, kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
510	{ DBGFEVENT_XCPT_1b, "xcpt_1b", NULL, kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
511	{ DBGFEVENT_XCPT_1c, "xcpt_1c", NULL, kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
512	{ DBGFEVENT_XCPT_1d, "xcpt_1d", NULL, kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
513	{ DBGFEVENT_XCPT_SX, "xcpt_sx", "sx", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, DBGCSXEVT_F_TAKE_ARG, "#SX (security exception)" },
514	{ DBGFEVENT_XCPT_1f, "xcpt_1f", "xcpt1f", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
515	{ DBGFEVENT_INSTR_HALT, "instr_halt", "hlt", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
516	{ DBGFEVENT_INSTR_MWAIT, "instr_mwait", "mwait", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
517	{ DBGFEVENT_INSTR_MONITOR, "instr_monitor", "monitor", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
518	{ DBGFEVENT_INSTR_CPUID, "instr_cpuid", "cpuid", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
519	{ DBGFEVENT_INSTR_INVD, "instr_invd", "invd", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
520	{ DBGFEVENT_INSTR_WBINVD, "instr_wbinvd", "wbinvd", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
521	{ DBGFEVENT_INSTR_INVLPG, "instr_invlpg", "invlpg", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
522	{ DBGFEVENT_INSTR_RDTSC, "instr_rdtsc", "rdtsc", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
523	{ DBGFEVENT_INSTR_RDTSCP, "instr_rdtscp", "rdtscp", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
524	{ DBGFEVENT_INSTR_RDPMC, "instr_rdpmc", "rdpmc", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
525	{ DBGFEVENT_INSTR_RDMSR, "instr_rdmsr", "rdmsr", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
526	{ DBGFEVENT_INSTR_WRMSR, "instr_wrmsr", "wrmsr", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
527	{ DBGFEVENT_INSTR_CRX_READ, "instr_crx_read", "crx_read", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, DBGCSXEVT_F_TAKE_ARG, NULL },
528	{ DBGFEVENT_INSTR_CRX_WRITE, "instr_crx_write", "crx_write",kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, DBGCSXEVT_F_TAKE_ARG, NULL },
529	{ DBGFEVENT_INSTR_DRX_READ, "instr_drx_read", "drx_read", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, DBGCSXEVT_F_TAKE_ARG, NULL },
530	{ DBGFEVENT_INSTR_DRX_WRITE, "instr_drx_write", "drx_write",kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, DBGCSXEVT_F_TAKE_ARG, NULL },
531	{ DBGFEVENT_INSTR_PAUSE, "instr_pause", "pause", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
532	{ DBGFEVENT_INSTR_XSETBV, "instr_xsetbv", "xsetbv", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
533	{ DBGFEVENT_INSTR_SIDT, "instr_sidt", "sidt", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
534	{ DBGFEVENT_INSTR_LIDT, "instr_lidt", "lidt", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
535	{ DBGFEVENT_INSTR_SGDT, "instr_sgdt", "sgdt", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
536	{ DBGFEVENT_INSTR_LGDT, "instr_lgdt", "lgdt", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
537	{ DBGFEVENT_INSTR_SLDT, "instr_sldt", "sldt", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
538	{ DBGFEVENT_INSTR_LLDT, "instr_lldt", "lldt", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
539	{ DBGFEVENT_INSTR_STR, "instr_str", "str", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
540	{ DBGFEVENT_INSTR_LTR, "instr_ltr", "ltr", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
541	{ DBGFEVENT_INSTR_GETSEC, "instr_getsec", "getsec", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
542	{ DBGFEVENT_INSTR_RSM, "instr_rsm", "rsm", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
543	{ DBGFEVENT_INSTR_RDRAND, "instr_rdrand", "rdrand", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
544	{ DBGFEVENT_INSTR_RDSEED, "instr_rdseed", "rdseed", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
545	{ DBGFEVENT_INSTR_XSAVES, "instr_xsaves", "xsaves", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
546	{ DBGFEVENT_INSTR_XRSTORS, "instr_xrstors", "xrstors", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
547	{ DBGFEVENT_INSTR_VMM_CALL, "instr_vmm_call", "vmm_call", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
548	{ DBGFEVENT_INSTR_VMX_VMCLEAR, "instr_vmx_vmclear", "vmclear", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
549	{ DBGFEVENT_INSTR_VMX_VMLAUNCH, "instr_vmx_vmlaunch", "vmlaunch", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
550	{ DBGFEVENT_INSTR_VMX_VMPTRLD, "instr_vmx_vmptrld", "vmptrld", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
551	{ DBGFEVENT_INSTR_VMX_VMPTRST, "instr_vmx_vmptrst", "vmptrst", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
552	{ DBGFEVENT_INSTR_VMX_VMREAD, "instr_vmx_vmread", "vmread", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
553	{ DBGFEVENT_INSTR_VMX_VMRESUME, "instr_vmx_vmresume", "vmresume", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
554	{ DBGFEVENT_INSTR_VMX_VMWRITE, "instr_vmx_vmwrite", "vmwrite", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
555	{ DBGFEVENT_INSTR_VMX_VMXOFF, "instr_vmx_vmxoff", "vmxoff", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
556	{ DBGFEVENT_INSTR_VMX_VMXON, "instr_vmx_vmxon", "vmxon", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
557	{ DBGFEVENT_INSTR_VMX_VMFUNC, "instr_vmx_vmfunc", "vmfunc", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
558	{ DBGFEVENT_INSTR_VMX_INVEPT, "instr_vmx_invept", "invept", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
559	{ DBGFEVENT_INSTR_VMX_INVVPID, "instr_vmx_invvpid", "invvpid", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
560	{ DBGFEVENT_INSTR_VMX_INVPCID, "instr_vmx_invpcid", "invpcid", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
561	{ DBGFEVENT_INSTR_SVM_VMRUN, "instr_svm_vmrun", "vmrun", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
562	{ DBGFEVENT_INSTR_SVM_VMLOAD, "instr_svm_vmload", "vmload", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
563	{ DBGFEVENT_INSTR_SVM_VMSAVE, "instr_svm_vmsave", "vmsave", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
564	{ DBGFEVENT_INSTR_SVM_STGI, "instr_svm_stgi", "stgi", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
565	{ DBGFEVENT_INSTR_SVM_CLGI, "instr_svm_clgi", "clgi", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
566	{ DBGFEVENT_EXIT_TASK_SWITCH, "exit_task_switch", "task_switch", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
567	{ DBGFEVENT_EXIT_HALT, "exit_halt", NULL, kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
568	{ DBGFEVENT_EXIT_MWAIT, "exit_mwait", NULL, kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
569	{ DBGFEVENT_EXIT_MONITOR, "exit_monitor", NULL, kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
570	{ DBGFEVENT_EXIT_CPUID, "exit_cpuid", NULL, kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
571	{ DBGFEVENT_EXIT_INVD, "exit_invd", NULL, kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
572	{ DBGFEVENT_EXIT_WBINVD, "exit_wbinvd", NULL, kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
573	{ DBGFEVENT_EXIT_INVLPG, "exit_invlpg", NULL, kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
574	{ DBGFEVENT_EXIT_RDTSC, "exit_rdtsc", NULL, kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
575	{ DBGFEVENT_EXIT_RDTSCP, "exit_rdtscp", NULL, kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
576	{ DBGFEVENT_EXIT_RDPMC, "exit_rdpmc", NULL, kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
577	{ DBGFEVENT_EXIT_RDMSR, "exit_rdmsr", NULL, kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
578	{ DBGFEVENT_EXIT_WRMSR, "exit_wrmsr", NULL, kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
579	{ DBGFEVENT_EXIT_CRX_READ, "exit_crx_read", NULL, kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
580	{ DBGFEVENT_EXIT_CRX_WRITE, "exit_crx_write", NULL, kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
581	{ DBGFEVENT_EXIT_DRX_READ, "exit_drx_read", NULL, kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
582	{ DBGFEVENT_EXIT_DRX_WRITE, "exit_drx_write", NULL, kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
583	{ DBGFEVENT_EXIT_PAUSE, "exit_pause", NULL, kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
584	{ DBGFEVENT_EXIT_XSETBV, "exit_xsetbv", NULL, kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
585	{ DBGFEVENT_EXIT_SIDT, "exit_sidt", NULL, kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
586	{ DBGFEVENT_EXIT_LIDT, "exit_lidt", NULL, kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
587	{ DBGFEVENT_EXIT_SGDT, "exit_sgdt", NULL, kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
588	{ DBGFEVENT_EXIT_LGDT, "exit_lgdt", NULL, kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
589	{ DBGFEVENT_EXIT_SLDT, "exit_sldt", NULL, kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
590	{ DBGFEVENT_EXIT_LLDT, "exit_lldt", NULL, kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
591	{ DBGFEVENT_EXIT_STR, "exit_str", NULL, kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
592	{ DBGFEVENT_EXIT_LTR, "exit_ltr", NULL, kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
593	{ DBGFEVENT_EXIT_GETSEC, "exit_getsec", NULL, kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
594	{ DBGFEVENT_EXIT_RSM, "exit_rsm", NULL, kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
595	{ DBGFEVENT_EXIT_RDRAND, "exit_rdrand", NULL, kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
596	{ DBGFEVENT_EXIT_RDSEED, "exit_rdseed", NULL, kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
597	{ DBGFEVENT_EXIT_XSAVES, "exit_xsaves", NULL, kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
598	{ DBGFEVENT_EXIT_XRSTORS, "exit_xrstors", NULL, kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
599	{ DBGFEVENT_EXIT_VMM_CALL, "exit_vmm_call", NULL, kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
600	{ DBGFEVENT_EXIT_VMX_VMCLEAR, "exit_vmx_vmclear", NULL, kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
601	{ DBGFEVENT_EXIT_VMX_VMLAUNCH, "exit_vmx_vmlaunch", NULL, kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
602	{ DBGFEVENT_EXIT_VMX_VMPTRLD, "exit_vmx_vmptrld", NULL, kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
603	{ DBGFEVENT_EXIT_VMX_VMPTRST, "exit_vmx_vmptrst", NULL, kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
604	{ DBGFEVENT_EXIT_VMX_VMREAD, "exit_vmx_vmread", NULL, kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
605	{ DBGFEVENT_EXIT_VMX_VMRESUME, "exit_vmx_vmresume", NULL, kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
606	{ DBGFEVENT_EXIT_VMX_VMWRITE, "exit_vmx_vmwrite", NULL, kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
607	{ DBGFEVENT_EXIT_VMX_VMXOFF, "exit_vmx_vmxoff", NULL, kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
608	{ DBGFEVENT_EXIT_VMX_VMXON, "exit_vmx_vmxon", NULL, kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
609	{ DBGFEVENT_EXIT_VMX_VMFUNC, "exit_vmx_vmfunc", NULL, kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
610	{ DBGFEVENT_EXIT_VMX_INVEPT, "exit_vmx_invept", NULL, kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
611	{ DBGFEVENT_EXIT_VMX_INVVPID, "exit_vmx_invvpid", NULL, kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
612	{ DBGFEVENT_EXIT_VMX_INVPCID, "exit_vmx_invpcid", NULL, kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
613	{ DBGFEVENT_EXIT_VMX_EPT_VIOLATION, "exit_vmx_ept_violation", "eptvio", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
614	{ DBGFEVENT_EXIT_VMX_EPT_MISCONFIG, "exit_vmx_ept_misconfig", "eptmis", kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
615	{ DBGFEVENT_EXIT_VMX_VAPIC_ACCESS, "exit_vmx_vapic_access", NULL, kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
616	{ DBGFEVENT_EXIT_VMX_VAPIC_WRITE, "exit_vmx_vapic_write", NULL, kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
617	{ DBGFEVENT_EXIT_SVM_VMRUN, "exit_svm_vmrun", NULL, kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
618	{ DBGFEVENT_EXIT_SVM_VMLOAD, "exit_svm_vmload", NULL, kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
619	{ DBGFEVENT_EXIT_SVM_VMSAVE, "exit_svm_vmsave", NULL, kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
620	{ DBGFEVENT_EXIT_SVM_STGI, "exit_svm_stgi", NULL, kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
621	{ DBGFEVENT_EXIT_SVM_CLGI, "exit_svm_clgi", NULL, kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
622	{ DBGFEVENT_IOPORT_UNASSIGNED, "pio_unassigned", NULL, kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
623	{ DBGFEVENT_IOPORT_UNUSED, "pio_unused", NULL, kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
624	{ DBGFEVENT_MEMORY_UNASSIGNED, "mmio_unassigned", NULL, kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
625	{ DBGFEVENT_MEMORY_ROM_WRITE, "rom_write", NULL, kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, 0, NULL },
626	{ DBGFEVENT_BSOD_MSR, "bsod_msr", NULL, kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, DBGCSXEVT_F_BUGCHECK, NULL },
627	{ DBGFEVENT_BSOD_EFI, "bsod_efi", NULL, kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, DBGCSXEVT_F_BUGCHECK, NULL },
628	{ DBGFEVENT_BSOD_VMMDEV, "bsod_vmmdev", NULL, kDbgcSxEventKind_Plain, kDbgcEvtState_Disabled, DBGCSXEVT_F_BUGCHECK, NULL },
629	};
630	/** Number of entries in g_aDbgcSxEvents. */
631	const uint32_t g_cDbgcSxEvents = RT_ELEMENTS(g_aDbgcSxEvents);
632
633
634
635	/**
636	* @callback_method_impl{FNDBGCCMD, The 'g' command.}
637	*/
638	static DECLCALLBACK(int) dbgcCmdGo(PCDBGCCMD pCmd, PDBGCCMDHLP pCmdHlp, PUVM pUVM, PCDBGCVAR paArgs, unsigned cArgs)
639	{
640	DBGC_CMDHLP_REQ_UVM_RET(pCmdHlp, pCmd, pUVM);
641
642	/*
643	* Check if the VM is halted or not before trying to resume it.
644	*/
645	if (!DBGFR3IsHalted(pUVM))
646	return DBGCCmdHlpFail(pCmdHlp, pCmd, "The VM is already running");
647
648	int rc = DBGFR3Resume(pUVM);
649	if (RT_FAILURE(rc))
650	return DBGCCmdHlpFailRc(pCmdHlp, pCmd, rc, "DBGFR3Resume");
651
652	NOREF(paArgs); NOREF(cArgs);
653	return VINF_SUCCESS;
654	}
655
656
657	/**
658	* @callback_method_impl{FNDBGCCMD, The 'gu' command.}
659	*/
660	static DECLCALLBACK(int) dbgcCmdGoUp(PCDBGCCMD pCmd, PDBGCCMDHLP pCmdHlp, PUVM pUVM, PCDBGCVAR paArgs, unsigned cArgs)
661	{
662	PDBGC pDbgc = DBGC_CMDHLP2DBGC(pCmdHlp);
663	RT_NOREF(pCmd, paArgs, cArgs);
664
665	/* The simple way out. */
666	PDBGFADDRESS pStackPop = NULL; /** @todo try set up some stack limitations */
667	RTGCPTR cbStackPop = 0;
668	int rc = DBGFR3StepEx(pUVM, pDbgc->idCpu, DBGF_STEP_F_OVER \| DBGF_STEP_F_STOP_AFTER_RET, NULL, pStackPop, cbStackPop, _512K);
669	if (RT_SUCCESS(rc))
670	pDbgc->fReady = false;
671	else
672	return DBGCCmdHlpFailRc(pCmdHlp, pCmd, rc, "DBGFR3StepEx(,,DBGF_STEP_F_OVER \| DBGF_STEP_F_STOP_AFTER_RET,) failed");
673	return rc;
674	}
675
676
677	/**
678	* @callback_method_impl{FNDBGCCMD, The 'ba' command.}
679	*/
680	static DECLCALLBACK(int) dbgcCmdBrkAccess(PCDBGCCMD pCmd, PDBGCCMDHLP pCmdHlp, PUVM pUVM, PCDBGCVAR paArgs, unsigned cArgs)
681	{
682	DBGC_CMDHLP_REQ_UVM_RET(pCmdHlp, pCmd, pUVM);
683
684	/*
685	* Interpret access type.
686	*/
687	if ( !strchr("xrwi", paArgs[0].u.pszString[0])
688	\|\| paArgs[0].u.pszString[1])
689	return DBGCCmdHlpFail(pCmdHlp, pCmd, "Invalid access type '%s' for '%s'. Valid types are 'e', 'r', 'w' and 'i'",
690	paArgs[0].u.pszString, pCmd->pszCmd);
691	uint8_t fType = 0;
692	switch (paArgs[0].u.pszString[0])
693	{
694	case 'x': fType = X86_DR7_RW_EO; break;
695	case 'r': fType = X86_DR7_RW_RW; break;
696	case 'w': fType = X86_DR7_RW_WO; break;
697	case 'i': fType = X86_DR7_RW_IO; break;
698	}
699
700	/*
701	* Validate size.
702	*/
703	if (fType == X86_DR7_RW_EO && paArgs[1].u.u64Number != 1)
704	return DBGCCmdHlpFail(pCmdHlp, pCmd, "Invalid access size %RX64 for '%s'. 'x' access type requires size 1!",
705	paArgs[1].u.u64Number, pCmd->pszCmd);
706	switch (paArgs[1].u.u64Number)
707	{
708	case 1:
709	case 2:
710	case 4:
711	break;
712	/case 8: - later/
713	default:
714	return DBGCCmdHlpFail(pCmdHlp, pCmd, "Invalid access size %RX64 for '%s'. 1, 2 or 4!",
715	paArgs[1].u.u64Number, pCmd->pszCmd);
716	}
717	uint8_t cb = (uint8_t)paArgs[1].u.u64Number;
718
719	/*
720	* Convert the pointer to a DBGF address.
721	*/
722	DBGFADDRESS Address;
723	int rc = DBGCCmdHlpVarToDbgfAddr(pCmdHlp, &paArgs[2], &Address);
724	if (RT_FAILURE(rc))
725	return DBGCCmdHlpFailRc(pCmdHlp, pCmd, rc, "DBGCCmdHlpVarToDbgfAddr(,%DV,)", &paArgs[2]);
726
727	/*
728	* Pick out the optional arguments.
729	*/
730	uint64_t iHitTrigger = 0;
731	uint64_t iHitDisable = UINT64_MAX;
732	const char *pszCmds = NULL;
733	unsigned iArg = 3;
734	if (iArg < cArgs && paArgs[iArg].enmType == DBGCVAR_TYPE_NUMBER)
735	{
736	iHitTrigger = paArgs[iArg].u.u64Number;
737	iArg++;
738	if (iArg < cArgs && paArgs[iArg].enmType == DBGCVAR_TYPE_NUMBER)
739	{
740	iHitDisable = paArgs[iArg].u.u64Number;
741	iArg++;
742	}
743	}
744	if (iArg < cArgs && paArgs[iArg].enmType == DBGCVAR_TYPE_STRING)
745	{
746	pszCmds = paArgs[iArg].u.pszString;
747	iArg++;
748	}
749
750	/*
751	* Try set the breakpoint.
752	*/
753	uint32_t iBp;
754	rc = DBGFR3BpSetReg(pUVM, &Address, iHitTrigger, iHitDisable, fType, cb, &iBp);
755	if (RT_SUCCESS(rc))
756	{
757	PDBGC pDbgc = DBGC_CMDHLP2DBGC(pCmdHlp);
758	rc = dbgcBpAdd(pDbgc, iBp, pszCmds);
759	if (RT_SUCCESS(rc))
760	return DBGCCmdHlpPrintf(pCmdHlp, "Set access breakpoint %u at %RGv\n", iBp, Address.FlatPtr);
761	if (rc == VERR_DBGC_BP_EXISTS)
762	{
763	rc = dbgcBpUpdate(pDbgc, iBp, pszCmds);
764	if (RT_SUCCESS(rc))
765	return DBGCCmdHlpPrintf(pCmdHlp, "Updated access breakpoint %u at %RGv\n", iBp, Address.FlatPtr);
766	}
767	int rc2 = DBGFR3BpClear(pDbgc->pUVM, iBp);
768	AssertRC(rc2);
769	}
770	return DBGCCmdHlpFailRc(pCmdHlp, pCmd, rc, "Failed to set access breakpoint at %RGv", Address.FlatPtr);
771	}
772
773
774	/**
775	* @callback_method_impl{FNDBGCCMD, The 'bc' command.}
776	*/
777	static DECLCALLBACK(int) dbgcCmdBrkClear(PCDBGCCMD pCmd, PDBGCCMDHLP pCmdHlp, PUVM pUVM, PCDBGCVAR paArgs, unsigned cArgs)
778	{
779	DBGC_CMDHLP_REQ_UVM_RET(pCmdHlp, pCmd, pUVM);
780
781	/*
782	* Enumerate the arguments.
783	*/
784	PDBGC pDbgc = DBGC_CMDHLP2DBGC(pCmdHlp);
785	int rc = VINF_SUCCESS;
786	for (unsigned iArg = 0; iArg < cArgs && RT_SUCCESS(rc); iArg++)
787	{
788	if (paArgs[iArg].enmType != DBGCVAR_TYPE_STRING)
789	{
790	/* one */
791	uint32_t iBp = (uint32_t)paArgs[iArg].u.u64Number;
792	if (iBp == paArgs[iArg].u.u64Number)
793	{
794	int rc2 = DBGFR3BpClear(pUVM, iBp);
795	if (RT_FAILURE(rc2))
796	rc = DBGCCmdHlpFailRc(pCmdHlp, pCmd, rc2, "DBGFR3BpClear(,%#x)", iBp);
797	if (RT_SUCCESS(rc2) \|\| rc2 == VERR_DBGF_BP_NOT_FOUND)
798	dbgcBpDelete(pDbgc, iBp);
799	}
800	else
801	rc = DBGCCmdHlpFail(pCmdHlp, pCmd, "Breakpoint id %RX64 is too large", paArgs[iArg].u.u64Number);
802	}
803	else if (!strcmp(paArgs[iArg].u.pszString, "all"))
804	{
805	/* all */
806	PDBGCBP pBp = pDbgc->pFirstBp;
807	while (pBp)
808	{
809	uint32_t iBp = pBp->iBp;
810	pBp = pBp->pNext;
811
812	int rc2 = DBGFR3BpClear(pUVM, iBp);
813	if (RT_FAILURE(rc2))
814	rc = DBGCCmdHlpFailRc(pCmdHlp, pCmd, rc2, "DBGFR3BpClear(,%#x)", iBp);
815	if (RT_SUCCESS(rc2) \|\| rc2 == VERR_DBGF_BP_NOT_FOUND)
816	dbgcBpDelete(pDbgc, iBp);
817	}
818	}
819	else
820	rc = DBGCCmdHlpFail(pCmdHlp, pCmd, "Invalid argument '%s'", paArgs[iArg].u.pszString);
821	}
822	return rc;
823	}
824
825
826	/**
827	* @callback_method_impl{FNDBGCCMD, The 'bd' command.}
828	*/
829	static DECLCALLBACK(int) dbgcCmdBrkDisable(PCDBGCCMD pCmd, PDBGCCMDHLP pCmdHlp, PUVM pUVM, PCDBGCVAR paArgs, unsigned cArgs)
830	{
831	/*
832	* Enumerate the arguments.
833	*/
834	int rc = VINF_SUCCESS;
835	for (unsigned iArg = 0; iArg < cArgs && RT_SUCCESS(rc); iArg++)
836	{
837	if (paArgs[iArg].enmType != DBGCVAR_TYPE_STRING)
838	{
839	/* one */
840	uint32_t iBp = (uint32_t)paArgs[iArg].u.u64Number;
841	if (iBp == paArgs[iArg].u.u64Number)
842	{
843	rc = DBGFR3BpDisable(pUVM, iBp);
844	if (RT_FAILURE(rc))
845	rc = DBGCCmdHlpFailRc(pCmdHlp, pCmd, rc, "DBGFR3BpDisable failed for breakpoint %#x", iBp);
846	}
847	else
848	rc = DBGCCmdHlpFail(pCmdHlp, pCmd, "Breakpoint id %RX64 is too large", paArgs[iArg].u.u64Number);
849	}
850	else if (!strcmp(paArgs[iArg].u.pszString, "all"))
851	{
852	/* all */
853	PDBGC pDbgc = DBGC_CMDHLP2DBGC(pCmdHlp);
854	for (PDBGCBP pBp = pDbgc->pFirstBp; pBp; pBp = pBp->pNext)
855	{
856	int rc2 = DBGFR3BpDisable(pUVM, pBp->iBp);
857	if (RT_FAILURE(rc2))
858	rc = DBGCCmdHlpFailRc(pCmdHlp, pCmd, rc2, "DBGFR3BpDisable failed for breakpoint %#x", pBp->iBp);
859	}
860	}
861	else
862	rc = DBGCCmdHlpFail(pCmdHlp, pCmd, "Invalid argument '%s'", paArgs[iArg].u.pszString);
863	}
864	return rc;
865	}
866
867
868	/**
869	* @callback_method_impl{FNDBGCCMD, The 'be' command.}
870	*/
871	static DECLCALLBACK(int) dbgcCmdBrkEnable(PCDBGCCMD pCmd, PDBGCCMDHLP pCmdHlp, PUVM pUVM, PCDBGCVAR paArgs, unsigned cArgs)
872	{
873	DBGC_CMDHLP_REQ_UVM_RET(pCmdHlp, pCmd, pUVM);
874
875	/*
876	* Enumerate the arguments.
877	*/
878	int rc = VINF_SUCCESS;
879	for (unsigned iArg = 0; iArg < cArgs && RT_SUCCESS(rc); iArg++)
880	{
881	if (paArgs[iArg].enmType != DBGCVAR_TYPE_STRING)
882	{
883	/* one */
884	uint32_t iBp = (uint32_t)paArgs[iArg].u.u64Number;
885	if (iBp == paArgs[iArg].u.u64Number)
886	{
887	rc = DBGFR3BpEnable(pUVM, iBp);
888	if (RT_FAILURE(rc))
889	rc = DBGCCmdHlpFailRc(pCmdHlp, pCmd, rc, "DBGFR3BpEnable failed for breakpoint %#x", iBp);
890	}
891	else
892	rc = DBGCCmdHlpFail(pCmdHlp, pCmd, "Breakpoint id %RX64 is too large", paArgs[iArg].u.u64Number);
893	}
894	else if (!strcmp(paArgs[iArg].u.pszString, "all"))
895	{
896	/* all */
897	PDBGC pDbgc = DBGC_CMDHLP2DBGC(pCmdHlp);
898	for (PDBGCBP pBp = pDbgc->pFirstBp; pBp; pBp = pBp->pNext)
899	{
900	int rc2 = DBGFR3BpEnable(pUVM, pBp->iBp);
901	if (RT_FAILURE(rc2))
902	rc = DBGCCmdHlpFailRc(pCmdHlp, pCmd, rc2, "DBGFR3BpEnable failed for breakpoint %#x", pBp->iBp);
903	}
904	}
905	else
906	rc = DBGCCmdHlpFail(pCmdHlp, pCmd, "Invalid argument '%s'", paArgs[iArg].u.pszString);
907	}
908	return rc;
909	}
910
911
912	/**
913	* Breakpoint enumeration callback function.
914	*
915	* @returns VBox status code. Any failure will stop the enumeration.
916	* @param pUVM The user mode VM handle.
917	* @param pvUser The user argument.
918	* @param pBp Pointer to the breakpoint information. (readonly)
919	*/
920	static DECLCALLBACK(int) dbgcEnumBreakpointsCallback(PUVM pUVM, void *pvUser, PCDBGFBP pBp)
921	{
922	PDBGC pDbgc = (PDBGC)pvUser;
923	PDBGCBP pDbgcBp = dbgcBpGet(pDbgc, pBp->iBp);
924
925	/*
926	* BP type and size.
927	*/
928	DBGCCmdHlpPrintf(&pDbgc->CmdHlp, "%#4x %c ", pBp->iBp, pBp->fEnabled ? 'e' : 'd');
929	bool fHasAddress = false;
930	switch (pBp->enmType)
931	{
932	case DBGFBPTYPE_INT3:
933	DBGCCmdHlpPrintf(&pDbgc->CmdHlp, " p %RGv", pBp->u.Int3.GCPtr);
934	fHasAddress = true;
935	break;
936	case DBGFBPTYPE_REG:
937	{
938	char chType;
939	switch (pBp->u.Reg.fType)
940	{
941	case X86_DR7_RW_EO: chType = 'x'; break;
942	case X86_DR7_RW_WO: chType = 'w'; break;
943	case X86_DR7_RW_IO: chType = 'i'; break;
944	case X86_DR7_RW_RW: chType = 'r'; break;
945	default: chType = '?'; break;
946
947	}
948	DBGCCmdHlpPrintf(&pDbgc->CmdHlp, "%d %c %RGv", pBp->u.Reg.cb, chType, pBp->u.Reg.GCPtr);
949	fHasAddress = true;
950	break;
951	}
952
953	case DBGFBPTYPE_REM:
954	DBGCCmdHlpPrintf(&pDbgc->CmdHlp, " r %RGv", pBp->u.Rem.GCPtr);
955	fHasAddress = true;
956	break;
957
958	/** @todo realign the list when I/O and MMIO breakpoint command have been added and it's possible to test this code. */
959	case DBGFBPTYPE_PORT_IO:
960	case DBGFBPTYPE_MMIO:
961	{
962	uint32_t fAccess = pBp->enmType == DBGFBPTYPE_PORT_IO ? pBp->u.PortIo.fAccess : pBp->u.Mmio.fAccess;
963	DBGCCmdHlpPrintf(&pDbgc->CmdHlp, pBp->enmType == DBGFBPTYPE_PORT_IO ? " i" : " m");
964	DBGCCmdHlpPrintf(&pDbgc->CmdHlp, " %c%c%c%c%c%c",
965	fAccess & DBGFBPIOACCESS_READ_MASK ? 'r' : '-',
966	fAccess & DBGFBPIOACCESS_READ_BYTE ? '1' : '-',
967	fAccess & DBGFBPIOACCESS_READ_WORD ? '2' : '-',
968	fAccess & DBGFBPIOACCESS_READ_DWORD ? '4' : '-',
969	fAccess & DBGFBPIOACCESS_READ_QWORD ? '8' : '-',
970	fAccess & DBGFBPIOACCESS_READ_OTHER ? '+' : '-');
971	DBGCCmdHlpPrintf(&pDbgc->CmdHlp, " %c%c%c%c%c%c",
972	fAccess & DBGFBPIOACCESS_WRITE_MASK ? 'w' : '-',
973	fAccess & DBGFBPIOACCESS_WRITE_BYTE ? '1' : '-',
974	fAccess & DBGFBPIOACCESS_WRITE_WORD ? '2' : '-',
975	fAccess & DBGFBPIOACCESS_WRITE_DWORD ? '4' : '-',
976	fAccess & DBGFBPIOACCESS_WRITE_QWORD ? '8' : '-',
977	fAccess & DBGFBPIOACCESS_WRITE_OTHER ? '+' : '-');
978	if (pBp->enmType == DBGFBPTYPE_PORT_IO)
979	DBGCCmdHlpPrintf(&pDbgc->CmdHlp, " %04x-%04x",
980	pBp->u.PortIo.uPort, pBp->u.PortIo.uPort + pBp->u.PortIo.cPorts - 1);
981	else
982	DBGCCmdHlpPrintf(&pDbgc->CmdHlp, "%RGp LB %03x", pBp->u.Mmio.PhysAddr, pBp->u.Mmio.cb);
983	break;
984	}
985
986	default:
987	DBGCCmdHlpPrintf(&pDbgc->CmdHlp, " unknown type %d!!", pBp->enmType);
988	AssertFailed();
989	break;
990
991	}
992	if (pBp->iHitDisable == ~(uint64_t)0)
993	DBGCCmdHlpPrintf(&pDbgc->CmdHlp, " %04RX64 (%04RX64 to ~0) ", pBp->cHits, pBp->iHitTrigger);
994	else
995	DBGCCmdHlpPrintf(&pDbgc->CmdHlp, " %04RX64 (%04RX64 to %04RX64)", pBp->cHits, pBp->iHitTrigger, pBp->iHitDisable);
996
997	/*
998	* Try resolve the address if it has one.
999	*/
1000	if (fHasAddress)
1001	{
1002	RTDBGSYMBOL Sym;
1003	RTINTPTR off;
1004	DBGFADDRESS Addr;
1005	int rc = DBGFR3AsSymbolByAddr(pUVM, pDbgc->hDbgAs, DBGFR3AddrFromFlat(pDbgc->pUVM, &Addr, pBp->u.GCPtr),
1006	RTDBGSYMADDR_FLAGS_LESS_OR_EQUAL, &off, &Sym, NULL);
1007	if (RT_SUCCESS(rc))
1008	{
1009	if (!off)
1010	DBGCCmdHlpPrintf(&pDbgc->CmdHlp, "%s", Sym.szName);
1011	else if (off > 0)
1012	DBGCCmdHlpPrintf(&pDbgc->CmdHlp, "%s+%RGv", Sym.szName, off);
1013	else
1014	DBGCCmdHlpPrintf(&pDbgc->CmdHlp, "%s-%RGv", Sym.szName, -off);
1015	}
1016	}
1017
1018	/*
1019	* The commands.
1020	*/
1021	if (pDbgcBp)
1022	{
1023	if (pDbgcBp->cchCmd)
1024	DBGCCmdHlpPrintf(&pDbgc->CmdHlp, "\n cmds: '%s'\n", pDbgcBp->szCmd);
1025	else
1026	DBGCCmdHlpPrintf(&pDbgc->CmdHlp, "\n");
1027	}
1028	else
1029	DBGCCmdHlpPrintf(&pDbgc->CmdHlp, " [unknown bp]\n");
1030
1031	return VINF_SUCCESS;
1032	}
1033
1034
1035	/**
1036	* @callback_method_impl{FNDBGCCMD, The 'bl' command.}
1037	*/
1038	static DECLCALLBACK(int) dbgcCmdBrkList(PCDBGCCMD pCmd, PDBGCCMDHLP pCmdHlp, PUVM pUVM, PCDBGCVAR paArgs, unsigned cArgs)
1039	{
1040	DBGC_CMDHLP_REQ_UVM_RET(pCmdHlp, pCmd, pUVM);
1041	DBGC_CMDHLP_ASSERT_PARSER_RET(pCmdHlp, pCmd, -1, cArgs == 0);
1042	NOREF(paArgs);
1043
1044	/*
1045	* Enumerate the breakpoints.
1046	*/
1047	PDBGC pDbgc = DBGC_CMDHLP2DBGC(pCmdHlp);
1048	int rc = DBGFR3BpEnum(pUVM, dbgcEnumBreakpointsCallback, pDbgc);
1049	if (RT_FAILURE(rc))
1050	return DBGCCmdHlpFailRc(pCmdHlp, pCmd, rc, "DBGFR3BpEnum");
1051	return rc;
1052	}
1053
1054
1055	/**
1056	* @callback_method_impl{FNDBGCCMD, The 'bp' command.}
1057	*/
1058	static DECLCALLBACK(int) dbgcCmdBrkSet(PCDBGCCMD pCmd, PDBGCCMDHLP pCmdHlp, PUVM pUVM, PCDBGCVAR paArgs, unsigned cArgs)
1059	{
1060	/*
1061	* Convert the pointer to a DBGF address.
1062	*/
1063	DBGFADDRESS Address;
1064	int rc = DBGCCmdHlpVarToDbgfAddr(pCmdHlp, &paArgs[0], &Address);
1065	if (RT_FAILURE(rc))
1066	return DBGCCmdHlpFailRc(pCmdHlp, pCmd, rc, "DBGCCmdHlpVarToDbgfAddr(,'%DV',)", &paArgs[0]);
1067
1068	/*
1069	* Pick out the optional arguments.
1070	*/
1071	uint64_t iHitTrigger = 0;
1072	uint64_t iHitDisable = UINT64_MAX;
1073	const char *pszCmds = NULL;
1074	unsigned iArg = 1;
1075	if (iArg < cArgs && paArgs[iArg].enmType == DBGCVAR_TYPE_NUMBER)
1076	{
1077	iHitTrigger = paArgs[iArg].u.u64Number;
1078	iArg++;
1079	if (iArg < cArgs && paArgs[iArg].enmType == DBGCVAR_TYPE_NUMBER)
1080	{
1081	iHitDisable = paArgs[iArg].u.u64Number;
1082	iArg++;
1083	}
1084	}
1085	if (iArg < cArgs && paArgs[iArg].enmType == DBGCVAR_TYPE_STRING)
1086	{
1087	pszCmds = paArgs[iArg].u.pszString;
1088	iArg++;
1089	}
1090
1091	/*
1092	* Try set the breakpoint.
1093	*/
1094	uint32_t iBp;
1095	PDBGC pDbgc = DBGC_CMDHLP2DBGC(pCmdHlp);
1096	rc = DBGFR3BpSetInt3(pUVM, pDbgc->idCpu, &Address, iHitTrigger, iHitDisable, &iBp);
1097	if (RT_SUCCESS(rc))
1098	{
1099	rc = dbgcBpAdd(pDbgc, iBp, pszCmds);
1100	if (RT_SUCCESS(rc))
1101	return DBGCCmdHlpPrintf(pCmdHlp, "Set breakpoint %u at %RGv\n", iBp, Address.FlatPtr);
1102	if (rc == VERR_DBGC_BP_EXISTS)
1103	{
1104	rc = dbgcBpUpdate(pDbgc, iBp, pszCmds);
1105	if (RT_SUCCESS(rc))
1106	return DBGCCmdHlpPrintf(pCmdHlp, "Updated breakpoint %u at %RGv\n", iBp, Address.FlatPtr);
1107	}
1108	int rc2 = DBGFR3BpClear(pDbgc->pUVM, iBp);
1109	AssertRC(rc2);
1110	}
1111	return DBGCCmdHlpFailRc(pCmdHlp, pCmd, rc, "Failed to set breakpoint at %RGv", Address.FlatPtr);
1112	}
1113
1114
1115	/**
1116	* @callback_method_impl{FNDBGCCMD, The 'br' command.}
1117	*/
1118	static DECLCALLBACK(int) dbgcCmdBrkREM(PCDBGCCMD pCmd, PDBGCCMDHLP pCmdHlp, PUVM pUVM, PCDBGCVAR paArgs, unsigned cArgs)
1119	{
1120	/*
1121	* Convert the pointer to a DBGF address.
1122	*/
1123	DBGFADDRESS Address;
1124	int rc = DBGCCmdHlpVarToDbgfAddr(pCmdHlp, &paArgs[0], &Address);
1125	if (RT_FAILURE(rc))
1126	return DBGCCmdHlpFailRc(pCmdHlp, pCmd, rc, "DBGCCmdHlpVarToDbgfAddr(,'%DV',)", &paArgs[0]);
1127
1128	/*
1129	* Pick out the optional arguments.
1130	*/
1131	uint64_t iHitTrigger = 0;
1132	uint64_t iHitDisable = UINT64_MAX;
1133	const char *pszCmds = NULL;
1134	unsigned iArg = 1;
1135	if (iArg < cArgs && paArgs[iArg].enmType == DBGCVAR_TYPE_NUMBER)
1136	{
1137	iHitTrigger = paArgs[iArg].u.u64Number;
1138	iArg++;
1139	if (iArg < cArgs && paArgs[iArg].enmType == DBGCVAR_TYPE_NUMBER)
1140	{
1141	iHitDisable = paArgs[iArg].u.u64Number;
1142	iArg++;
1143	}
1144	}
1145	if (iArg < cArgs && paArgs[iArg].enmType == DBGCVAR_TYPE_STRING)
1146	{
1147	pszCmds = paArgs[iArg].u.pszString;
1148	iArg++;
1149	}
1150
1151	/*
1152	* Try set the breakpoint.
1153	*/
1154	uint32_t iBp;
1155	rc = DBGFR3BpSetREM(pUVM, &Address, iHitTrigger, iHitDisable, &iBp);
1156	if (RT_SUCCESS(rc))
1157	{
1158	PDBGC pDbgc = DBGC_CMDHLP2DBGC(pCmdHlp);
1159	rc = dbgcBpAdd(pDbgc, iBp, pszCmds);
1160	if (RT_SUCCESS(rc))
1161	return DBGCCmdHlpPrintf(pCmdHlp, "Set REM breakpoint %u at %RGv\n", iBp, Address.FlatPtr);
1162	if (rc == VERR_DBGC_BP_EXISTS)
1163	{
1164	rc = dbgcBpUpdate(pDbgc, iBp, pszCmds);
1165	if (RT_SUCCESS(rc))
1166	return DBGCCmdHlpPrintf(pCmdHlp, "Updated REM breakpoint %u at %RGv\n", iBp, Address.FlatPtr);
1167	}
1168	int rc2 = DBGFR3BpClear(pDbgc->pUVM, iBp);
1169	AssertRC(rc2);
1170	}
1171	return DBGCCmdHlpFailRc(pCmdHlp, pCmd, rc, "Failed to set REM breakpoint at %RGv", Address.FlatPtr);
1172	}
1173
1174
1175	/**
1176	* Helps the unassmble ('u') command display symbols it starts at and passes.
1177	*
1178	* @param pUVM The user mode VM handle.
1179	* @param pCmdHlp The command helpers for printing via.
1180	* @param hDbgAs The address space to look up addresses in.
1181	* @param pAddress The current address.
1182	* @param pcbCallAgain Where to return the distance to the next check (in
1183	* instruction bytes).
1184	*/
1185	static void dbgcCmdUnassambleHelpListNear(PUVM pUVM, PDBGCCMDHLP pCmdHlp, RTDBGAS hDbgAs, PCDBGFADDRESS pAddress,
1186	PRTUINTPTR pcbCallAgain)
1187	{
1188	RTDBGSYMBOL Symbol;
1189	RTGCINTPTR offDispSym;
1190	int rc = DBGFR3AsSymbolByAddr(pUVM, hDbgAs, pAddress, RTDBGSYMADDR_FLAGS_LESS_OR_EQUAL, &offDispSym, &Symbol, NULL);
1191	if (RT_FAILURE(rc) \|\| offDispSym > _1G)
1192	rc = DBGFR3AsSymbolByAddr(pUVM, hDbgAs, pAddress, RTDBGSYMADDR_FLAGS_GREATER_OR_EQUAL, &offDispSym, &Symbol, NULL);
1193	if (RT_SUCCESS(rc) && offDispSym < _1G)
1194	{
1195	if (!offDispSym)
1196	{
1197	DBGCCmdHlpPrintf(pCmdHlp, "%s:\n", Symbol.szName);
1198	*pcbCallAgain = !Symbol.cb ? 64 : Symbol.cb;
1199	}
1200	else if (offDispSym > 0)
1201	{
1202	DBGCCmdHlpPrintf(pCmdHlp, "%s+%#llx:\n", Symbol.szName, (uint64_t)offDispSym);
1203	*pcbCallAgain = !Symbol.cb ? 64 : Symbol.cb > (RTGCUINTPTR)offDispSym ? Symbol.cb - (RTGCUINTPTR)offDispSym : 1;
1204	}
1205	else
1206	{
1207	DBGCCmdHlpPrintf(pCmdHlp, "%s-%#llx:\n", Symbol.szName, (uint64_t)-offDispSym);
1208	*pcbCallAgain = !Symbol.cb ? 64 : (RTGCUINTPTR)-offDispSym + Symbol.cb;
1209	}
1210	}
1211	else
1212	*pcbCallAgain = UINT32_MAX;
1213	}
1214
1215
1216	/**
1217	* @callback_method_impl{FNDBGCCMD, The 'u' command.}
1218	*/
1219	static DECLCALLBACK(int) dbgcCmdUnassemble(PCDBGCCMD pCmd, PDBGCCMDHLP pCmdHlp, PUVM pUVM, PCDBGCVAR paArgs, unsigned cArgs)
1220	{
1221	PDBGC pDbgc = DBGC_CMDHLP2DBGC(pCmdHlp);
1222
1223	/*
1224	* Validate input.
1225	*/
1226	DBGC_CMDHLP_REQ_UVM_RET(pCmdHlp, pCmd, pUVM);
1227	DBGC_CMDHLP_ASSERT_PARSER_RET(pCmdHlp, pCmd, -1, cArgs <= 1);
1228	DBGC_CMDHLP_ASSERT_PARSER_RET(pCmdHlp, pCmd, 0, cArgs == 0 \|\| DBGCVAR_ISPOINTER(paArgs[0].enmType));
1229
1230	if (!cArgs && !DBGCVAR_ISPOINTER(pDbgc->DisasmPos.enmType))
1231	return DBGCCmdHlpFail(pCmdHlp, pCmd, "Don't know where to start disassembling");
1232
1233	/*
1234	* Check the desired mode.
1235	*/
1236	unsigned fFlags = DBGF_DISAS_FLAGS_NO_ADDRESS \| DBGF_DISAS_FLAGS_UNPATCHED_BYTES \| DBGF_DISAS_FLAGS_ANNOTATE_PATCHED;
1237	switch (pCmd->pszCmd[1])
1238	{
1239	default: AssertFailed(); RT_FALL_THRU();
1240	case '\0': fFlags \|= DBGF_DISAS_FLAGS_DEFAULT_MODE; break;
1241	case '6': fFlags \|= DBGF_DISAS_FLAGS_64BIT_MODE; break;
1242	case '3': fFlags \|= DBGF_DISAS_FLAGS_32BIT_MODE; break;
1243	case '1': fFlags \|= DBGF_DISAS_FLAGS_16BIT_MODE; break;
1244	case 'v': fFlags \|= DBGF_DISAS_FLAGS_16BIT_REAL_MODE; break;
1245	}
1246
1247	/** @todo should use DBGFADDRESS for everything */
1248
1249	/*
1250	* Find address.
1251	*/
1252	if (!cArgs)
1253	{
1254	if (!DBGCVAR_ISPOINTER(pDbgc->DisasmPos.enmType))
1255	{
1256	/** @todo Batch query CS, RIP, CPU mode and flags. */
1257	PVMCPU pVCpu = VMMR3GetCpuByIdU(pUVM, pDbgc->idCpu);
1258	if ( pDbgc->fRegCtxGuest
1259	&& CPUMIsGuestIn64BitCode(pVCpu))
1260	{
1261	pDbgc->DisasmPos.enmType = DBGCVAR_TYPE_GC_FLAT;
1262	pDbgc->SourcePos.u.GCFlat = CPUMGetGuestRIP(pVCpu);
1263	}
1264	else
1265	{
1266	pDbgc->DisasmPos.enmType = DBGCVAR_TYPE_GC_FAR;
1267	pDbgc->SourcePos.u.GCFar.off = pDbgc->fRegCtxGuest ? CPUMGetGuestEIP(pVCpu) : CPUMGetHyperEIP(pVCpu);
1268	pDbgc->SourcePos.u.GCFar.sel = pDbgc->fRegCtxGuest ? CPUMGetGuestCS(pVCpu) : CPUMGetHyperCS(pVCpu);
1269	if ( (fFlags & DBGF_DISAS_FLAGS_MODE_MASK) == DBGF_DISAS_FLAGS_DEFAULT_MODE
1270	&& pDbgc->fRegCtxGuest
1271	&& (CPUMGetGuestEFlags(pVCpu) & X86_EFL_VM))
1272	{
1273	fFlags &= ~DBGF_DISAS_FLAGS_MODE_MASK;
1274	fFlags \|= DBGF_DISAS_FLAGS_16BIT_REAL_MODE;
1275	}
1276	}
1277
1278	if (pDbgc->fRegCtxGuest)
1279	fFlags \|= DBGF_DISAS_FLAGS_CURRENT_GUEST;
1280	else
1281	fFlags \|= DBGF_DISAS_FLAGS_CURRENT_HYPER \| DBGF_DISAS_FLAGS_HYPER;
1282	}
1283	else if ((fFlags & DBGF_DISAS_FLAGS_MODE_MASK) == DBGF_DISAS_FLAGS_DEFAULT_MODE && pDbgc->fDisasm)
1284	{
1285	fFlags &= ~DBGF_DISAS_FLAGS_MODE_MASK;
1286	fFlags \|= pDbgc->fDisasm & (DBGF_DISAS_FLAGS_MODE_MASK \| DBGF_DISAS_FLAGS_HYPER);
1287	}
1288	pDbgc->DisasmPos.enmRangeType = DBGCVAR_RANGE_NONE;
1289	}
1290	else
1291	pDbgc->DisasmPos = paArgs[0];
1292	pDbgc->pLastPos = &pDbgc->DisasmPos;
1293
1294	/*
1295	* Range.
1296	*/
1297	switch (pDbgc->DisasmPos.enmRangeType)
1298	{
1299	case DBGCVAR_RANGE_NONE:
1300	pDbgc->DisasmPos.enmRangeType = DBGCVAR_RANGE_ELEMENTS;
1301	pDbgc->DisasmPos.u64Range = 10;
1302	break;
1303
1304	case DBGCVAR_RANGE_ELEMENTS:
1305	if (pDbgc->DisasmPos.u64Range > 2048)
1306	return DBGCCmdHlpFail(pCmdHlp, pCmd, "Too many lines requested. Max is 2048 lines");
1307	break;
1308
1309	case DBGCVAR_RANGE_BYTES:
1310	if (pDbgc->DisasmPos.u64Range > 65536)
1311	return DBGCCmdHlpFail(pCmdHlp, pCmd, "The requested range is too big. Max is 64KB");
1312	break;
1313
1314	default:
1315	return DBGCCmdHlpFail(pCmdHlp, pCmd, "Unknown range type %d", pDbgc->DisasmPos.enmRangeType);
1316	}
1317
1318	/*
1319	* Convert physical and host addresses to guest addresses.
1320	*/
1321	RTDBGAS hDbgAs = pDbgc->hDbgAs;
1322	int rc;
1323	switch (pDbgc->DisasmPos.enmType)
1324	{
1325	case DBGCVAR_TYPE_GC_FLAT:
1326	case DBGCVAR_TYPE_GC_FAR:
1327	break;
1328	case DBGCVAR_TYPE_GC_PHYS:
1329	hDbgAs = DBGF_AS_PHYS;
1330	RT_FALL_THRU();
1331	case DBGCVAR_TYPE_HC_FLAT:
1332	case DBGCVAR_TYPE_HC_PHYS:
1333	{
1334	DBGCVAR VarTmp;
1335	rc = DBGCCmdHlpEval(pCmdHlp, &VarTmp, "%%(%Dv)", &pDbgc->DisasmPos);
1336	if (RT_FAILURE(rc))
1337	return DBGCCmdHlpFailRc(pCmdHlp, pCmd, rc, "failed to evaluate '%%(%Dv)'", &pDbgc->DisasmPos);
1338	pDbgc->DisasmPos = VarTmp;
1339	break;
1340	}
1341	default: AssertFailed(); break;
1342	}
1343
1344	DBGFADDRESS CurAddr;
1345	if ( (fFlags & DBGF_DISAS_FLAGS_MODE_MASK) == DBGF_DISAS_FLAGS_16BIT_REAL_MODE
1346	&& pDbgc->DisasmPos.enmType == DBGCVAR_TYPE_GC_FAR)
1347	DBGFR3AddrFromFlat(pUVM, &CurAddr, ((uint32_t)pDbgc->DisasmPos.u.GCFar.sel << 4) + pDbgc->DisasmPos.u.GCFar.off);
1348	else
1349	{
1350	rc = DBGCCmdHlpVarToDbgfAddr(pCmdHlp, &pDbgc->DisasmPos, &CurAddr);
1351	if (RT_FAILURE(rc))
1352	return DBGCCmdHlpFailRc(pCmdHlp, pCmd, rc, "DBGCCmdHlpVarToDbgfAddr failed on '%Dv'", &pDbgc->DisasmPos);
1353	}
1354
1355	if (CurAddr.fFlags & DBGFADDRESS_FLAGS_HMA)
1356	fFlags \|= DBGF_DISAS_FLAGS_HYPER; /* This crap is due to not using DBGFADDRESS as DBGFR3Disas* input. */
1357	pDbgc->fDisasm = fFlags;
1358
1359	/*
1360	* Figure out where we are and display it. Also calculate when we need to
1361	* check for a new symbol if possible.
1362	*/
1363	RTGCUINTPTR cbCheckSymbol;
1364	dbgcCmdUnassambleHelpListNear(pUVM, pCmdHlp, hDbgAs, &CurAddr, &cbCheckSymbol);
1365
1366	/*
1367	* Do the disassembling.
1368	*/
1369	unsigned cTries = 32;
1370	int iRangeLeft = (int)pDbgc->DisasmPos.u64Range;
1371	if (iRangeLeft == 0) /* kludge for 'r'. */
1372	iRangeLeft = -1;
1373	for (;;)
1374	{
1375	/*
1376	* Disassemble the instruction.
1377	*/
1378	char szDis[256];
1379	uint32_t cbInstr = 1;
1380	if (pDbgc->DisasmPos.enmType == DBGCVAR_TYPE_GC_FLAT)
1381	rc = DBGFR3DisasInstrEx(pUVM, pDbgc->idCpu, DBGF_SEL_FLAT, pDbgc->DisasmPos.u.GCFlat, fFlags,
1382	&szDis[0], sizeof(szDis), &cbInstr);
1383	else
1384	rc = DBGFR3DisasInstrEx(pUVM, pDbgc->idCpu, pDbgc->DisasmPos.u.GCFar.sel, pDbgc->DisasmPos.u.GCFar.off, fFlags,
1385	&szDis[0], sizeof(szDis), &cbInstr);
1386	if (RT_SUCCESS(rc))
1387	{
1388	/* print it */
1389	rc = DBGCCmdHlpPrintf(pCmdHlp, "%-16DV %s\n", &pDbgc->DisasmPos, &szDis[0]);
1390	if (RT_FAILURE(rc))
1391	return rc;
1392	}
1393	else
1394	{
1395	/* bitch. */
1396	int rc2 = DBGCCmdHlpPrintf(pCmdHlp, "Failed to disassemble instruction, skipping one byte.\n");
1397	if (RT_FAILURE(rc2))
1398	return rc2;
1399	if (cTries-- > 0)
1400	return DBGCCmdHlpFailRc(pCmdHlp, pCmd, rc, "Too many disassembly failures. Giving up");
1401	cbInstr = 1;
1402	}
1403
1404	/* advance */
1405	if (iRangeLeft < 0) /* 'r' */
1406	break;
1407	if (pDbgc->DisasmPos.enmRangeType == DBGCVAR_RANGE_ELEMENTS)
1408	iRangeLeft--;
1409	else
1410	iRangeLeft -= cbInstr;
1411	rc = DBGCCmdHlpEval(pCmdHlp, &pDbgc->DisasmPos, "(%Dv) + %x", &pDbgc->DisasmPos, cbInstr);
1412	if (RT_FAILURE(rc))
1413	return DBGCCmdHlpFailRc(pCmdHlp, pCmd, rc, "DBGCCmdHlpEval(,,'(%Dv) + %x')", &pDbgc->DisasmPos, cbInstr);
1414	if (iRangeLeft <= 0)
1415	break;
1416	fFlags &= ~(DBGF_DISAS_FLAGS_CURRENT_GUEST \| DBGF_DISAS_FLAGS_CURRENT_HYPER);
1417
1418	/* Print next symbol? */
1419	if (cbCheckSymbol <= cbInstr)
1420	{
1421	if ( (fFlags & DBGF_DISAS_FLAGS_MODE_MASK) == DBGF_DISAS_FLAGS_16BIT_REAL_MODE
1422	&& pDbgc->DisasmPos.enmType == DBGCVAR_TYPE_GC_FAR)
1423	DBGFR3AddrFromFlat(pUVM, &CurAddr, ((uint32_t)pDbgc->DisasmPos.u.GCFar.sel << 4) + pDbgc->DisasmPos.u.GCFar.off);
1424	else
1425	rc = DBGCCmdHlpVarToDbgfAddr(pCmdHlp, &pDbgc->DisasmPos, &CurAddr);
1426	if (RT_SUCCESS(rc))
1427	dbgcCmdUnassambleHelpListNear(pUVM, pCmdHlp, hDbgAs, &CurAddr, &cbCheckSymbol);
1428	else
1429	cbCheckSymbol = UINT32_MAX;
1430	}
1431	else
1432	cbCheckSymbol -= cbInstr;
1433	}
1434
1435	NOREF(pCmd);
1436	return VINF_SUCCESS;
1437	}
1438
1439
1440	/**
1441	* @callback_method_impl{FNDGCSCREENBLIT}
1442	*/
1443	static DECLCALLBACK(int) dbgcCmdUnassembleCfgBlit(const char psz, void pvUser)
1444	{
1445	PDBGCCMDHLP pCmdHlp = (PDBGCCMDHLP)pvUser;
1446	return DBGCCmdHlpPrintf(pCmdHlp, "%s", psz);
1447	}
1448
1449
1450	/**
1451	* Checks whether both addresses are equal.
1452	*
1453	* @returns true if both addresses point to the same location, false otherwise.
1454	* @param pAddr1 First address.
1455	* @param pAddr2 Second address.
1456	*/
1457	static bool dbgcCmdUnassembleCfgAddrEqual(PDBGFADDRESS pAddr1, PDBGFADDRESS pAddr2)
1458	{
1459	return pAddr1->Sel == pAddr2->Sel
1460	&& pAddr1->off == pAddr2->off;
1461	}
1462
1463
1464	/**
1465	* Checks whether the first given address is lower than the second one.
1466	*
1467	* @returns true if both addresses point to the same location, false otherwise.
1468	* @param pAddr1 First address.
1469	* @param pAddr2 Second address.
1470	*/
1471	static bool dbgcCmdUnassembleCfgAddrLower(PDBGFADDRESS pAddr1, PDBGFADDRESS pAddr2)
1472	{
1473	return pAddr1->Sel == pAddr2->Sel
1474	&& pAddr1->off < pAddr2->off;
1475	}
1476
1477
1478	/**
1479	* Calculates the size required for the given basic block including the
1480	* border and spacing on the edges.
1481	*
1482	* @returns nothing.
1483	* @param hFlowBb The basic block handle.
1484	* @param pDumpBb The dumper state to fill in for the basic block.
1485	*/
1486	static void dbgcCmdUnassembleCfgDumpCalcBbSize(DBGFFLOWBB hFlowBb, PDBGCFLOWBBDUMP pDumpBb)
1487	{
1488	uint32_t fFlags = DBGFR3FlowBbGetFlags(hFlowBb);
1489	uint32_t cInstr = DBGFR3FlowBbGetInstrCount(hFlowBb);
1490
1491	pDumpBb->hFlowBb = hFlowBb;
1492	pDumpBb->cchHeight = cInstr + 4; /* Include spacing and border top and bottom. */
1493	pDumpBb->cchWidth = 0;
1494	DBGFR3FlowBbGetStartAddress(hFlowBb, &pDumpBb->AddrStart);
1495
1496	DBGFFLOWBBENDTYPE enmType = DBGFR3FlowBbGetType(hFlowBb);
1497	if ( enmType == DBGFFLOWBBENDTYPE_COND
1498	\|\| enmType == DBGFFLOWBBENDTYPE_UNCOND_JMP
1499	\|\| enmType == DBGFFLOWBBENDTYPE_UNCOND_INDIRECT_JMP)
1500	DBGFR3FlowBbGetBranchAddress(hFlowBb, &pDumpBb->AddrTarget);
1501
1502	if (fFlags & DBGF_FLOW_BB_F_INCOMPLETE_ERR)
1503	{
1504	const char *pszErr = NULL;
1505	DBGFR3FlowBbQueryError(hFlowBb, &pszErr);
1506	if (pszErr)
1507	{
1508	pDumpBb->cchHeight++;
1509	pDumpBb->cchWidth = RT_MAX(pDumpBb->cchWidth, (uint32_t)strlen(pszErr));
1510	}
1511	}
1512	for (unsigned i = 0; i < cInstr; i++)
1513	{
1514	const char *pszInstr = NULL;
1515	int rc = DBGFR3FlowBbQueryInstr(hFlowBb, i, NULL, NULL, &pszInstr);
1516	AssertRC(rc);
1517	pDumpBb->cchWidth = RT_MAX(pDumpBb->cchWidth, (uint32_t)strlen(pszInstr));
1518	}
1519	pDumpBb->cchWidth += 4; /* Include spacing and border left and right. */
1520	}
1521
1522
1523	/**
1524	* Dumps a top or bottom boundary line.
1525	*
1526	* @returns nothing.
1527	* @param hScreen The screen to draw to.
1528	* @param uStartX Where to start drawing the boundary.
1529	* @param uStartY Y coordinate.
1530	* @param cchWidth Width of the boundary.
1531	* @param enmColor The color to use for drawing.
1532	*/
1533	static void dbgcCmdUnassembleCfgDumpBbBoundary(DBGCSCREEN hScreen, uint32_t uStartX, uint32_t uStartY, uint32_t cchWidth,
1534	DBGCSCREENCOLOR enmColor)
1535	{
1536	dbgcScreenAsciiDrawCharacter(hScreen, uStartX, uStartY, '+', enmColor);
1537	dbgcScreenAsciiDrawLineHorizontal(hScreen, uStartX + 1, uStartX + 1 + cchWidth - 2,
1538	uStartY, '-', enmColor);
1539	dbgcScreenAsciiDrawCharacter(hScreen, uStartX + cchWidth - 1, uStartY, '+', enmColor);
1540	}
1541
1542
1543	/**
1544	* Dumps a spacing line between the top or bottom boundary and the actual disassembly.
1545	*
1546	* @returns nothing.
1547	* @param hScreen The screen to draw to.
1548	* @param uStartX Where to start drawing the spacing.
1549	* @param uStartY Y coordinate.
1550	* @param cchWidth Width of the spacing.
1551	* @param enmColor The color to use for drawing.
1552	*/
1553	static void dbgcCmdUnassembleCfgDumpBbSpacing(DBGCSCREEN hScreen, uint32_t uStartX, uint32_t uStartY, uint32_t cchWidth,
1554	DBGCSCREENCOLOR enmColor)
1555	{
1556	dbgcScreenAsciiDrawCharacter(hScreen, uStartX, uStartY, '\|', enmColor);
1557	dbgcScreenAsciiDrawLineHorizontal(hScreen, uStartX + 1, uStartX + 1 + cchWidth - 2,
1558	uStartY, ' ', enmColor);
1559	dbgcScreenAsciiDrawCharacter(hScreen, uStartX + cchWidth - 1, uStartY, '\|', enmColor);
1560	}
1561
1562
1563	/**
1564	* Writes a given text to the screen.
1565	*
1566	* @returns nothing.
1567	* @param hScreen The screen to draw to.
1568	* @param uStartX Where to start drawing the line.
1569	* @param uStartY Y coordinate.
1570	* @param cchWidth Maximum width of the text.
1571	* @param pszText The text to write.
1572	* @param enmTextColor The color to use for drawing the text.
1573	* @param enmBorderColor The color to use for drawing the border.
1574	*/
1575	static void dbgcCmdUnassembleCfgDumpBbText(DBGCSCREEN hScreen, uint32_t uStartX, uint32_t uStartY,
1576	uint32_t cchWidth, const char *pszText,
1577	DBGCSCREENCOLOR enmTextColor, DBGCSCREENCOLOR enmBorderColor)
1578	{
1579	dbgcScreenAsciiDrawCharacter(hScreen, uStartX, uStartY, '\|', enmBorderColor);
1580	dbgcScreenAsciiDrawCharacter(hScreen, uStartX + 1, uStartY, ' ', enmTextColor);
1581	dbgcScreenAsciiDrawString(hScreen, uStartX + 2, uStartY, pszText, enmTextColor);
1582	dbgcScreenAsciiDrawCharacter(hScreen, uStartX + cchWidth - 1, uStartY, '\|', enmBorderColor);
1583	}
1584
1585
1586	/**
1587	* Dumps one basic block using the dumper callback.
1588	*
1589	* @returns nothing.
1590	* @param pDumpBb The basic block dump state to dump.
1591	* @param hScreen The screen to draw to.
1592	*/
1593	static void dbgcCmdUnassembleCfgDumpBb(PDBGCFLOWBBDUMP pDumpBb, DBGCSCREEN hScreen)
1594	{
1595	uint32_t uStartY = pDumpBb->uStartY;
1596	bool fError = RT_BOOL(DBGFR3FlowBbGetFlags(pDumpBb->hFlowBb) & DBGF_FLOW_BB_F_INCOMPLETE_ERR);
1597	DBGCSCREENCOLOR enmColor = fError ? DBGCSCREENCOLOR_RED_BRIGHT : DBGCSCREENCOLOR_DEFAULT;
1598
1599	dbgcCmdUnassembleCfgDumpBbBoundary(hScreen, pDumpBb->uStartX, uStartY, pDumpBb->cchWidth, enmColor);
1600	uStartY++;
1601	dbgcCmdUnassembleCfgDumpBbSpacing(hScreen, pDumpBb->uStartX, uStartY, pDumpBb->cchWidth, enmColor);
1602	uStartY++;
1603
1604	uint32_t cInstr = DBGFR3FlowBbGetInstrCount(pDumpBb->hFlowBb);
1605	for (unsigned i = 0; i < cInstr; i++)
1606	{
1607	const char *pszInstr = NULL;
1608	DBGFR3FlowBbQueryInstr(pDumpBb->hFlowBb, i, NULL, NULL, &pszInstr);
1609	dbgcCmdUnassembleCfgDumpBbText(hScreen, pDumpBb->uStartX, uStartY + i,
1610	pDumpBb->cchWidth, pszInstr, DBGCSCREENCOLOR_DEFAULT,
1611	enmColor);
1612	}
1613	uStartY += cInstr;
1614
1615	if (fError)
1616	{
1617	const char *pszErr = NULL;
1618	DBGFR3FlowBbQueryError(pDumpBb->hFlowBb, &pszErr);
1619	if (pszErr)
1620	dbgcCmdUnassembleCfgDumpBbText(hScreen, pDumpBb->uStartX, uStartY,
1621	pDumpBb->cchWidth, pszErr, enmColor,
1622	enmColor);
1623	uStartY++;
1624	}
1625
1626	dbgcCmdUnassembleCfgDumpBbSpacing(hScreen, pDumpBb->uStartX, uStartY, pDumpBb->cchWidth, enmColor);
1627	uStartY++;
1628	dbgcCmdUnassembleCfgDumpBbBoundary(hScreen, pDumpBb->uStartX, uStartY, pDumpBb->cchWidth, enmColor);
1629	uStartY++;
1630	}
1631
1632
1633	/**
1634	* Dumps one branch table using the dumper callback.
1635	*
1636	* @returns nothing.
1637	* @param pDumpBranchTbl The basic block dump state to dump.
1638	* @param hScreen The screen to draw to.
1639	*/
1640	static void dbgcCmdUnassembleCfgDumpBranchTbl(PDBGCFLOWBRANCHTBLDUMP pDumpBranchTbl, DBGCSCREEN hScreen)
1641	{
1642	uint32_t uStartY = pDumpBranchTbl->uStartY;
1643	DBGCSCREENCOLOR enmColor = DBGCSCREENCOLOR_CYAN_BRIGHT;
1644
1645	dbgcCmdUnassembleCfgDumpBbBoundary(hScreen, pDumpBranchTbl->uStartX, uStartY, pDumpBranchTbl->cchWidth, enmColor);
1646	uStartY++;
1647	dbgcCmdUnassembleCfgDumpBbSpacing(hScreen, pDumpBranchTbl->uStartX, uStartY, pDumpBranchTbl->cchWidth, enmColor);
1648	uStartY++;
1649
1650	uint32_t cSlots = DBGFR3FlowBranchTblGetSlots(pDumpBranchTbl->hFlowBranchTbl);
1651	for (unsigned i = 0; i < cSlots; i++)
1652	{
1653	DBGFADDRESS Addr;
1654	char szAddr[128];
1655
1656	RT_ZERO(szAddr);
1657	DBGFR3FlowBranchTblGetAddrAtSlot(pDumpBranchTbl->hFlowBranchTbl, i, &Addr);
1658
1659	if (Addr.Sel == DBGF_SEL_FLAT)
1660	RTStrPrintf(&szAddr[0], sizeof(szAddr), "%RGv", Addr.FlatPtr);
1661	else
1662	RTStrPrintf(&szAddr[0], sizeof(szAddr), "%04x:%RGv", Addr.Sel, Addr.off);
1663
1664	dbgcCmdUnassembleCfgDumpBbText(hScreen, pDumpBranchTbl->uStartX, uStartY + i,
1665	pDumpBranchTbl->cchWidth, &szAddr[0], DBGCSCREENCOLOR_DEFAULT,
1666	enmColor);
1667	}
1668	uStartY += cSlots;
1669
1670	dbgcCmdUnassembleCfgDumpBbSpacing(hScreen, pDumpBranchTbl->uStartX, uStartY, pDumpBranchTbl->cchWidth, enmColor);
1671	uStartY++;
1672	dbgcCmdUnassembleCfgDumpBbBoundary(hScreen, pDumpBranchTbl->uStartX, uStartY, pDumpBranchTbl->cchWidth, enmColor);
1673	uStartY++;
1674	}
1675
1676
1677	/**
1678	* Fills in the dump states for the basic blocks and branch tables.
1679	*
1680	* @returns VBox status code.
1681	* @param hFlowIt The control flow graph iterator handle.
1682	* @param hFlowBranchTblIt The control flow graph branch table iterator handle.
1683	* @param paDumpBb The array of basic block dump states.
1684	* @param paDumpBranchTbl The array of branch table dump states.
1685	* @param cBbs Number of basic blocks.
1686	* @param cBranchTbls Number of branch tables.
1687	*/
1688	static int dbgcCmdUnassembleCfgDumpCalcDimensions(DBGFFLOWIT hFlowIt, DBGFFLOWBRANCHTBLIT hFlowBranchTblIt,
1689	PDBGCFLOWBBDUMP paDumpBb, PDBGCFLOWBRANCHTBLDUMP paDumpBranchTbl,
1690	uint32_t cBbs, uint32_t cBranchTbls)
1691	{
1692	RT_NOREF2(cBbs, cBranchTbls);
1693
1694	/* Calculate the sizes of each basic block first. */
1695	DBGFFLOWBB hFlowBb = DBGFR3FlowItNext(hFlowIt);
1696	uint32_t idx = 0;
1697	while (hFlowBb)
1698	{
1699	dbgcCmdUnassembleCfgDumpCalcBbSize(hFlowBb, &paDumpBb[idx]);
1700	idx++;
1701	hFlowBb = DBGFR3FlowItNext(hFlowIt);
1702	}
1703
1704	if (paDumpBranchTbl)
1705	{
1706	idx = 0;
1707	DBGFFLOWBRANCHTBL hFlowBranchTbl = DBGFR3FlowBranchTblItNext(hFlowBranchTblIt);
1708	while (hFlowBranchTbl)
1709	{
1710	paDumpBranchTbl[idx].hFlowBranchTbl = hFlowBranchTbl;
1711	paDumpBranchTbl[idx].cchHeight = DBGFR3FlowBranchTblGetSlots(hFlowBranchTbl) + 4; /* Spacing and border. */
1712	paDumpBranchTbl[idx].cchWidth = 25 + 4; /* Spacing and border. */
1713	idx++;
1714	hFlowBranchTbl = DBGFR3FlowBranchTblItNext(hFlowBranchTblIt);
1715	}
1716	}
1717
1718	return VINF_SUCCESS;
1719	}
1720
1721	/**
1722	* Dumps the given control flow graph to the output.
1723	*
1724	* @returns VBox status code.
1725	* @param hCfg The control flow graph handle.
1726	* @param fUseColor Flag whether the output should be colorized.
1727	* @param pCmdHlp The command helper callback table.
1728	*/
1729	static int dbgcCmdUnassembleCfgDump(DBGFFLOW hCfg, bool fUseColor, PDBGCCMDHLP pCmdHlp)
1730	{
1731	int rc = VINF_SUCCESS;
1732	DBGFFLOWIT hCfgIt = NULL;
1733	DBGFFLOWBRANCHTBLIT hFlowBranchTblIt = NULL;
1734	uint32_t cBbs = DBGFR3FlowGetBbCount(hCfg);
1735	uint32_t cBranchTbls = DBGFR3FlowGetBranchTblCount(hCfg);
1736	PDBGCFLOWBBDUMP paDumpBb = (PDBGCFLOWBBDUMP)RTMemTmpAllocZ(cBbs * sizeof(DBGCFLOWBBDUMP));
1737	PDBGCFLOWBRANCHTBLDUMP paDumpBranchTbl = NULL;
1738
1739	if (cBranchTbls)
1740	paDumpBranchTbl = (PDBGCFLOWBRANCHTBLDUMP)RTMemAllocZ(cBranchTbls * sizeof(DBGCFLOWBRANCHTBLDUMP));
1741
1742	if (RT_UNLIKELY(!paDumpBb \|\| (!paDumpBranchTbl && cBranchTbls > 0)))
1743	rc = VERR_NO_MEMORY;
1744	if (RT_SUCCESS(rc))
1745	rc = DBGFR3FlowItCreate(hCfg, DBGFFLOWITORDER_BY_ADDR_LOWEST_FIRST, &hCfgIt);
1746	if (RT_SUCCESS(rc) && cBranchTbls > 0)
1747	rc = DBGFR3FlowBranchTblItCreate(hCfg, DBGFFLOWITORDER_BY_ADDR_LOWEST_FIRST, &hFlowBranchTblIt);
1748
1749	if (RT_SUCCESS(rc))
1750	{
1751	rc = dbgcCmdUnassembleCfgDumpCalcDimensions(hCfgIt, hFlowBranchTblIt, paDumpBb, paDumpBranchTbl,
1752	cBbs, cBranchTbls);
1753
1754	/* Calculate the ASCII screen dimensions and create one. */
1755	uint32_t cchWidth = 0;
1756	uint32_t cchLeftExtra = 5;
1757	uint32_t cchRightExtra = 5;
1758	uint32_t cchHeight = 0;
1759	for (unsigned i = 0; i < cBbs; i++)
1760	{
1761	PDBGCFLOWBBDUMP pDumpBb = &paDumpBb[i];
1762	cchWidth = RT_MAX(cchWidth, pDumpBb->cchWidth);
1763	cchHeight += pDumpBb->cchHeight;
1764
1765	/* Incomplete blocks don't have a successor. */
1766	if (DBGFR3FlowBbGetFlags(pDumpBb->hFlowBb) & DBGF_FLOW_BB_F_INCOMPLETE_ERR)
1767	continue;
1768
1769	switch (DBGFR3FlowBbGetType(pDumpBb->hFlowBb))
1770	{
1771	case DBGFFLOWBBENDTYPE_EXIT:
1772	case DBGFFLOWBBENDTYPE_LAST_DISASSEMBLED:
1773	break;
1774	case DBGFFLOWBBENDTYPE_UNCOND_JMP:
1775	if ( dbgcCmdUnassembleCfgAddrLower(&pDumpBb->AddrTarget, &pDumpBb->AddrStart)
1776	\|\| dbgcCmdUnassembleCfgAddrEqual(&pDumpBb->AddrTarget, &pDumpBb->AddrStart))
1777	cchLeftExtra++;
1778	else
1779	cchRightExtra++;
1780	break;
1781	case DBGFFLOWBBENDTYPE_UNCOND:
1782	cchHeight += 2; /* For the arrow down to the next basic block. */
1783	break;
1784	case DBGFFLOWBBENDTYPE_COND:
1785	cchHeight += 2; /* For the arrow down to the next basic block. */
1786	if ( dbgcCmdUnassembleCfgAddrLower(&pDumpBb->AddrTarget, &pDumpBb->AddrStart)
1787	\|\| dbgcCmdUnassembleCfgAddrEqual(&pDumpBb->AddrTarget, &pDumpBb->AddrStart))
1788	cchLeftExtra++;
1789	else
1790	cchRightExtra++;
1791	break;
1792	case DBGFFLOWBBENDTYPE_UNCOND_INDIRECT_JMP:
1793	default:
1794	AssertFailed();
1795	}
1796	}
1797
1798	for (unsigned i = 0; i < cBranchTbls; i++)
1799	{
1800	PDBGCFLOWBRANCHTBLDUMP pDumpBranchTbl = &paDumpBranchTbl[i];
1801	cchWidth = RT_MAX(cchWidth, pDumpBranchTbl->cchWidth);
1802	cchHeight += pDumpBranchTbl->cchHeight;
1803	}
1804
1805	cchWidth += 2;
1806
1807	DBGCSCREEN hScreen = NULL;
1808	rc = dbgcScreenAsciiCreate(&hScreen, cchWidth + cchLeftExtra + cchRightExtra, cchHeight);
1809	if (RT_SUCCESS(rc))
1810	{
1811	uint32_t uY = 0;
1812
1813	/* Dump the branch tables first. */
1814	for (unsigned i = 0; i < cBranchTbls; i++)
1815	{
1816	paDumpBranchTbl[i].uStartX = cchLeftExtra + (cchWidth - paDumpBranchTbl[i].cchWidth) / 2;
1817	paDumpBranchTbl[i].uStartY = uY;
1818	dbgcCmdUnassembleCfgDumpBranchTbl(&paDumpBranchTbl[i], hScreen);
1819	uY += paDumpBranchTbl[i].cchHeight;
1820	}
1821
1822	/* Dump the basic blocks and connections to the immediate successor. */
1823	for (unsigned i = 0; i < cBbs; i++)
1824	{
1825	paDumpBb[i].uStartX = cchLeftExtra + (cchWidth - paDumpBb[i].cchWidth) / 2;
1826	paDumpBb[i].uStartY = uY;
1827	dbgcCmdUnassembleCfgDumpBb(&paDumpBb[i], hScreen);
1828	uY += paDumpBb[i].cchHeight;
1829
1830	/* Incomplete blocks don't have a successor. */
1831	if (DBGFR3FlowBbGetFlags(paDumpBb[i].hFlowBb) & DBGF_FLOW_BB_F_INCOMPLETE_ERR)
1832	continue;
1833
1834	switch (DBGFR3FlowBbGetType(paDumpBb[i].hFlowBb))
1835	{
1836	case DBGFFLOWBBENDTYPE_EXIT:
1837	case DBGFFLOWBBENDTYPE_LAST_DISASSEMBLED:
1838	case DBGFFLOWBBENDTYPE_UNCOND_JMP:
1839	case DBGFFLOWBBENDTYPE_UNCOND_INDIRECT_JMP:
1840	break;
1841	case DBGFFLOWBBENDTYPE_UNCOND:
1842	/* Draw the arrow down to the next block. */
1843	dbgcScreenAsciiDrawCharacter(hScreen, cchLeftExtra + cchWidth / 2, uY,
1844	'\|', DBGCSCREENCOLOR_BLUE_BRIGHT);
1845	uY++;
1846	dbgcScreenAsciiDrawCharacter(hScreen, cchLeftExtra + cchWidth / 2, uY,
1847	'V', DBGCSCREENCOLOR_BLUE_BRIGHT);
1848	uY++;
1849	break;
1850	case DBGFFLOWBBENDTYPE_COND:
1851	/* Draw the arrow down to the next block. */
1852	dbgcScreenAsciiDrawCharacter(hScreen, cchLeftExtra + cchWidth / 2, uY,
1853	'\|', DBGCSCREENCOLOR_RED_BRIGHT);
1854	uY++;
1855	dbgcScreenAsciiDrawCharacter(hScreen, cchLeftExtra + cchWidth / 2, uY,
1856	'V', DBGCSCREENCOLOR_RED_BRIGHT);
1857	uY++;
1858	break;
1859	default:
1860	AssertFailed();
1861	}
1862	}
1863
1864	/* Last pass, connect all remaining branches. */
1865	uint32_t uBackConns = 0;
1866	uint32_t uFwdConns = 0;
1867	for (unsigned i = 0; i < cBbs; i++)
1868	{
1869	PDBGCFLOWBBDUMP pDumpBb = &paDumpBb[i];
1870	DBGFFLOWBBENDTYPE enmEndType = DBGFR3FlowBbGetType(pDumpBb->hFlowBb);
1871
1872	/* Incomplete blocks don't have a successor. */
1873	if (DBGFR3FlowBbGetFlags(pDumpBb->hFlowBb) & DBGF_FLOW_BB_F_INCOMPLETE_ERR)
1874	continue;
1875
1876	switch (enmEndType)
1877	{
1878	case DBGFFLOWBBENDTYPE_EXIT:
1879	case DBGFFLOWBBENDTYPE_LAST_DISASSEMBLED:
1880	case DBGFFLOWBBENDTYPE_UNCOND:
1881	break;
1882	case DBGFFLOWBBENDTYPE_COND:
1883	case DBGFFLOWBBENDTYPE_UNCOND_JMP:
1884	{
1885	/* Find the target first to get the coordinates. */
1886	PDBGCFLOWBBDUMP pDumpBbTgt = NULL;
1887	for (unsigned idxDumpBb = 0; idxDumpBb < cBbs; idxDumpBb++)
1888	{
1889	pDumpBbTgt = &paDumpBb[idxDumpBb];
1890	if (dbgcCmdUnassembleCfgAddrEqual(&pDumpBb->AddrTarget, &pDumpBbTgt->AddrStart))
1891	break;
1892	}
1893
1894	DBGCSCREENCOLOR enmColor = enmEndType == DBGFFLOWBBENDTYPE_UNCOND_JMP
1895	? DBGCSCREENCOLOR_YELLOW_BRIGHT
1896	: DBGCSCREENCOLOR_GREEN_BRIGHT;
1897
1898	/*
1899	* Use the right side for targets with higher addresses,
1900	* left when jumping backwards.
1901	*/
1902	if ( dbgcCmdUnassembleCfgAddrLower(&pDumpBb->AddrTarget, &pDumpBb->AddrStart)
1903	\|\| dbgcCmdUnassembleCfgAddrEqual(&pDumpBb->AddrTarget, &pDumpBb->AddrStart))
1904	{
1905	/* Going backwards. */
1906	uint32_t uXVerLine = /cchLeftExtra - 1 -/ uBackConns + 1;
1907	uint32_t uYHorLine = pDumpBb->uStartY + pDumpBb->cchHeight - 1 - 2;
1908	uBackConns++;
1909
1910	/* Draw the arrow pointing to the target block. */
1911	dbgcScreenAsciiDrawCharacter(hScreen, pDumpBbTgt->uStartX - 1, pDumpBbTgt->uStartY,
1912	'>', enmColor);
1913	/* Draw the horizontal line. */
1914	dbgcScreenAsciiDrawLineHorizontal(hScreen, uXVerLine + 1, pDumpBbTgt->uStartX - 2,
1915	pDumpBbTgt->uStartY, '-', enmColor);
1916	dbgcScreenAsciiDrawCharacter(hScreen, uXVerLine, pDumpBbTgt->uStartY, '+',
1917	enmColor);
1918	/* Draw the vertical line down to the source block. */
1919	dbgcScreenAsciiDrawLineVertical(hScreen, uXVerLine, pDumpBbTgt->uStartY + 1, uYHorLine - 1,
1920	'\|', enmColor);
1921	dbgcScreenAsciiDrawCharacter(hScreen, uXVerLine, uYHorLine, '+', enmColor);
1922	/* Draw the horizontal connection between the source block and vertical part. */
1923	dbgcScreenAsciiDrawLineHorizontal(hScreen, uXVerLine + 1, pDumpBb->uStartX - 1,
1924	uYHorLine, '-', enmColor);
1925
1926	}
1927	else
1928	{
1929	/* Going forward. */
1930	uint32_t uXVerLine = cchWidth + cchLeftExtra + (cchRightExtra - uFwdConns) - 1;
1931	uint32_t uYHorLine = pDumpBb->uStartY + pDumpBb->cchHeight - 1 - 2;
1932	uFwdConns++;
1933
1934	/* Draw the horizontal line. */
1935	dbgcScreenAsciiDrawLineHorizontal(hScreen, pDumpBb->uStartX + pDumpBb->cchWidth,
1936	uXVerLine - 1, uYHorLine, '-', enmColor);
1937	dbgcScreenAsciiDrawCharacter(hScreen, uXVerLine, uYHorLine, '+', enmColor);
1938	/* Draw the vertical line down to the target block. */
1939	dbgcScreenAsciiDrawLineVertical(hScreen, uXVerLine, uYHorLine + 1, pDumpBbTgt->uStartY - 1,
1940	'\|', enmColor);
1941	/* Draw the horizontal connection between the target block and vertical part. */
1942	dbgcScreenAsciiDrawLineHorizontal(hScreen, pDumpBbTgt->uStartX + pDumpBbTgt->cchWidth,
1943	uXVerLine, pDumpBbTgt->uStartY, '-', enmColor);
1944	dbgcScreenAsciiDrawCharacter(hScreen, uXVerLine, pDumpBbTgt->uStartY, '+',
1945	enmColor);
1946	/* Draw the arrow pointing to the target block. */
1947	dbgcScreenAsciiDrawCharacter(hScreen, pDumpBbTgt->uStartX + pDumpBbTgt->cchWidth,
1948	pDumpBbTgt->uStartY, '<', enmColor);
1949	}
1950	break;
1951	}
1952	case DBGFFLOWBBENDTYPE_UNCOND_INDIRECT_JMP:
1953	default:
1954	AssertFailed();
1955	}
1956	}
1957
1958	rc = dbgcScreenAsciiBlit(hScreen, dbgcCmdUnassembleCfgBlit, pCmdHlp, fUseColor);
1959	dbgcScreenAsciiDestroy(hScreen);
1960	}
1961	}
1962
1963	if (paDumpBb)
1964	{
1965	for (unsigned i = 0; i < cBbs; i++)
1966	DBGFR3FlowBbRelease(paDumpBb[i].hFlowBb);
1967	RTMemTmpFree(paDumpBb);
1968	}
1969
1970	if (paDumpBranchTbl)
1971	{
1972	for (unsigned i = 0; i < cBranchTbls; i++)
1973	DBGFR3FlowBranchTblRelease(paDumpBranchTbl[i].hFlowBranchTbl);
1974	RTMemTmpFree(paDumpBranchTbl);
1975	}
1976
1977	if (hCfgIt)
1978	DBGFR3FlowItDestroy(hCfgIt);
1979	if (hFlowBranchTblIt)
1980	DBGFR3FlowBranchTblItDestroy(hFlowBranchTblIt);
1981
1982	return rc;
1983	}
1984
1985
1986	/**
1987	* @callback_method_impl{FNDBGCCMD, The 'ucfg' command.}
1988	*/
1989	static DECLCALLBACK(int) dbgcCmdUnassembleCfg(PCDBGCCMD pCmd, PDBGCCMDHLP pCmdHlp, PUVM pUVM, PCDBGCVAR paArgs, unsigned cArgs)
1990	{
1991	PDBGC pDbgc = DBGC_CMDHLP2DBGC(pCmdHlp);
1992
1993	/*
1994	* Validate input.
1995	*/
1996	DBGC_CMDHLP_REQ_UVM_RET(pCmdHlp, pCmd, pUVM);
1997	DBGC_CMDHLP_ASSERT_PARSER_RET(pCmdHlp, pCmd, -1, cArgs <= 1);
1998	DBGC_CMDHLP_ASSERT_PARSER_RET(pCmdHlp, pCmd, 0, cArgs == 0 \|\| DBGCVAR_ISPOINTER(paArgs[0].enmType));
1999
2000	if (!cArgs && !DBGCVAR_ISPOINTER(pDbgc->DisasmPos.enmType))
2001	return DBGCCmdHlpFail(pCmdHlp, pCmd, "Don't know where to start disassembling");
2002
2003	/*
2004	* Check the desired mode.
2005	*/
2006	unsigned fFlags = DBGF_DISAS_FLAGS_UNPATCHED_BYTES \| DBGF_DISAS_FLAGS_ANNOTATE_PATCHED;
2007	bool fUseColor = false;
2008	switch (pCmd->pszCmd[4])
2009	{
2010	default: AssertFailed(); RT_FALL_THRU();
2011	case '\0': fFlags \|= DBGF_DISAS_FLAGS_DEFAULT_MODE; break;
2012	case '6': fFlags \|= DBGF_DISAS_FLAGS_64BIT_MODE; break;
2013	case '3': fFlags \|= DBGF_DISAS_FLAGS_32BIT_MODE; break;
2014	case '1': fFlags \|= DBGF_DISAS_FLAGS_16BIT_MODE; break;
2015	case 'v': fFlags \|= DBGF_DISAS_FLAGS_16BIT_REAL_MODE; break;
2016	case 'c': fUseColor = true; break;
2017	}
2018
2019	/** @todo should use DBGFADDRESS for everything */
2020
2021	/*
2022	* Find address.
2023	*/
2024	if (!cArgs)
2025	{
2026	if (!DBGCVAR_ISPOINTER(pDbgc->DisasmPos.enmType))
2027	{
2028	/** @todo Batch query CS, RIP, CPU mode and flags. */
2029	PVMCPU pVCpu = VMMR3GetCpuByIdU(pUVM, pDbgc->idCpu);
2030	if ( pDbgc->fRegCtxGuest
2031	&& CPUMIsGuestIn64BitCode(pVCpu))
2032	{
2033	pDbgc->DisasmPos.enmType = DBGCVAR_TYPE_GC_FLAT;
2034	pDbgc->SourcePos.u.GCFlat = CPUMGetGuestRIP(pVCpu);
2035	}
2036	else
2037	{
2038	pDbgc->DisasmPos.enmType = DBGCVAR_TYPE_GC_FAR;
2039	pDbgc->SourcePos.u.GCFar.off = pDbgc->fRegCtxGuest ? CPUMGetGuestEIP(pVCpu) : CPUMGetHyperEIP(pVCpu);
2040	pDbgc->SourcePos.u.GCFar.sel = pDbgc->fRegCtxGuest ? CPUMGetGuestCS(pVCpu) : CPUMGetHyperCS(pVCpu);
2041	if ( (fFlags & DBGF_DISAS_FLAGS_MODE_MASK) == DBGF_DISAS_FLAGS_DEFAULT_MODE
2042	&& pDbgc->fRegCtxGuest
2043	&& (CPUMGetGuestEFlags(pVCpu) & X86_EFL_VM))
2044	{
2045	fFlags &= ~DBGF_DISAS_FLAGS_MODE_MASK;
2046	fFlags \|= DBGF_DISAS_FLAGS_16BIT_REAL_MODE;
2047	}
2048	}
2049
2050	if (pDbgc->fRegCtxGuest)
2051	fFlags \|= DBGF_DISAS_FLAGS_CURRENT_GUEST;
2052	else
2053	fFlags \|= DBGF_DISAS_FLAGS_CURRENT_HYPER \| DBGF_DISAS_FLAGS_HYPER;
2054	}
2055	else if ((fFlags & DBGF_DISAS_FLAGS_MODE_MASK) == DBGF_DISAS_FLAGS_DEFAULT_MODE && pDbgc->fDisasm)
2056	{
2057	fFlags &= ~DBGF_DISAS_FLAGS_MODE_MASK;
2058	fFlags \|= pDbgc->fDisasm & (DBGF_DISAS_FLAGS_MODE_MASK \| DBGF_DISAS_FLAGS_HYPER);
2059	}
2060	pDbgc->DisasmPos.enmRangeType = DBGCVAR_RANGE_NONE;
2061	}
2062	else
2063	pDbgc->DisasmPos = paArgs[0];
2064	pDbgc->pLastPos = &pDbgc->DisasmPos;
2065
2066	/*
2067	* Range.
2068	*/
2069	switch (pDbgc->DisasmPos.enmRangeType)
2070	{
2071	case DBGCVAR_RANGE_NONE:
2072	pDbgc->DisasmPos.enmRangeType = DBGCVAR_RANGE_ELEMENTS;
2073	pDbgc->DisasmPos.u64Range = 10;
2074	break;
2075
2076	case DBGCVAR_RANGE_ELEMENTS:
2077	if (pDbgc->DisasmPos.u64Range > 2048)
2078	return DBGCCmdHlpFail(pCmdHlp, pCmd, "Too many lines requested. Max is 2048 lines");
2079	break;
2080
2081	case DBGCVAR_RANGE_BYTES:
2082	if (pDbgc->DisasmPos.u64Range > 65536)
2083	return DBGCCmdHlpFail(pCmdHlp, pCmd, "The requested range is too big. Max is 64KB");
2084	break;
2085
2086	default:
2087	return DBGCCmdHlpFail(pCmdHlp, pCmd, "Unknown range type %d", pDbgc->DisasmPos.enmRangeType);
2088	}
2089
2090	/*
2091	* Convert physical and host addresses to guest addresses.
2092	*/
2093	RTDBGAS hDbgAs = pDbgc->hDbgAs;
2094	int rc;
2095	switch (pDbgc->DisasmPos.enmType)
2096	{
2097	case DBGCVAR_TYPE_GC_FLAT:
2098	case DBGCVAR_TYPE_GC_FAR:
2099	break;
2100	case DBGCVAR_TYPE_GC_PHYS:
2101	hDbgAs = DBGF_AS_PHYS;
2102	RT_FALL_THRU();
2103	case DBGCVAR_TYPE_HC_FLAT:
2104	case DBGCVAR_TYPE_HC_PHYS:
2105	{
2106	DBGCVAR VarTmp;
2107	rc = DBGCCmdHlpEval(pCmdHlp, &VarTmp, "%%(%Dv)", &pDbgc->DisasmPos);
2108	if (RT_FAILURE(rc))
2109	return DBGCCmdHlpFailRc(pCmdHlp, pCmd, rc, "failed to evaluate '%%(%Dv)'", &pDbgc->DisasmPos);
2110	pDbgc->DisasmPos = VarTmp;
2111	break;
2112	}
2113	default: AssertFailed(); break;
2114	}
2115
2116	DBGFADDRESS CurAddr;
2117	if ( (fFlags & DBGF_DISAS_FLAGS_MODE_MASK) == DBGF_DISAS_FLAGS_16BIT_REAL_MODE
2118	&& pDbgc->DisasmPos.enmType == DBGCVAR_TYPE_GC_FAR)
2119	DBGFR3AddrFromFlat(pUVM, &CurAddr, ((uint32_t)pDbgc->DisasmPos.u.GCFar.sel << 4) + pDbgc->DisasmPos.u.GCFar.off);
2120	else
2121	{
2122	rc = DBGCCmdHlpVarToDbgfAddr(pCmdHlp, &pDbgc->DisasmPos, &CurAddr);
2123	if (RT_FAILURE(rc))
2124	return DBGCCmdHlpFailRc(pCmdHlp, pCmd, rc, "DBGCCmdHlpVarToDbgfAddr failed on '%Dv'", &pDbgc->DisasmPos);
2125	}
2126
2127	DBGFFLOW hCfg;
2128	rc = DBGFR3FlowCreate(pUVM, pDbgc->idCpu, &CurAddr, 0 /cbDisasmMax/,
2129	DBGF_FLOW_CREATE_F_TRY_RESOLVE_INDIRECT_BRANCHES, fFlags, &hCfg);
2130	if (RT_SUCCESS(rc))
2131	{
2132	/* Dump the graph. */
2133	rc = dbgcCmdUnassembleCfgDump(hCfg, fUseColor, pCmdHlp);
2134	DBGFR3FlowRelease(hCfg);
2135	}
2136	else
2137	rc = DBGCCmdHlpFailRc(pCmdHlp, pCmd, rc, "DBGFR3FlowCreate failed on '%Dv'", &pDbgc->DisasmPos);
2138
2139	NOREF(pCmd);
2140	return rc;
2141	}
2142
2143
2144	/**
2145	* @callback_method_impl{FNDBGCCMD, The 'ls' command.}
2146	*/
2147	static DECLCALLBACK(int) dbgcCmdListSource(PCDBGCCMD pCmd, PDBGCCMDHLP pCmdHlp, PUVM pUVM, PCDBGCVAR paArgs, unsigned cArgs)
2148	{
2149	PDBGC pDbgc = DBGC_CMDHLP2DBGC(pCmdHlp);
2150
2151	/*
2152	* Validate input.
2153	*/
2154	DBGC_CMDHLP_ASSERT_PARSER_RET(pCmdHlp, pCmd, 0, cArgs <= 1);
2155	if (cArgs == 1)
2156	DBGC_CMDHLP_ASSERT_PARSER_RET(pCmdHlp, pCmd, 0, DBGCVAR_ISPOINTER(paArgs[0].enmType));
2157	if (!pUVM && !cArgs && !DBGCVAR_ISPOINTER(pDbgc->SourcePos.enmType))
2158	return DBGCCmdHlpFail(pCmdHlp, pCmd, "Don't know where to start listing...");
2159	if (!pUVM && cArgs && DBGCVAR_ISGCPOINTER(paArgs[0].enmType))
2160	return DBGCCmdHlpFail(pCmdHlp, pCmd, "GC address but no VM");
2161
2162	/*
2163	* Find address.
2164	*/
2165	if (!cArgs)
2166	{
2167	if (!DBGCVAR_ISPOINTER(pDbgc->SourcePos.enmType))
2168	{
2169	PVMCPU pVCpu = VMMR3GetCpuByIdU(pUVM, pDbgc->idCpu);
2170	pDbgc->SourcePos.enmType = DBGCVAR_TYPE_GC_FAR;
2171	pDbgc->SourcePos.u.GCFar.off = pDbgc->fRegCtxGuest ? CPUMGetGuestEIP(pVCpu) : CPUMGetHyperEIP(pVCpu);
2172	pDbgc->SourcePos.u.GCFar.sel = pDbgc->fRegCtxGuest ? CPUMGetGuestCS(pVCpu) : CPUMGetHyperCS(pVCpu);
2173	}
2174	pDbgc->SourcePos.enmRangeType = DBGCVAR_RANGE_NONE;
2175	}
2176	else
2177	pDbgc->SourcePos = paArgs[0];
2178	pDbgc->pLastPos = &pDbgc->SourcePos;
2179
2180	/*
2181	* Ensure the source address is flat GC.
2182	*/
2183	switch (pDbgc->SourcePos.enmType)
2184	{
2185	case DBGCVAR_TYPE_GC_FLAT:
2186	break;
2187	case DBGCVAR_TYPE_GC_PHYS:
2188	case DBGCVAR_TYPE_GC_FAR:
2189	case DBGCVAR_TYPE_HC_FLAT:
2190	case DBGCVAR_TYPE_HC_PHYS:
2191	{
2192	int rc = DBGCCmdHlpEval(pCmdHlp, &pDbgc->SourcePos, "%%(%Dv)", &pDbgc->SourcePos);
2193	if (RT_FAILURE(rc))
2194	return DBGCCmdHlpPrintf(pCmdHlp, "error: Invalid address or address type. (rc=%d)\n", rc);
2195	break;
2196	}
2197	default: AssertFailed(); break;
2198	}
2199
2200	/*
2201	* Range.
2202	*/
2203	switch (pDbgc->SourcePos.enmRangeType)
2204	{
2205	case DBGCVAR_RANGE_NONE:
2206	pDbgc->SourcePos.enmRangeType = DBGCVAR_RANGE_ELEMENTS;
2207	pDbgc->SourcePos.u64Range = 10;
2208	break;
2209
2210	case DBGCVAR_RANGE_ELEMENTS:
2211	if (pDbgc->SourcePos.u64Range > 2048)
2212	return DBGCCmdHlpPrintf(pCmdHlp, "error: Too many lines requested. Max is 2048 lines.\n");
2213	break;
2214
2215	case DBGCVAR_RANGE_BYTES:
2216	if (pDbgc->SourcePos.u64Range > 65536)
2217	return DBGCCmdHlpPrintf(pCmdHlp, "error: The requested range is too big. Max is 64KB.\n");
2218	break;
2219
2220	default:
2221	return DBGCCmdHlpPrintf(pCmdHlp, "internal error: Unknown range type %d.\n", pDbgc->SourcePos.enmRangeType);
2222	}
2223
2224	/*
2225	* Do the disassembling.
2226	*/
2227	bool fFirst = 1;
2228	RTDBGLINE LinePrev = { 0, 0, 0, 0, 0, "" };
2229	int iRangeLeft = (int)pDbgc->SourcePos.u64Range;
2230	if (iRangeLeft == 0) /* kludge for 'r'. */
2231	iRangeLeft = -1;
2232	for (;;)
2233	{
2234	/*
2235	* Get line info.
2236	*/
2237	RTDBGLINE Line;
2238	RTGCINTPTR off;
2239	DBGFADDRESS SourcePosAddr;
2240	int rc = DBGCCmdHlpVarToDbgfAddr(pCmdHlp, &pDbgc->SourcePos, &SourcePosAddr);
2241	if (RT_FAILURE(rc))
2242	return DBGCCmdHlpFailRc(pCmdHlp, pCmd, rc, "DBGCCmdHlpVarToDbgfAddr(,%Dv)", &pDbgc->SourcePos);
2243	rc = DBGFR3AsLineByAddr(pUVM, pDbgc->hDbgAs, &SourcePosAddr, &off, &Line, NULL);
2244	if (RT_FAILURE(rc))
2245	return VINF_SUCCESS;
2246
2247	unsigned cLines = 0;
2248	if (memcmp(&Line, &LinePrev, sizeof(Line)))
2249	{
2250	/*
2251	* Print filenamename
2252	*/
2253	if (!fFirst && strcmp(Line.szFilename, LinePrev.szFilename))
2254	fFirst = true;
2255	if (fFirst)
2256	{
2257	rc = DBGCCmdHlpPrintf(pCmdHlp, "[%s @ %d]\n", Line.szFilename, Line.uLineNo);
2258	if (RT_FAILURE(rc))
2259	return rc;
2260	}
2261
2262	/*
2263	* Try open the file and read the line.
2264	*/
2265	FILE *phFile = fopen(Line.szFilename, "r");
2266	if (phFile)
2267	{
2268	/* Skip ahead to the desired line. */
2269	char szLine[4096];
2270	unsigned cBefore = fFirst ? RT_MIN(2, Line.uLineNo - 1) : Line.uLineNo - LinePrev.uLineNo - 1;
2271	if (cBefore > 7)
2272	cBefore = 0;
2273	unsigned cLeft = Line.uLineNo - cBefore;
2274	while (cLeft > 0)
2275	{
2276	szLine[0] = '\0';
2277	if (!fgets(szLine, sizeof(szLine), phFile))
2278	break;
2279	cLeft--;
2280	}
2281	if (!cLeft)
2282	{
2283	/* print the before lines */
2284	for (;;)
2285	{
2286	size_t cch = strlen(szLine);
2287	while (cch > 0 && (szLine[cch - 1] == '\r' \|\| szLine[cch - 1] == '\n' \|\| RT_C_IS_SPACE(szLine[cch - 1])) )
2288	szLine[--cch] = '\0';
2289	if (cBefore-- <= 0)
2290	break;
2291
2292	rc = DBGCCmdHlpPrintf(pCmdHlp, " %4d: %s\n", Line.uLineNo - cBefore - 1, szLine);
2293	szLine[0] = '\0';
2294	const char *pszShutUpGcc = fgets(szLine, sizeof(szLine), phFile); NOREF(pszShutUpGcc);
2295	cLines++;
2296	}
2297	/* print the actual line */
2298	rc = DBGCCmdHlpPrintf(pCmdHlp, "%08llx %4d: %s\n", Line.Address, Line.uLineNo, szLine);
2299	}
2300	fclose(phFile);
2301	if (RT_FAILURE(rc))
2302	return rc;
2303	fFirst = false;
2304	}
2305	else
2306	return DBGCCmdHlpPrintf(pCmdHlp, "Warning: couldn't open source file '%s'\n", Line.szFilename);
2307
2308	LinePrev = Line;
2309	}
2310
2311
2312	/*
2313	* Advance
2314	*/
2315	if (iRangeLeft < 0) /* 'r' */
2316	break;
2317	if (pDbgc->SourcePos.enmRangeType == DBGCVAR_RANGE_ELEMENTS)
2318	iRangeLeft -= cLines;
2319	else
2320	iRangeLeft -= 1;
2321	rc = DBGCCmdHlpEval(pCmdHlp, &pDbgc->SourcePos, "(%Dv) + %x", &pDbgc->SourcePos, 1);
2322	if (RT_FAILURE(rc))
2323	return pCmdHlp->pfnVBoxError(pCmdHlp, rc, "Expression: (%Dv) + %x\n", &pDbgc->SourcePos, 1);
2324	if (iRangeLeft <= 0)
2325	break;
2326	}
2327
2328	NOREF(pCmd);
2329	return 0;
2330	}
2331
2332
2333	/**
2334	* @callback_method_impl{FNDBGCCMD, The 'r' command.}
2335	*/
2336	static DECLCALLBACK(int) dbgcCmdReg(PCDBGCCMD pCmd, PDBGCCMDHLP pCmdHlp, PUVM pUVM, PCDBGCVAR paArgs, unsigned cArgs)
2337	{
2338	PDBGC pDbgc = DBGC_CMDHLP2DBGC(pCmdHlp);
2339	if (!pDbgc->fRegCtxGuest)
2340	return dbgcCmdRegHyper(pCmd, pCmdHlp, pUVM, paArgs, cArgs);
2341	return dbgcCmdRegGuest(pCmd, pCmdHlp, pUVM, paArgs, cArgs);
2342	}
2343
2344
2345	/**
2346	* @callback_method_impl{FNDBGCCMD, Common worker for the dbgcCmdReg*()
2347	* commands.}
2348	*/
2349	static DECLCALLBACK(int) dbgcCmdRegCommon(PCDBGCCMD pCmd, PDBGCCMDHLP pCmdHlp, PUVM pUVM, PCDBGCVAR paArgs, unsigned cArgs,
2350	const char *pszPrefix)
2351	{
2352	PDBGC pDbgc = DBGC_CMDHLP2DBGC(pCmdHlp);
2353	DBGC_CMDHLP_ASSERT_PARSER_RET(pCmdHlp, pCmd, 0, cArgs == 1 \|\| cArgs == 2 \|\| cArgs == 3);
2354	DBGC_CMDHLP_ASSERT_PARSER_RET(pCmdHlp, pCmd, 0, paArgs[0].enmType == DBGCVAR_TYPE_STRING
2355	\|\| paArgs[0].enmType == DBGCVAR_TYPE_SYMBOL);
2356
2357	/*
2358	* Parse the register name and kind.
2359	*/
2360	const char *pszReg = paArgs[0].u.pszString;
2361	if (*pszReg == '@')
2362	pszReg++;
2363	VMCPUID idCpu = pDbgc->idCpu;
2364	if (*pszPrefix)
2365	idCpu \|= DBGFREG_HYPER_VMCPUID;
2366	if (*pszReg == '.')
2367	{
2368	pszReg++;
2369	idCpu \|= DBGFREG_HYPER_VMCPUID;
2370	}
2371	const char * const pszActualPrefix = idCpu & DBGFREG_HYPER_VMCPUID ? "." : "";
2372
2373	/*
2374	* Query the register type & value (the setter needs the type).
2375	*/
2376	DBGFREGVALTYPE enmType;
2377	DBGFREGVAL Value;
2378	int rc = DBGFR3RegNmQuery(pUVM, idCpu, pszReg, &Value, &enmType);
2379	if (RT_FAILURE(rc))
2380	{
2381	if (rc == VERR_DBGF_REGISTER_NOT_FOUND)
2382	return DBGCCmdHlpVBoxError(pCmdHlp, VERR_INVALID_PARAMETER, "Unknown register: '%s%s'.\n",
2383	pszActualPrefix, pszReg);
2384	return DBGCCmdHlpVBoxError(pCmdHlp, rc, "DBGFR3RegNmQuery failed querying '%s%s': %Rrc.\n",
2385	pszActualPrefix, pszReg, rc);
2386	}
2387	if (cArgs == 1)
2388	{
2389	/*
2390	* Show the register.
2391	*/
2392	char szValue[160];
2393	rc = DBGFR3RegFormatValue(szValue, sizeof(szValue), &Value, enmType, true /fSpecial/);
2394	if (RT_SUCCESS(rc))
2395	rc = DBGCCmdHlpPrintf(pCmdHlp, "%s%s=%s\n", pszActualPrefix, pszReg, szValue);
2396	else
2397	rc = DBGCCmdHlpVBoxError(pCmdHlp, rc, "DBGFR3RegFormatValue failed: %Rrc.\n", rc);
2398	}
2399	else
2400	{
2401	DBGCVAR NewValueTmp;
2402	PCDBGCVAR pNewValue;
2403	if (cArgs == 3)
2404	{
2405	DBGC_CMDHLP_ASSERT_PARSER_RET(pCmdHlp, pCmd, 1, paArgs[1].enmType == DBGCVAR_TYPE_STRING);
2406	if (strcmp(paArgs[1].u.pszString, "="))
2407	return DBGCCmdHlpFail(pCmdHlp, pCmd, "Second argument must be '='.");
2408	pNewValue = &paArgs[2];
2409	}
2410	else
2411	{
2412	/* Not possible to convince the parser to support both codeview and
2413	windbg syntax and make the equal sign optional. Try help it. */
2414	/** @todo make DBGCCmdHlpConvert do more with strings. */
2415	rc = DBGCCmdHlpConvert(pCmdHlp, &paArgs[1], DBGCVAR_TYPE_NUMBER, true /fConvSyms/, &NewValueTmp);
2416	if (RT_FAILURE(rc))
2417	return DBGCCmdHlpFailRc(pCmdHlp, pCmd, rc, "The last argument must be a value or valid symbol.");
2418	pNewValue = &NewValueTmp;
2419	}
2420
2421	/*
2422	* Modify the register.
2423	*/
2424	DBGC_CMDHLP_ASSERT_PARSER_RET(pCmdHlp, pCmd, 1, pNewValue->enmType == DBGCVAR_TYPE_NUMBER);
2425	if (enmType != DBGFREGVALTYPE_DTR)
2426	{
2427	enmType = DBGFREGVALTYPE_U64;
2428	rc = DBGCCmdHlpVarToNumber(pCmdHlp, pNewValue, &Value.u64);
2429	}
2430	else
2431	{
2432	enmType = DBGFREGVALTYPE_DTR;
2433	rc = DBGCCmdHlpVarToNumber(pCmdHlp, pNewValue, &Value.dtr.u64Base);
2434	if (RT_SUCCESS(rc) && pNewValue->enmRangeType != DBGCVAR_RANGE_NONE)
2435	Value.dtr.u32Limit = (uint32_t)pNewValue->u64Range;
2436	}
2437	if (RT_SUCCESS(rc))
2438	{
2439	rc = DBGFR3RegNmSet(pUVM, idCpu, pszReg, &Value, enmType);
2440	if (RT_FAILURE(rc))
2441	rc = DBGCCmdHlpVBoxError(pCmdHlp, rc, "DBGFR3RegNmSet failed settings '%s%s': %Rrc\n",
2442	pszActualPrefix, pszReg, rc);
2443	if (rc != VINF_SUCCESS)
2444	DBGCCmdHlpPrintf(pCmdHlp, "%s: warning: %Rrc\n", pCmd->pszCmd, rc);
2445	}
2446	else
2447	rc = DBGCCmdHlpVBoxError(pCmdHlp, rc, "DBGFR3RegFormatValue failed: %Rrc.\n", rc);
2448	}
2449	return rc;
2450	}
2451
2452
2453	/**
2454	* @callback_method_impl{FNDBGCCMD,
2455	* The 'rg'\, 'rg64' and 'rg32' commands\, worker for 'r'.}
2456	*/
2457	static DECLCALLBACK(int) dbgcCmdRegGuest(PCDBGCCMD pCmd, PDBGCCMDHLP pCmdHlp, PUVM pUVM, PCDBGCVAR paArgs, unsigned cArgs)
2458	{
2459	/*
2460	* Show all registers our selves.
2461	*/
2462	if (cArgs == 0)
2463	{
2464	PDBGC pDbgc = DBGC_CMDHLP2DBGC(pCmdHlp);
2465	bool const f64BitMode = !strcmp(pCmd->pszCmd, "rg64")
2466	\|\| ( strcmp(pCmd->pszCmd, "rg32") != 0
2467	&& DBGFR3CpuIsIn64BitCode(pUVM, pDbgc->idCpu));
2468	char szDisAndRegs[8192];
2469	int rc;
2470
2471	if (pDbgc->fRegTerse)
2472	{
2473	if (f64BitMode)
2474	rc = DBGFR3RegPrintf(pUVM, pDbgc->idCpu, &szDisAndRegs[0], sizeof(szDisAndRegs),
2475	"u %016VR{rip} L 0\n"
2476	"rax=%016VR{rax} rbx=%016VR{rbx} rcx=%016VR{rcx} rdx=%016VR{rdx}\n"
2477	"rsi=%016VR{rsi} rdi=%016VR{rdi} r8 =%016VR{r8} r9 =%016VR{r9}\n"
2478	"r10=%016VR{r10} r11=%016VR{r11} r12=%016VR{r12} r13=%016VR{r13}\n"
2479	"r14=%016VR{r14} r15=%016VR{r15} %VRF{rflags}\n"
2480	"rip=%016VR{rip} rsp=%016VR{rsp} rbp=%016VR{rbp}\n"
2481	"cs=%04VR{cs} ds=%04VR{ds} es=%04VR{es} fs=%04VR{fs} gs=%04VR{gs} ss=%04VR{ss} rflags=%08VR{rflags}\n");
2482	else
2483	rc = DBGFR3RegPrintf(pUVM, pDbgc->idCpu, szDisAndRegs, sizeof(szDisAndRegs),
2484	"u %04VR{cs}:%08VR{eip} L 0\n"
2485	"eax=%08VR{eax} ebx=%08VR{ebx} ecx=%08VR{ecx} edx=%08VR{edx} esi=%08VR{esi} edi=%08VR{edi}\n"
2486	"eip=%08VR{eip} esp=%08VR{esp} ebp=%08VR{ebp} %VRF{eflags}\n"
2487	"cs=%04VR{cs} ds=%04VR{ds} es=%04VR{es} fs=%04VR{fs} gs=%04VR{gs} ss=%04VR{ss} eflags=%08VR{eflags}\n");
2488	}
2489	else
2490	{
2491	if (f64BitMode)
2492	rc = DBGFR3RegPrintf(pUVM, pDbgc->idCpu, &szDisAndRegs[0], sizeof(szDisAndRegs),
2493	"u %016VR{rip} L 0\n"
2494	"rax=%016VR{rax} rbx=%016VR{rbx} rcx=%016VR{rcx} rdx=%016VR{rdx}\n"
2495	"rsi=%016VR{rsi} rdi=%016VR{rdi} r8 =%016VR{r8} r9 =%016VR{r9}\n"
2496	"r10=%016VR{r10} r11=%016VR{r11} r12=%016VR{r12} r13=%016VR{r13}\n"
2497	"r14=%016VR{r14} r15=%016VR{r15} %VRF{rflags}\n"
2498	"rip=%016VR{rip} rsp=%016VR{rsp} rbp=%016VR{rbp}\n"
2499	"cs={%04VR{cs} base=%016VR{cs_base} limit=%08VR{cs_lim} flags=%04VR{cs_attr}} cr0=%016VR{cr0}\n"
2500	"ds={%04VR{ds} base=%016VR{ds_base} limit=%08VR{ds_lim} flags=%04VR{ds_attr}} cr2=%016VR{cr2}\n"
2501	"es={%04VR{es} base=%016VR{es_base} limit=%08VR{es_lim} flags=%04VR{es_attr}} cr3=%016VR{cr3}\n"
2502	"fs={%04VR{fs} base=%016VR{fs_base} limit=%08VR{fs_lim} flags=%04VR{fs_attr}} cr4=%016VR{cr4}\n"
2503	"gs={%04VR{gs} base=%016VR{gs_base} limit=%08VR{gs_lim} flags=%04VR{gs_attr}} cr8=%016VR{cr8}\n"
2504	"ss={%04VR{ss} base=%016VR{ss_base} limit=%08VR{ss_lim} flags=%04VR{ss_attr}}\n"
2505	"dr0=%016VR{dr0} dr1=%016VR{dr1} dr2=%016VR{dr2} dr3=%016VR{dr3}\n"
2506	"dr6=%016VR{dr6} dr7=%016VR{dr7}\n"
2507	"gdtr=%016VR{gdtr_base}:%04VR{gdtr_lim} idtr=%016VR{idtr_base}:%04VR{idtr_lim} rflags=%08VR{rflags}\n"
2508	"ldtr={%04VR{ldtr} base=%016VR{ldtr_base} limit=%08VR{ldtr_lim} flags=%08VR{ldtr_attr}}\n"
2509	"tr ={%04VR{tr} base=%016VR{tr_base} limit=%08VR{tr_lim} flags=%08VR{tr_attr}}\n"
2510	" sysenter={cs=%04VR{sysenter_cs} eip=%08VR{sysenter_eip} esp=%08VR{sysenter_esp}}\n"
2511	" efer=%016VR{efer}\n"
2512	" pat=%016VR{pat}\n"
2513	" sf_mask=%016VR{sf_mask}\n"
2514	"krnl_gs_base=%016VR{krnl_gs_base}\n"
2515	" lstar=%016VR{lstar}\n"
2516	" star=%016VR{star} cstar=%016VR{cstar}\n"
2517	"fcw=%04VR{fcw} fsw=%04VR{fsw} ftw=%04VR{ftw} mxcsr=%04VR{mxcsr} mxcsr_mask=%04VR{mxcsr_mask}\n"
2518	);
2519	else
2520	rc = DBGFR3RegPrintf(pUVM, pDbgc->idCpu, szDisAndRegs, sizeof(szDisAndRegs),
2521	"u %04VR{cs}:%08VR{eip} L 0\n"
2522	"eax=%08VR{eax} ebx=%08VR{ebx} ecx=%08VR{ecx} edx=%08VR{edx} esi=%08VR{esi} edi=%08VR{edi}\n"
2523	"eip=%08VR{eip} esp=%08VR{esp} ebp=%08VR{ebp} %VRF{eflags}\n"
2524	"cs={%04VR{cs} base=%08VR{cs_base} limit=%08VR{cs_lim} flags=%04VR{cs_attr}} dr0=%08VR{dr0} dr1=%08VR{dr1}\n"
2525	"ds={%04VR{ds} base=%08VR{ds_base} limit=%08VR{ds_lim} flags=%04VR{ds_attr}} dr2=%08VR{dr2} dr3=%08VR{dr3}\n"
2526	"es={%04VR{es} base=%08VR{es_base} limit=%08VR{es_lim} flags=%04VR{es_attr}} dr6=%08VR{dr6} dr7=%08VR{dr7}\n"
2527	"fs={%04VR{fs} base=%08VR{fs_base} limit=%08VR{fs_lim} flags=%04VR{fs_attr}} cr0=%08VR{cr0} cr2=%08VR{cr2}\n"
2528	"gs={%04VR{gs} base=%08VR{gs_base} limit=%08VR{gs_lim} flags=%04VR{gs_attr}} cr3=%08VR{cr3} cr4=%08VR{cr4}\n"
2529	"ss={%04VR{ss} base=%08VR{ss_base} limit=%08VR{ss_lim} flags=%04VR{ss_attr}} cr8=%08VR{cr8}\n"
2530	"gdtr=%08VR{gdtr_base}:%04VR{gdtr_lim} idtr=%08VR{idtr_base}:%04VR{idtr_lim} eflags=%08VR{eflags}\n"
2531	"ldtr={%04VR{ldtr} base=%08VR{ldtr_base} limit=%08VR{ldtr_lim} flags=%04VR{ldtr_attr}}\n"
2532	"tr ={%04VR{tr} base=%08VR{tr_base} limit=%08VR{tr_lim} flags=%04VR{tr_attr}}\n"
2533	"sysenter={cs=%04VR{sysenter_cs} eip=%08VR{sysenter_eip} esp=%08VR{sysenter_esp}}\n"
2534	"fcw=%04VR{fcw} fsw=%04VR{fsw} ftw=%04VR{ftw} mxcsr=%04VR{mxcsr} mxcsr_mask=%04VR{mxcsr_mask}\n"
2535	);
2536	}
2537	if (RT_FAILURE(rc))
2538	return DBGCCmdHlpVBoxError(pCmdHlp, rc, "DBGFR3RegPrintf failed");
2539	char *pszRegs = strchr(szDisAndRegs, '\n');
2540	*pszRegs++ = '\0';
2541	rc = DBGCCmdHlpPrintf(pCmdHlp, "%s", pszRegs);
2542
2543	/*
2544	* Disassemble one instruction at cs:[r\|e]ip.
2545	*/
2546	if (!f64BitMode && strstr(pszRegs, " vm ")) /* a bit ugly... */
2547	return pCmdHlp->pfnExec(pCmdHlp, "uv86 %s", szDisAndRegs + 2);
2548	return pCmdHlp->pfnExec(pCmdHlp, "%s", szDisAndRegs);
2549	}
2550	return dbgcCmdRegCommon(pCmd, pCmdHlp, pUVM, paArgs, cArgs, "");
2551	}
2552
2553
2554	/**
2555	* @callback_method_impl{FNDBGCCMD, The 'rh' command.}
2556	*/
2557	static DECLCALLBACK(int) dbgcCmdRegHyper(PCDBGCCMD pCmd, PDBGCCMDHLP pCmdHlp, PUVM pUVM, PCDBGCVAR paArgs, unsigned cArgs)
2558	{
2559	/*
2560	* Show all registers our selves.
2561	*/
2562	if (cArgs == 0)
2563	{
2564	PDBGC pDbgc = DBGC_CMDHLP2DBGC(pCmdHlp);
2565	char szDisAndRegs[8192];
2566	int rc;
2567
2568	if (pDbgc->fRegTerse)
2569	rc = DBGFR3RegPrintf(pUVM, pDbgc->idCpu \| DBGFREG_HYPER_VMCPUID, szDisAndRegs, sizeof(szDisAndRegs),
2570	"u %VR{cs}:%VR{eip} L 0\n"
2571	".eax=%08VR{eax} .ebx=%08VR{ebx} .ecx=%08VR{ecx} .edx=%08VR{edx} .esi=%08VR{esi} .edi=%08VR{edi}\n"
2572	".eip=%08VR{eip} .esp=%08VR{esp} .ebp=%08VR{ebp} .%VRF{eflags}\n"
2573	".cs=%04VR{cs} .ds=%04VR{ds} .es=%04VR{es} .fs=%04VR{fs} .gs=%04VR{gs} .ss=%04VR{ss} .eflags=%08VR{eflags}\n");
2574	else
2575	rc = DBGFR3RegPrintf(pUVM, pDbgc->idCpu \| DBGFREG_HYPER_VMCPUID, szDisAndRegs, sizeof(szDisAndRegs),
2576	"u %04VR{cs}:%08VR{eip} L 0\n"
2577	".eax=%08VR{eax} .ebx=%08VR{ebx} .ecx=%08VR{ecx} .edx=%08VR{edx} .esi=%08VR{esi} .edi=%08VR{edi}\n"
2578	".eip=%08VR{eip} .esp=%08VR{esp} .ebp=%08VR{ebp} .%VRF{eflags}\n"
2579	".cs={%04VR{cs} base=%08VR{cs_base} limit=%08VR{cs_lim} flags=%04VR{cs_attr}} .dr0=%08VR{dr0} .dr1=%08VR{dr1}\n"
2580	".ds={%04VR{ds} base=%08VR{ds_base} limit=%08VR{ds_lim} flags=%04VR{ds_attr}} .dr2=%08VR{dr2} .dr3=%08VR{dr3}\n"
2581	".es={%04VR{es} base=%08VR{es_base} limit=%08VR{es_lim} flags=%04VR{es_attr}} .dr6=%08VR{dr6} .dr6=%08VR{dr6}\n"
2582	".fs={%04VR{fs} base=%08VR{fs_base} limit=%08VR{fs_lim} flags=%04VR{fs_attr}} .cr3=%016VR{cr3}\n"
2583	".gs={%04VR{gs} base=%08VR{gs_base} limit=%08VR{gs_lim} flags=%04VR{gs_attr}}\n"
2584	".ss={%04VR{ss} base=%08VR{ss_base} limit=%08VR{ss_lim} flags=%04VR{ss_attr}}\n"
2585	".gdtr=%08VR{gdtr_base}:%04VR{gdtr_lim} .idtr=%08VR{idtr_base}:%04VR{idtr_lim} .eflags=%08VR{eflags}\n"
2586	".ldtr={%04VR{ldtr} base=%08VR{ldtr_base} limit=%08VR{ldtr_lim} flags=%04VR{ldtr_attr}}\n"
2587	".tr ={%04VR{tr} base=%08VR{tr_base} limit=%08VR{tr_lim} flags=%04VR{tr_attr}}\n"
2588	);
2589	if (RT_FAILURE(rc))
2590	return DBGCCmdHlpVBoxError(pCmdHlp, rc, "DBGFR3RegPrintf failed");
2591	char *pszRegs = strchr(szDisAndRegs, '\n');
2592	*pszRegs++ = '\0';
2593	rc = DBGCCmdHlpPrintf(pCmdHlp, "%s", pszRegs);
2594
2595	/*
2596	* Disassemble one instruction at cs:[r\|e]ip.
2597	*/
2598	return pCmdHlp->pfnExec(pCmdHlp, "%s", szDisAndRegs);
2599	}
2600	return dbgcCmdRegCommon(pCmd, pCmdHlp, pUVM, paArgs, cArgs, ".");
2601	}
2602
2603
2604	/**
2605	* @callback_method_impl{FNDBGCCMD, The 'rt' command.}
2606	*/
2607	static DECLCALLBACK(int) dbgcCmdRegTerse(PCDBGCCMD pCmd, PDBGCCMDHLP pCmdHlp, PUVM pUVM, PCDBGCVAR paArgs, unsigned cArgs)
2608	{
2609	NOREF(pCmd); NOREF(pUVM); NOREF(paArgs); NOREF(cArgs);
2610
2611	PDBGC pDbgc = DBGC_CMDHLP2DBGC(pCmdHlp);
2612	pDbgc->fRegTerse = !pDbgc->fRegTerse;
2613	return DBGCCmdHlpPrintf(pCmdHlp, pDbgc->fRegTerse ? "info: Terse register info.\n" : "info: Verbose register info.\n");
2614	}
2615
2616
2617	/**
2618	* @callback_method_impl{FNDBGCCMD, The 'pr' and 'tr' commands.}
2619	*/
2620	static DECLCALLBACK(int) dbgcCmdStepTraceToggle(PCDBGCCMD pCmd, PDBGCCMDHLP pCmdHlp, PUVM pUVM, PCDBGCVAR paArgs, unsigned cArgs)
2621	{
2622	PDBGC pDbgc = DBGC_CMDHLP2DBGC(pCmdHlp);
2623	Assert(cArgs == 0); NOREF(pCmd); NOREF(pUVM); NOREF(paArgs); NOREF(cArgs);
2624
2625	/* Note! windbg accepts 'r' as a flag to 'p', 'pa', 'pc', 'pt', 't',
2626	'ta', 'tc' and 'tt'. We've simplified it. */
2627	pDbgc->fStepTraceRegs = !pDbgc->fStepTraceRegs;
2628	return VINF_SUCCESS;
2629	}
2630
2631
2632	/**
2633	* @callback_method_impl{FNDBGCCMD, The 'p'\, 'pc'\, 'pt'\, 't'\, 'tc'\, and 'tt' commands.}
2634	*/
2635	static DECLCALLBACK(int) dbgcCmdStepTrace(PCDBGCCMD pCmd, PDBGCCMDHLP pCmdHlp, PUVM pUVM, PCDBGCVAR paArgs, unsigned cArgs)
2636	{
2637	PDBGC pDbgc = DBGC_CMDHLP2DBGC(pCmdHlp);
2638	if (cArgs != 0)
2639	return DBGCCmdHlpFail(pCmdHlp, pCmd,
2640	"Sorry, but the '%s' command does not currently implement any arguments.\n", pCmd->pszCmd);
2641
2642	/* The 'count' has to be implemented by DBGC, whereas the
2643	filtering is taken care of by DBGF. */
2644
2645	/*
2646	* Convert the command to DBGF_STEP_F_XXX and other API input.
2647	*/
2648	//DBGFADDRESS StackPop;
2649	PDBGFADDRESS pStackPop = NULL;
2650	RTGCPTR cbStackPop = 0;
2651	uint32_t cMaxSteps = pCmd->pszCmd[0] == 'p' ? _512K : _64K;
2652	uint32_t fFlags = pCmd->pszCmd[0] == 'p' ? DBGF_STEP_F_OVER : DBGF_STEP_F_INTO;
2653	if (pCmd->pszCmd[1] == 'c')
2654	fFlags \|= DBGF_STEP_F_STOP_ON_CALL;
2655	else if (pCmd->pszCmd[1] == 't')
2656	fFlags \|= DBGF_STEP_F_STOP_ON_RET;
2657	else if (pCmd->pszCmd[0] != 'p')
2658	cMaxSteps = 1;
2659	else
2660	{
2661	/** @todo consider passing RSP + 1 in for 'p' and something else sensible for
2662	* the 'pt' command. */
2663	}
2664
2665	int rc = DBGFR3StepEx(pUVM, pDbgc->idCpu, fFlags, NULL, pStackPop, cbStackPop, cMaxSteps);
2666	if (RT_SUCCESS(rc))
2667	pDbgc->fReady = false;
2668	else
2669	return DBGCCmdHlpFailRc(pCmdHlp, pCmd, rc, "DBGFR3StepEx(,,%#x,) failed", fFlags);
2670
2671	NOREF(pCmd); NOREF(paArgs); NOREF(cArgs);
2672	return rc;
2673	}
2674
2675
2676	/**
2677	* @callback_method_impl{FNDBGCCMD, The 'pa' and 'ta' commands.}
2678	*/
2679	static DECLCALLBACK(int) dbgcCmdStepTraceTo(PCDBGCCMD pCmd, PDBGCCMDHLP pCmdHlp, PUVM pUVM, PCDBGCVAR paArgs, unsigned cArgs)
2680	{
2681	PDBGC pDbgc = DBGC_CMDHLP2DBGC(pCmdHlp);
2682	if (cArgs != 1)
2683	return DBGCCmdHlpFail(pCmdHlp, pCmd,
2684	"Sorry, but the '%s' command only implements a single argument at present.\n", pCmd->pszCmd);
2685	DBGFADDRESS Address;
2686	int rc = pCmdHlp->pfnVarToDbgfAddr(pCmdHlp, &paArgs[0], &Address);
2687	if (RT_FAILURE(rc))
2688	return pCmdHlp->pfnVBoxError(pCmdHlp, rc, "VarToDbgfAddr(,%Dv,)\n", &paArgs[0]);
2689
2690	uint32_t cMaxSteps = pCmd->pszCmd[0] == 'p' ? _512K : 1;
2691	uint32_t fFlags = pCmd->pszCmd[0] == 'p' ? DBGF_STEP_F_OVER : DBGF_STEP_F_INTO;
2692	rc = DBGFR3StepEx(pUVM, pDbgc->idCpu, fFlags, &Address, NULL, 0, cMaxSteps);
2693	if (RT_SUCCESS(rc))
2694	pDbgc->fReady = false;
2695	else
2696	return DBGCCmdHlpFailRc(pCmdHlp, pCmd, rc, "DBGFR3StepEx(,,%#x,) failed", fFlags);
2697	return rc;
2698	}
2699
2700
2701	/**
2702	* @callback_method_impl{FNDBGCCMD, The 'k'\, 'kg' and 'kh' commands.}
2703	*/
2704	static DECLCALLBACK(int) dbgcCmdStack(PCDBGCCMD pCmd, PDBGCCMDHLP pCmdHlp, PUVM pUVM, PCDBGCVAR paArgs, unsigned cArgs)
2705	{
2706	PDBGC pDbgc = DBGC_CMDHLP2DBGC(pCmdHlp);
2707
2708	/*
2709	* Figure which context we're called for and start walking that stack.
2710	*/
2711	int rc;
2712	PCDBGFSTACKFRAME pFirstFrame;
2713	bool const fGuest = pCmd->pszCmd[1] == 'g'
2714	\|\| (!pCmd->pszCmd[1] && pDbgc->fRegCtxGuest);
2715	rc = DBGFR3StackWalkBegin(pUVM, pDbgc->idCpu, fGuest ? DBGFCODETYPE_GUEST : DBGFCODETYPE_HYPER, &pFirstFrame);
2716	if (RT_FAILURE(rc))
2717	return DBGCCmdHlpPrintf(pCmdHlp, "Failed to begin stack walk, rc=%Rrc\n", rc);
2718
2719	/*
2720	* Print header.
2721	* 12345678 12345678 0023:87654321 12345678 87654321 12345678 87654321 symbol
2722	*/
2723	uint32_t fBitFlags = 0;
2724	for (PCDBGFSTACKFRAME pFrame = pFirstFrame;
2725	pFrame;
2726	pFrame = DBGFR3StackWalkNext(pFrame))
2727	{
2728	uint32_t const fCurBitFlags = pFrame->fFlags & (DBGFSTACKFRAME_FLAGS_16BIT \| DBGFSTACKFRAME_FLAGS_32BIT \| DBGFSTACKFRAME_FLAGS_64BIT);
2729	if (fCurBitFlags & DBGFSTACKFRAME_FLAGS_16BIT)
2730	{
2731	if (fCurBitFlags != fBitFlags)
2732	pCmdHlp->pfnPrintf(pCmdHlp, NULL, "SS:BP Ret SS:BP Ret CS:EIP Arg0 Arg1 Arg2 Arg3 CS:EIP / Symbol [line]\n");
2733	rc = DBGCCmdHlpPrintf(pCmdHlp, "%04RX16:%04RX16 %04RX16:%04RX16 %04RX32:%08RX32 %08RX32 %08RX32 %08RX32 %08RX32",
2734	pFrame->AddrFrame.Sel,
2735	(uint16_t)pFrame->AddrFrame.off,
2736	pFrame->AddrReturnFrame.Sel,
2737	(uint16_t)pFrame->AddrReturnFrame.off,
2738	(uint32_t)pFrame->AddrReturnPC.Sel,
2739	(uint32_t)pFrame->AddrReturnPC.off,
2740	pFrame->Args.au32[0],
2741	pFrame->Args.au32[1],
2742	pFrame->Args.au32[2],
2743	pFrame->Args.au32[3]);
2744	}
2745	else if (fCurBitFlags & DBGFSTACKFRAME_FLAGS_32BIT)
2746	{
2747	if (fCurBitFlags != fBitFlags)
2748	pCmdHlp->pfnPrintf(pCmdHlp, NULL, "EBP Ret EBP Ret CS:EIP Arg0 Arg1 Arg2 Arg3 CS:EIP / Symbol [line]\n");
2749	rc = DBGCCmdHlpPrintf(pCmdHlp, "%08RX32 %08RX32 %04RX32:%08RX32 %08RX32 %08RX32 %08RX32 %08RX32",
2750	(uint32_t)pFrame->AddrFrame.off,
2751	(uint32_t)pFrame->AddrReturnFrame.off,
2752	(uint32_t)pFrame->AddrReturnPC.Sel,
2753	(uint32_t)pFrame->AddrReturnPC.off,
2754	pFrame->Args.au32[0],
2755	pFrame->Args.au32[1],
2756	pFrame->Args.au32[2],
2757	pFrame->Args.au32[3]);
2758	}
2759	else if (fCurBitFlags & DBGFSTACKFRAME_FLAGS_64BIT)
2760	{
2761	if (fCurBitFlags != fBitFlags)
2762	pCmdHlp->pfnPrintf(pCmdHlp, NULL, "RBP Ret SS:RBP Ret RIP CS:RIP / Symbol [line]\n");
2763	rc = DBGCCmdHlpPrintf(pCmdHlp, "%016RX64 %04RX16:%016RX64 %016RX64",
2764	(uint64_t)pFrame->AddrFrame.off,
2765	pFrame->AddrReturnFrame.Sel,
2766	(uint64_t)pFrame->AddrReturnFrame.off,
2767	(uint64_t)pFrame->AddrReturnPC.off);
2768	}
2769	if (RT_FAILURE(rc))
2770	break;
2771	if (!pFrame->pSymPC)
2772	rc = pCmdHlp->pfnPrintf(pCmdHlp, NULL,
2773	fCurBitFlags & DBGFSTACKFRAME_FLAGS_64BIT
2774	? " %RTsel:%016RGv"
2775	: fCurBitFlags & DBGFSTACKFRAME_FLAGS_32BIT
2776	? " %RTsel:%08RGv"
2777	: " %RTsel:%04RGv"
2778	, pFrame->AddrPC.Sel, pFrame->AddrPC.off);
2779	else
2780	{
2781	RTGCINTPTR offDisp = pFrame->AddrPC.FlatPtr - pFrame->pSymPC->Value; /** @todo this isn't 100% correct for segmented stuff. */
2782	if (offDisp > 0)
2783	rc = DBGCCmdHlpPrintf(pCmdHlp, " %s+%llx", pFrame->pSymPC->szName, (int64_t)offDisp);
2784	else if (offDisp < 0)
2785	rc = DBGCCmdHlpPrintf(pCmdHlp, " %s-%llx", pFrame->pSymPC->szName, -(int64_t)offDisp);
2786	else
2787	rc = DBGCCmdHlpPrintf(pCmdHlp, " %s", pFrame->pSymPC->szName);
2788	}
2789	if (RT_SUCCESS(rc) && pFrame->pLinePC)
2790	rc = DBGCCmdHlpPrintf(pCmdHlp, " [%s @ 0i%d]", pFrame->pLinePC->szFilename, pFrame->pLinePC->uLineNo);
2791	if (RT_SUCCESS(rc))
2792	rc = DBGCCmdHlpPrintf(pCmdHlp, "\n");
2793	if (RT_FAILURE(rc))
2794	break;
2795
2796	fBitFlags = fCurBitFlags;
2797	}
2798
2799	DBGFR3StackWalkEnd(pFirstFrame);
2800
2801	NOREF(paArgs); NOREF(cArgs);
2802	return rc;
2803	}
2804
2805
2806	static int dbgcCmdDumpDTWorker64(PDBGCCMDHLP pCmdHlp, PCX86DESC64 pDesc, unsigned iEntry, bool fHyper, bool *pfDblEntry)
2807	{
2808	/* GUEST64 */
2809	int rc;
2810
2811	const char *pszHyper = fHyper ? " HYPER" : "";
2812	const char *pszPresent = pDesc->Gen.u1Present ? "P " : "NP";
2813	if (pDesc->Gen.u1DescType)
2814	{
2815	static const char * const s_apszTypes[] =
2816	{
2817	"DataRO", /* 0 Read-Only */
2818	"DataRO", /* 1 Read-Only - Accessed */
2819	"DataRW", /* 2 Read/Write */
2820	"DataRW", /* 3 Read/Write - Accessed */
2821	"DownRO", /* 4 Expand-down, Read-Only */
2822	"DownRO", /* 5 Expand-down, Read-Only - Accessed */
2823	"DownRW", /* 6 Expand-down, Read/Write */
2824	"DownRW", /* 7 Expand-down, Read/Write - Accessed */
2825	"CodeEO", /* 8 Execute-Only */
2826	"CodeEO", /* 9 Execute-Only - Accessed */
2827	"CodeER", /* A Execute/Readable */
2828	"CodeER", /* B Execute/Readable - Accessed */
2829	"ConfE0", /* C Conforming, Execute-Only */
2830	"ConfE0", /* D Conforming, Execute-Only - Accessed */
2831	"ConfER", /* E Conforming, Execute/Readable */
2832	"ConfER" /* F Conforming, Execute/Readable - Accessed */
2833	};
2834	const char *pszAccessed = pDesc->Gen.u4Type & RT_BIT(0) ? "A " : "NA";
2835	const char *pszGranularity = pDesc->Gen.u1Granularity ? "G" : " ";
2836	const char *pszBig = pDesc->Gen.u1DefBig ? "BIG" : " ";
2837	uint32_t u32Base = X86DESC_BASE(pDesc);
2838	uint32_t cbLimit = X86DESC_LIMIT_G(pDesc);
2839
2840	rc = DBGCCmdHlpPrintf(pCmdHlp, "%04x %s Bas=%08x Lim=%08x DPL=%d %s %s %s %s AVL=%d L=%d%s\n",
2841	iEntry, s_apszTypes[pDesc->Gen.u4Type], u32Base, cbLimit,
2842	pDesc->Gen.u2Dpl, pszPresent, pszAccessed, pszGranularity, pszBig,
2843	pDesc->Gen.u1Available, pDesc->Gen.u1Long, pszHyper);
2844	}
2845	else
2846	{
2847	static const char * const s_apszTypes[] =
2848	{
2849	"Ill-0 ", /* 0 0000 Reserved (Illegal) */
2850	"Ill-1 ", /* 1 0001 Available 16-bit TSS */
2851	"LDT ", /* 2 0010 LDT */
2852	"Ill-3 ", /* 3 0011 Busy 16-bit TSS */
2853	"Ill-4 ", /* 4 0100 16-bit Call Gate */
2854	"Ill-5 ", /* 5 0101 Task Gate */
2855	"Ill-6 ", /* 6 0110 16-bit Interrupt Gate */
2856	"Ill-7 ", /* 7 0111 16-bit Trap Gate */
2857	"Ill-8 ", /* 8 1000 Reserved (Illegal) */
2858	"Tss64A", /* 9 1001 Available 32-bit TSS */
2859	"Ill-A ", /* A 1010 Reserved (Illegal) */
2860	"Tss64B", /* B 1011 Busy 32-bit TSS */
2861	"Call64", /* C 1100 32-bit Call Gate */
2862	"Ill-D ", /* D 1101 Reserved (Illegal) */
2863	"Int64 ", /* E 1110 32-bit Interrupt Gate */
2864	"Trap64" /* F 1111 32-bit Trap Gate */
2865	};
2866	switch (pDesc->Gen.u4Type)
2867	{
2868	/* raw */
2869	case X86_SEL_TYPE_SYS_UNDEFINED:
2870	case X86_SEL_TYPE_SYS_UNDEFINED2:
2871	case X86_SEL_TYPE_SYS_UNDEFINED4:
2872	case X86_SEL_TYPE_SYS_UNDEFINED3:
2873	case X86_SEL_TYPE_SYS_286_TSS_AVAIL:
2874	case X86_SEL_TYPE_SYS_286_TSS_BUSY:
2875	case X86_SEL_TYPE_SYS_286_CALL_GATE:
2876	case X86_SEL_TYPE_SYS_286_INT_GATE:
2877	case X86_SEL_TYPE_SYS_286_TRAP_GATE:
2878	case X86_SEL_TYPE_SYS_TASK_GATE:
2879	rc = DBGCCmdHlpPrintf(pCmdHlp, "%04x %s %.8Rhxs DPL=%d %s%s\n",
2880	iEntry, s_apszTypes[pDesc->Gen.u4Type], pDesc,
2881	pDesc->Gen.u2Dpl, pszPresent, pszHyper);
2882	break;
2883
2884	case X86_SEL_TYPE_SYS_386_TSS_AVAIL:
2885	case X86_SEL_TYPE_SYS_386_TSS_BUSY:
2886	case X86_SEL_TYPE_SYS_LDT:
2887	{
2888	const char *pszBusy = pDesc->Gen.u4Type & RT_BIT(1) ? "B " : "NB";
2889	const char *pszBig = pDesc->Gen.u1DefBig ? "BIG" : " ";
2890	const char *pszLong = pDesc->Gen.u1Long ? "LONG" : " ";
2891
2892	uint64_t u64Base = X86DESC64_BASE(pDesc);
2893	uint32_t cbLimit = X86DESC_LIMIT_G(pDesc);
2894
2895	rc = DBGCCmdHlpPrintf(pCmdHlp, "%04x %s Bas=%016RX64 Lim=%08x DPL=%d %s %s %s %sAVL=%d R=%d%s\n",
2896	iEntry, s_apszTypes[pDesc->Gen.u4Type], u64Base, cbLimit,
2897	pDesc->Gen.u2Dpl, pszPresent, pszBusy, pszLong, pszBig,
2898	pDesc->Gen.u1Available, pDesc->Gen.u1Long \| (pDesc->Gen.u1DefBig << 1),
2899	pszHyper);
2900	if (pfDblEntry)
2901	*pfDblEntry = true;
2902	break;
2903	}
2904
2905	case X86_SEL_TYPE_SYS_386_CALL_GATE:
2906	{
2907	unsigned cParams = pDesc->au8[4] & 0x1f;
2908	const char *pszCountOf = pDesc->Gen.u4Type & RT_BIT(3) ? "DC" : "WC";
2909	RTSEL sel = pDesc->au16[1];
2910	uint64_t off = pDesc->au16[0]
2911	\| ((uint64_t)pDesc->au16[3] << 16)
2912	\| ((uint64_t)pDesc->Gen.u32BaseHigh3 << 32);
2913	rc = DBGCCmdHlpPrintf(pCmdHlp, "%04x %s Sel:Off=%04x:%016RX64 DPL=%d %s %s=%d%s\n",
2914	iEntry, s_apszTypes[pDesc->Gen.u4Type], sel, off,
2915	pDesc->Gen.u2Dpl, pszPresent, pszCountOf, cParams, pszHyper);
2916	if (pfDblEntry)
2917	*pfDblEntry = true;
2918	break;
2919	}
2920
2921	case X86_SEL_TYPE_SYS_386_INT_GATE:
2922	case X86_SEL_TYPE_SYS_386_TRAP_GATE:
2923	{
2924	RTSEL sel = pDesc->Gate.u16Sel;
2925	uint64_t off = pDesc->Gate.u16OffsetLow
2926	\| ((uint64_t)pDesc->Gate.u16OffsetHigh << 16)
2927	\| ((uint64_t)pDesc->Gate.u32OffsetTop << 32);
2928	rc = DBGCCmdHlpPrintf(pCmdHlp, "%04x %s Sel:Off=%04x:%016RX64 DPL=%u %s IST=%u%s\n",
2929	iEntry, s_apszTypes[pDesc->Gate.u4Type], sel, off,
2930	pDesc->Gate.u2Dpl, pszPresent, pDesc->Gate.u3IST, pszHyper);
2931	if (pfDblEntry)
2932	*pfDblEntry = true;
2933	break;
2934	}
2935
2936	/* impossible, just it's necessary to keep gcc happy. */
2937	default:
2938	return VINF_SUCCESS;
2939	}
2940	}
2941	return VINF_SUCCESS;
2942	}
2943
2944
2945	/**
2946	* Worker function that displays one descriptor entry (GDT, LDT, IDT).
2947	*
2948	* @returns pfnPrintf status code.
2949	* @param pCmdHlp The DBGC command helpers.
2950	* @param pDesc The descriptor to display.
2951	* @param iEntry The descriptor entry number.
2952	* @param fHyper Whether the selector belongs to the hypervisor or not.
2953	*/
2954	static int dbgcCmdDumpDTWorker32(PDBGCCMDHLP pCmdHlp, PCX86DESC pDesc, unsigned iEntry, bool fHyper)
2955	{
2956	int rc;
2957
2958	const char *pszHyper = fHyper ? " HYPER" : "";
2959	const char *pszPresent = pDesc->Gen.u1Present ? "P " : "NP";
2960	if (pDesc->Gen.u1DescType)
2961	{
2962	static const char * const s_apszTypes[] =
2963	{
2964	"DataRO", /* 0 Read-Only */
2965	"DataRO", /* 1 Read-Only - Accessed */
2966	"DataRW", /* 2 Read/Write */
2967	"DataRW", /* 3 Read/Write - Accessed */
2968	"DownRO", /* 4 Expand-down, Read-Only */
2969	"DownRO", /* 5 Expand-down, Read-Only - Accessed */
2970	"DownRW", /* 6 Expand-down, Read/Write */
2971	"DownRW", /* 7 Expand-down, Read/Write - Accessed */
2972	"CodeEO", /* 8 Execute-Only */
2973	"CodeEO", /* 9 Execute-Only - Accessed */
2974	"CodeER", /* A Execute/Readable */
2975	"CodeER", /* B Execute/Readable - Accessed */
2976	"ConfE0", /* C Conforming, Execute-Only */
2977	"ConfE0", /* D Conforming, Execute-Only - Accessed */
2978	"ConfER", /* E Conforming, Execute/Readable */
2979	"ConfER" /* F Conforming, Execute/Readable - Accessed */
2980	};
2981	const char *pszAccessed = pDesc->Gen.u4Type & RT_BIT(0) ? "A " : "NA";
2982	const char *pszGranularity = pDesc->Gen.u1Granularity ? "G" : " ";
2983	const char *pszBig = pDesc->Gen.u1DefBig ? "BIG" : " ";
2984	uint32_t u32Base = pDesc->Gen.u16BaseLow
2985	\| ((uint32_t)pDesc->Gen.u8BaseHigh1 << 16)
2986	\| ((uint32_t)pDesc->Gen.u8BaseHigh2 << 24);
2987	uint32_t cbLimit = pDesc->Gen.u16LimitLow \| (pDesc->Gen.u4LimitHigh << 16);
2988	if (pDesc->Gen.u1Granularity)
2989	cbLimit <<= PAGE_SHIFT;
2990
2991	rc = DBGCCmdHlpPrintf(pCmdHlp, "%04x %s Bas=%08x Lim=%08x DPL=%d %s %s %s %s AVL=%d L=%d%s\n",
2992	iEntry, s_apszTypes[pDesc->Gen.u4Type], u32Base, cbLimit,
2993	pDesc->Gen.u2Dpl, pszPresent, pszAccessed, pszGranularity, pszBig,
2994	pDesc->Gen.u1Available, pDesc->Gen.u1Long, pszHyper);
2995	}
2996	else
2997	{
2998	static const char * const s_apszTypes[] =
2999	{
3000	"Ill-0 ", /* 0 0000 Reserved (Illegal) */
3001	"Tss16A", /* 1 0001 Available 16-bit TSS */
3002	"LDT ", /* 2 0010 LDT */
3003	"Tss16B", /* 3 0011 Busy 16-bit TSS */
3004	"Call16", /* 4 0100 16-bit Call Gate */
3005	"TaskG ", /* 5 0101 Task Gate */
3006	"Int16 ", /* 6 0110 16-bit Interrupt Gate */
3007	"Trap16", /* 7 0111 16-bit Trap Gate */
3008	"Ill-8 ", /* 8 1000 Reserved (Illegal) */
3009	"Tss32A", /* 9 1001 Available 32-bit TSS */
3010	"Ill-A ", /* A 1010 Reserved (Illegal) */
3011	"Tss32B", /* B 1011 Busy 32-bit TSS */
3012	"Call32", /* C 1100 32-bit Call Gate */
3013	"Ill-D ", /* D 1101 Reserved (Illegal) */
3014	"Int32 ", /* E 1110 32-bit Interrupt Gate */
3015	"Trap32" /* F 1111 32-bit Trap Gate */
3016	};
3017	switch (pDesc->Gen.u4Type)
3018	{
3019	/* raw */
3020	case X86_SEL_TYPE_SYS_UNDEFINED:
3021	case X86_SEL_TYPE_SYS_UNDEFINED2:
3022	case X86_SEL_TYPE_SYS_UNDEFINED4:
3023	case X86_SEL_TYPE_SYS_UNDEFINED3:
3024	rc = DBGCCmdHlpPrintf(pCmdHlp, "%04x %s %.8Rhxs DPL=%d %s%s\n",
3025	iEntry, s_apszTypes[pDesc->Gen.u4Type], pDesc,
3026	pDesc->Gen.u2Dpl, pszPresent, pszHyper);
3027	break;
3028
3029	case X86_SEL_TYPE_SYS_286_TSS_AVAIL:
3030	case X86_SEL_TYPE_SYS_386_TSS_AVAIL:
3031	case X86_SEL_TYPE_SYS_286_TSS_BUSY:
3032	case X86_SEL_TYPE_SYS_386_TSS_BUSY:
3033	case X86_SEL_TYPE_SYS_LDT:
3034	{
3035	const char *pszGranularity = pDesc->Gen.u1Granularity ? "G" : " ";
3036	const char *pszBusy = pDesc->Gen.u4Type & RT_BIT(1) ? "B " : "NB";
3037	const char *pszBig = pDesc->Gen.u1DefBig ? "BIG" : " ";
3038	uint32_t u32Base = pDesc->Gen.u16BaseLow
3039	\| ((uint32_t)pDesc->Gen.u8BaseHigh1 << 16)
3040	\| ((uint32_t)pDesc->Gen.u8BaseHigh2 << 24);
3041	uint32_t cbLimit = pDesc->Gen.u16LimitLow \| (pDesc->Gen.u4LimitHigh << 16);
3042	if (pDesc->Gen.u1Granularity)
3043	cbLimit <<= PAGE_SHIFT;
3044
3045	rc = DBGCCmdHlpPrintf(pCmdHlp, "%04x %s Bas=%08x Lim=%08x DPL=%d %s %s %s %s AVL=%d R=%d%s\n",
3046	iEntry, s_apszTypes[pDesc->Gen.u4Type], u32Base, cbLimit,
3047	pDesc->Gen.u2Dpl, pszPresent, pszBusy, pszGranularity, pszBig,
3048	pDesc->Gen.u1Available, pDesc->Gen.u1Long \| (pDesc->Gen.u1DefBig << 1),
3049	pszHyper);
3050	break;
3051	}
3052
3053	case X86_SEL_TYPE_SYS_TASK_GATE:
3054	{
3055	rc = DBGCCmdHlpPrintf(pCmdHlp, "%04x %s TSS=%04x DPL=%d %s%s\n",
3056	iEntry, s_apszTypes[pDesc->Gen.u4Type], pDesc->au16[1],
3057	pDesc->Gen.u2Dpl, pszPresent, pszHyper);
3058	break;
3059	}
3060
3061	case X86_SEL_TYPE_SYS_286_CALL_GATE:
3062	case X86_SEL_TYPE_SYS_386_CALL_GATE:
3063	{
3064	unsigned cParams = pDesc->au8[4] & 0x1f;
3065	const char *pszCountOf = pDesc->Gen.u4Type & RT_BIT(3) ? "DC" : "WC";
3066	RTSEL sel = pDesc->au16[1];
3067	uint32_t off = pDesc->au16[0] \| ((uint32_t)pDesc->au16[3] << 16);
3068	rc = DBGCCmdHlpPrintf(pCmdHlp, "%04x %s Sel:Off=%04x:%08x DPL=%d %s %s=%d%s\n",
3069	iEntry, s_apszTypes[pDesc->Gen.u4Type], sel, off,
3070	pDesc->Gen.u2Dpl, pszPresent, pszCountOf, cParams, pszHyper);
3071	break;
3072	}
3073
3074	case X86_SEL_TYPE_SYS_286_INT_GATE:
3075	case X86_SEL_TYPE_SYS_386_INT_GATE:
3076	case X86_SEL_TYPE_SYS_286_TRAP_GATE:
3077	case X86_SEL_TYPE_SYS_386_TRAP_GATE:
3078	{
3079	RTSEL sel = pDesc->au16[1];
3080	uint32_t off = pDesc->au16[0] \| ((uint32_t)pDesc->au16[3] << 16);
3081	rc = DBGCCmdHlpPrintf(pCmdHlp, "%04x %s Sel:Off=%04x:%08x DPL=%d %s%s\n",
3082	iEntry, s_apszTypes[pDesc->Gen.u4Type], sel, off,
3083	pDesc->Gen.u2Dpl, pszPresent, pszHyper);
3084	break;
3085	}
3086
3087	/* impossible, just it's necessary to keep gcc happy. */
3088	default:
3089	return VINF_SUCCESS;
3090	}
3091	}
3092	return rc;
3093	}
3094
3095
3096	/**
3097	* @callback_method_impl{FNDBGCCMD, The 'dg'\, 'dga'\, 'dl' and 'dla' commands.}
3098	*/
3099	static DECLCALLBACK(int) dbgcCmdDumpDT(PCDBGCCMD pCmd, PDBGCCMDHLP pCmdHlp, PUVM pUVM, PCDBGCVAR paArgs, unsigned cArgs)
3100	{
3101	/*
3102	* Validate input.
3103	*/
3104	DBGC_CMDHLP_REQ_UVM_RET(pCmdHlp, pCmd, pUVM);
3105
3106	/*
3107	* Get the CPU mode, check which command variation this is
3108	* and fix a default parameter if needed.
3109	*/
3110	PDBGC pDbgc = DBGC_CMDHLP2DBGC(pCmdHlp);
3111	PVMCPU pVCpu = VMMR3GetCpuByIdU(pUVM, pDbgc->idCpu);
3112	CPUMMODE enmMode = CPUMGetGuestMode(pVCpu);
3113	bool fGdt = pCmd->pszCmd[1] == 'g';
3114	bool fAll = pCmd->pszCmd[2] == 'a';
3115	RTSEL SelTable = fGdt ? 0 : X86_SEL_LDT;
3116
3117	DBGCVAR Var;
3118	if (!cArgs)
3119	{
3120	cArgs = 1;
3121	paArgs = &Var;
3122	Var.enmType = DBGCVAR_TYPE_NUMBER;
3123	Var.u.u64Number = 0;
3124	Var.enmRangeType = DBGCVAR_RANGE_ELEMENTS;
3125	Var.u64Range = 1024;
3126	}
3127
3128	/*
3129	* Process the arguments.
3130	*/
3131	for (unsigned i = 0; i < cArgs; i++)
3132	{
3133	/*
3134	* Retrieve the selector value from the argument.
3135	* The parser may confuse pointers and numbers if more than one
3136	* argument is given, that that into account.
3137	*/
3138	DBGC_CMDHLP_ASSERT_PARSER_RET(pCmdHlp, pCmd, i, paArgs[i].enmType == DBGCVAR_TYPE_NUMBER \|\| DBGCVAR_ISPOINTER(paArgs[i].enmType));
3139	uint64_t u64;
3140	unsigned cSels = 1;
3141	switch (paArgs[i].enmType)
3142	{
3143	case DBGCVAR_TYPE_NUMBER:
3144	u64 = paArgs[i].u.u64Number;
3145	if (paArgs[i].enmRangeType != DBGCVAR_RANGE_NONE)
3146	cSels = RT_MIN(paArgs[i].u64Range, 1024);
3147	break;
3148	case DBGCVAR_TYPE_GC_FAR: u64 = paArgs[i].u.GCFar.sel; break;
3149	case DBGCVAR_TYPE_GC_FLAT: u64 = paArgs[i].u.GCFlat; break;
3150	case DBGCVAR_TYPE_GC_PHYS: u64 = paArgs[i].u.GCPhys; break;
3151	case DBGCVAR_TYPE_HC_FLAT: u64 = (uintptr_t)paArgs[i].u.pvHCFlat; break;
3152	case DBGCVAR_TYPE_HC_PHYS: u64 = paArgs[i].u.HCPhys; break;
3153	default: u64 = _64K; break;
3154	}
3155	if (u64 < _64K)
3156	{
3157	unsigned Sel = (RTSEL)u64;
3158
3159	/*
3160	* Dump the specified range.
3161	*/
3162	bool fSingle = cSels == 1;
3163	while ( cSels-- > 0
3164	&& Sel < _64K)
3165	{
3166	DBGFSELINFO SelInfo;
3167	int rc = DBGFR3SelQueryInfo(pUVM, pDbgc->idCpu, Sel \| SelTable, DBGFSELQI_FLAGS_DT_GUEST, &SelInfo);
3168	if (RT_SUCCESS(rc))
3169	{
3170	if (SelInfo.fFlags & DBGFSELINFO_FLAGS_REAL_MODE)
3171	rc = DBGCCmdHlpPrintf(pCmdHlp, "%04x RealM Bas=%04x Lim=%04x\n",
3172	Sel, (unsigned)SelInfo.GCPtrBase, (unsigned)SelInfo.cbLimit);
3173	else if ( fAll
3174	\|\| fSingle
3175	\|\| SelInfo.u.Raw.Gen.u1Present)
3176	{
3177	if (enmMode == CPUMMODE_PROTECTED)
3178	rc = dbgcCmdDumpDTWorker32(pCmdHlp, &SelInfo.u.Raw, Sel, !!(SelInfo.fFlags & DBGFSELINFO_FLAGS_HYPER));
3179	else
3180	{
3181	bool fDblSkip = false;
3182	rc = dbgcCmdDumpDTWorker64(pCmdHlp, &SelInfo.u.Raw64, Sel, !!(SelInfo.fFlags & DBGFSELINFO_FLAGS_HYPER), &fDblSkip);
3183	if (fDblSkip)
3184	Sel += 4;
3185	}
3186	}
3187	}
3188	else
3189	{
3190	rc = DBGCCmdHlpPrintf(pCmdHlp, "%04x %Rrc\n", Sel, rc);
3191	if (!fAll)
3192	return rc;
3193	}
3194	if (RT_FAILURE(rc))
3195	return rc;
3196
3197	/* next */
3198	Sel += 8;
3199	}
3200	}
3201	else
3202	DBGCCmdHlpPrintf(pCmdHlp, "error: %llx is out of bounds\n", u64);
3203	}
3204
3205	return VINF_SUCCESS;
3206	}
3207
3208
3209	/**
3210	* @callback_method_impl{FNDBGCCMD, The 'di' and 'dia' commands.}
3211	*/
3212	static DECLCALLBACK(int) dbgcCmdDumpIDT(PCDBGCCMD pCmd, PDBGCCMDHLP pCmdHlp, PUVM pUVM, PCDBGCVAR paArgs, unsigned cArgs)
3213	{
3214	/*
3215	* Validate input.
3216	*/
3217	DBGC_CMDHLP_REQ_UVM_RET(pCmdHlp, pCmd, pUVM);
3218
3219	/*
3220	* Establish some stuff like the current IDTR and CPU mode,
3221	* and fix a default parameter.
3222	*/
3223	PDBGC pDbgc = DBGC_CMDHLP2DBGC(pCmdHlp);
3224	PVMCPU pVCpu = VMMR3GetCpuByIdU(pUVM, pDbgc->idCpu);
3225	uint16_t cbLimit;
3226	RTGCUINTPTR GCPtrBase = CPUMGetGuestIDTR(pVCpu, &cbLimit);
3227	CPUMMODE enmMode = CPUMGetGuestMode(pVCpu);
3228	unsigned cbEntry;
3229	switch (enmMode)
3230	{
3231	case CPUMMODE_REAL: cbEntry = sizeof(RTFAR16); break;
3232	case CPUMMODE_PROTECTED: cbEntry = sizeof(X86DESC); break;
3233	case CPUMMODE_LONG: cbEntry = sizeof(X86DESC64); break;
3234	default:
3235	return DBGCCmdHlpPrintf(pCmdHlp, "error: Invalid CPU mode %d.\n", enmMode);
3236	}
3237
3238	bool fAll = pCmd->pszCmd[2] == 'a';
3239	DBGCVAR Var;
3240	if (!cArgs)
3241	{
3242	cArgs = 1;
3243	paArgs = &Var;
3244	Var.enmType = DBGCVAR_TYPE_NUMBER;
3245	Var.u.u64Number = 0;
3246	Var.enmRangeType = DBGCVAR_RANGE_ELEMENTS;
3247	Var.u64Range = 256;
3248	}
3249
3250	/*
3251	* Process the arguments.
3252	*/
3253	for (unsigned i = 0; i < cArgs; i++)
3254	{
3255	DBGC_CMDHLP_ASSERT_PARSER_RET(pCmdHlp, pCmd, i, paArgs[i].enmType == DBGCVAR_TYPE_NUMBER);
3256	if (paArgs[i].u.u64Number < 256)
3257	{
3258	RTGCUINTPTR iInt = (RTGCUINTPTR)paArgs[i].u.u64Number;
3259	unsigned cInts = paArgs[i].enmRangeType != DBGCVAR_RANGE_NONE
3260	? paArgs[i].u64Range
3261	: 1;
3262	bool fSingle = cInts == 1;
3263	while ( cInts-- > 0
3264	&& iInt < 256)
3265	{
3266	/*
3267	* Try read it.
3268	*/
3269	union
3270	{
3271	RTFAR16 Real;
3272	X86DESC Prot;
3273	X86DESC64 Long;
3274	} u;
3275	if (iInt * cbEntry + (cbEntry - 1) > cbLimit)
3276	{
3277	DBGCCmdHlpPrintf(pCmdHlp, "%04x not within the IDT\n", (unsigned)iInt);
3278	if (!fAll && !fSingle)
3279	return VINF_SUCCESS;
3280	}
3281	DBGCVAR AddrVar;
3282	AddrVar.enmType = DBGCVAR_TYPE_GC_FLAT;
3283	AddrVar.u.GCFlat = GCPtrBase + iInt * cbEntry;
3284	AddrVar.enmRangeType = DBGCVAR_RANGE_NONE;
3285	int rc = pCmdHlp->pfnMemRead(pCmdHlp, &u, cbEntry, &AddrVar, NULL);
3286	if (RT_FAILURE(rc))
3287	return pCmdHlp->pfnVBoxError(pCmdHlp, rc, "Reading IDT entry %#04x.\n", (unsigned)iInt);
3288
3289	/*
3290	* Display it.
3291	*/
3292	switch (enmMode)
3293	{
3294	case CPUMMODE_REAL:
3295	rc = DBGCCmdHlpPrintf(pCmdHlp, "%04x %RTfp16\n", (unsigned)iInt, u.Real);
3296	/** @todo resolve 16:16 IDTE to a symbol */
3297	break;
3298	case CPUMMODE_PROTECTED:
3299	if (fAll \|\| fSingle \|\| u.Prot.Gen.u1Present)
3300	rc = dbgcCmdDumpDTWorker32(pCmdHlp, &u.Prot, iInt, false);
3301	break;
3302	case CPUMMODE_LONG:
3303	if (fAll \|\| fSingle \|\| u.Long.Gen.u1Present)
3304	rc = dbgcCmdDumpDTWorker64(pCmdHlp, &u.Long, iInt, false, NULL);
3305	break;
3306	default: break; /* to shut up gcc */
3307	}
3308	if (RT_FAILURE(rc))
3309	return rc;
3310
3311	/* next */
3312	iInt++;
3313	}
3314	}
3315	else
3316	DBGCCmdHlpPrintf(pCmdHlp, "error: %llx is out of bounds (max 256)\n", paArgs[i].u.u64Number);
3317	}
3318
3319	return VINF_SUCCESS;
3320	}
3321
3322
3323	/**
3324	* @callback_method_impl{FNDBGCCMD,
3325	* The 'da'\, 'dq'\, 'dqs'\, 'dd'\, 'dds'\, 'dw'\, 'db'\, 'dp'\, 'dps'\,
3326	* and 'du' commands.}
3327	*/
3328	static DECLCALLBACK(int) dbgcCmdDumpMem(PCDBGCCMD pCmd, PDBGCCMDHLP pCmdHlp, PUVM pUVM, PCDBGCVAR paArgs, unsigned cArgs)
3329	{
3330	PDBGC pDbgc = DBGC_CMDHLP2DBGC(pCmdHlp);
3331
3332	/*
3333	* Validate input.
3334	*/
3335	DBGC_CMDHLP_ASSERT_PARSER_RET(pCmdHlp, pCmd, 0, cArgs <= 1);
3336	if (cArgs == 1)
3337	DBGC_CMDHLP_ASSERT_PARSER_RET(pCmdHlp, pCmd, 0, DBGCVAR_ISPOINTER(paArgs[0].enmType));
3338	DBGC_CMDHLP_REQ_UVM_RET(pCmdHlp, pCmd, pUVM);
3339
3340	#define DBGC_DUMP_MEM_F_ASCII RT_BIT_32(31)
3341	#define DBGC_DUMP_MEM_F_UNICODE RT_BIT_32(30)
3342	#define DBGC_DUMP_MEM_F_FAR RT_BIT_32(29)
3343	#define DBGC_DUMP_MEM_F_SYMBOLS RT_BIT_32(28)
3344	#define DBGC_DUMP_MEM_F_SIZE UINT32_C(0x0000ffff)
3345
3346	/*
3347	* Figure out the element size.
3348	*/
3349	unsigned cbElement;
3350	bool fAscii = false;
3351	bool fUnicode = false;
3352	bool fFar = false;
3353	bool fSymbols = pCmd->pszCmd[1] && pCmd->pszCmd[2] == 's';
3354	switch (pCmd->pszCmd[1])
3355	{
3356	default:
3357	case 'b': cbElement = 1; break;
3358	case 'w': cbElement = 2; break;
3359	case 'd': cbElement = 4; break;
3360	case 'q': cbElement = 8; break;
3361	case 'a':
3362	cbElement = 1;
3363	fAscii = true;
3364	break;
3365	case 'F':
3366	cbElement = 4;
3367	fFar = true;
3368	break;
3369	case 'p':
3370	cbElement = DBGFR3CpuIsIn64BitCode(pUVM, pDbgc->idCpu) ? 8 : 4;
3371	break;
3372	case 'u':
3373	cbElement = 2;
3374	fUnicode = true;
3375	break;
3376	case '\0':
3377	fAscii = RT_BOOL(pDbgc->cbDumpElement & DBGC_DUMP_MEM_F_ASCII);
3378	fSymbols = RT_BOOL(pDbgc->cbDumpElement & DBGC_DUMP_MEM_F_SYMBOLS);
3379	fUnicode = RT_BOOL(pDbgc->cbDumpElement & DBGC_DUMP_MEM_F_UNICODE);
3380	fFar = RT_BOOL(pDbgc->cbDumpElement & DBGC_DUMP_MEM_F_FAR);
3381	cbElement = pDbgc->cbDumpElement & DBGC_DUMP_MEM_F_SIZE;
3382	if (!cbElement)
3383	cbElement = 1;
3384	break;
3385	}
3386	uint32_t const cbDumpElement = cbElement
3387	\| (fSymbols ? DBGC_DUMP_MEM_F_SYMBOLS : 0)
3388	\| (fFar ? DBGC_DUMP_MEM_F_FAR : 0)
3389	\| (fUnicode ? DBGC_DUMP_MEM_F_UNICODE : 0)
3390	\| (fAscii ? DBGC_DUMP_MEM_F_ASCII : 0);
3391	pDbgc->cbDumpElement = cbDumpElement;
3392
3393	/*
3394	* Find address.
3395	*/
3396	if (!cArgs)
3397	pDbgc->DumpPos.enmRangeType = DBGCVAR_RANGE_NONE;
3398	else
3399	pDbgc->DumpPos = paArgs[0];
3400
3401	/*
3402	* Range.
3403	*/
3404	switch (pDbgc->DumpPos.enmRangeType)
3405	{
3406	case DBGCVAR_RANGE_NONE:
3407	pDbgc->DumpPos.enmRangeType = DBGCVAR_RANGE_BYTES;
3408	pDbgc->DumpPos.u64Range = 0x60;
3409	break;
3410
3411	case DBGCVAR_RANGE_ELEMENTS:
3412	if (pDbgc->DumpPos.u64Range > 2048)
3413	return DBGCCmdHlpPrintf(pCmdHlp, "error: Too many elements requested. Max is 2048 elements.\n");
3414	pDbgc->DumpPos.enmRangeType = DBGCVAR_RANGE_BYTES;
3415	pDbgc->DumpPos.u64Range = (cbElement ? cbElement : 1) * pDbgc->DumpPos.u64Range;
3416	break;
3417
3418	case DBGCVAR_RANGE_BYTES:
3419	if (pDbgc->DumpPos.u64Range > 65536)
3420	return DBGCCmdHlpPrintf(pCmdHlp, "error: The requested range is too big. Max is 64KB.\n");
3421	break;
3422
3423	default:
3424	return DBGCCmdHlpPrintf(pCmdHlp, "internal error: Unknown range type %d.\n", pDbgc->DumpPos.enmRangeType);
3425	}
3426
3427	pDbgc->pLastPos = &pDbgc->DumpPos;
3428
3429	/*
3430	* Do the dumping.
3431	*/
3432	int cbLeft = (int)pDbgc->DumpPos.u64Range;
3433	uint8_t u16Prev = '\0';
3434	for (;;)
3435	{
3436	/*
3437	* Read memory.
3438	*/
3439	char achBuffer[16];
3440	size_t cbReq = RT_MIN((int)sizeof(achBuffer), cbLeft);
3441	size_t cb = RT_MIN((int)sizeof(achBuffer), cbLeft);
3442	int rc = pCmdHlp->pfnMemRead(pCmdHlp, &achBuffer, cbReq, &pDbgc->DumpPos, &cb);
3443	if (RT_FAILURE(rc))
3444	{
3445	if (u16Prev && u16Prev != '\n')
3446	DBGCCmdHlpPrintf(pCmdHlp, "\n");
3447	return pCmdHlp->pfnVBoxError(pCmdHlp, rc, "Reading memory at %DV.\n", &pDbgc->DumpPos);
3448	}
3449
3450	/*
3451	* Display it.
3452	*/
3453	memset(&achBuffer[cb], 0, sizeof(achBuffer) - cb);
3454	if (!fAscii && !fUnicode)
3455	{
3456	DBGCCmdHlpPrintf(pCmdHlp, "%DV:", &pDbgc->DumpPos);
3457	unsigned i;
3458	for (i = 0; i < cb; i += cbElement)
3459	{
3460	const char *pszSpace = " ";
3461	if (cbElement <= 2 && i == 8)
3462	pszSpace = "-";
3463	switch (cbElement)
3464	{
3465	case 1:
3466	DBGCCmdHlpPrintf(pCmdHlp, "%s%02x", pszSpace, (uint8_t )&achBuffer[i]);
3467	break;
3468	case 2:
3469	DBGCCmdHlpPrintf(pCmdHlp, "%s%04x", pszSpace, (uint16_t )&achBuffer[i]);
3470	break;
3471	case 4:
3472	if (!fFar)
3473	DBGCCmdHlpPrintf(pCmdHlp, "%s%08x", pszSpace, (uint32_t )&achBuffer[i]);
3474	else
3475	DBGCCmdHlpPrintf(pCmdHlp, "%s%04x:%04x:",
3476	pszSpace, (uint16_t )&achBuffer[i + 2], (uint16_t )&achBuffer[i]);
3477	break;
3478	case 8:
3479	DBGCCmdHlpPrintf(pCmdHlp, "%s%016llx", pszSpace, (uint64_t )&achBuffer[i]);
3480	break;
3481	}
3482
3483	if (fSymbols)
3484	{
3485	/* Try lookup symbol for the above address. */
3486	DBGFADDRESS Addr;
3487	rc = VINF_SUCCESS;
3488	if (cbElement == 8)
3489	DBGFR3AddrFromFlat(pDbgc->pUVM, &Addr, (uint64_t )&achBuffer[i]);
3490	else if (!fFar)
3491	DBGFR3AddrFromFlat(pDbgc->pUVM, &Addr, (uint32_t )&achBuffer[i]);
3492	else
3493	rc = DBGFR3AddrFromSelOff(pDbgc->pUVM, pDbgc->idCpu, &Addr,
3494	(uint16_t )&achBuffer[i + 2], (uint16_t )&achBuffer[i]);
3495	if (RT_SUCCESS(rc))
3496	{
3497	RTINTPTR offDisp;
3498	RTDBGSYMBOL Symbol;
3499	rc = DBGFR3AsSymbolByAddr(pUVM, pDbgc->hDbgAs, &Addr, RTDBGSYMADDR_FLAGS_LESS_OR_EQUAL,
3500	&offDisp, &Symbol, NULL);
3501	if (RT_SUCCESS(rc))
3502	{
3503	if (!offDisp)
3504	rc = DBGCCmdHlpPrintf(pCmdHlp, " %s", Symbol.szName);
3505	else if (offDisp > 0)
3506	rc = DBGCCmdHlpPrintf(pCmdHlp, " %s + %RGv", Symbol.szName, offDisp);
3507	else
3508	rc = DBGCCmdHlpPrintf(pCmdHlp, " %s - %RGv", Symbol.szName, -offDisp);
3509	if (Symbol.cb > 0)
3510	rc = DBGCCmdHlpPrintf(pCmdHlp, " (LB %RGv)", Symbol.cb);
3511	}
3512	}
3513
3514	/* Next line prefix. */
3515	unsigned iNext = i + cbElement;
3516	if (iNext < cb)
3517	{
3518	DBGCVAR TmpPos = pDbgc->DumpPos;
3519	DBGCCmdHlpEval(pCmdHlp, &TmpPos, "(%Dv) + %x", &pDbgc->DumpPos, iNext);
3520	DBGCCmdHlpPrintf(pCmdHlp, "\n%DV:", &pDbgc->DumpPos);
3521	}
3522	}
3523	}
3524
3525	/* Chars column. */
3526	if (cbElement == 1)
3527	{
3528	while (i++ < sizeof(achBuffer))
3529	DBGCCmdHlpPrintf(pCmdHlp, " ");
3530	DBGCCmdHlpPrintf(pCmdHlp, " ");
3531	for (i = 0; i < cb; i += cbElement)
3532	{
3533	uint8_t u8 = (uint8_t )&achBuffer[i];
3534	if (RT_C_IS_PRINT(u8) && u8 < 127 && u8 >= 32)
3535	DBGCCmdHlpPrintf(pCmdHlp, "%c", u8);
3536	else
3537	DBGCCmdHlpPrintf(pCmdHlp, ".");
3538	}
3539	}
3540	rc = DBGCCmdHlpPrintf(pCmdHlp, "\n");
3541	}
3542	else
3543	{
3544	/*
3545	* We print up to the first zero and stop there.
3546	* Only printables + '\t' and '\n' are printed.
3547	*/
3548	if (!u16Prev)
3549	DBGCCmdHlpPrintf(pCmdHlp, "%DV:\n", &pDbgc->DumpPos);
3550	uint16_t u16 = '\0';
3551	unsigned i;
3552	for (i = 0; i < cb; i += cbElement)
3553	{
3554	u16Prev = u16;
3555	if (cbElement == 1)
3556	u16 = (uint8_t )&achBuffer[i];
3557	else
3558	u16 = (uint16_t )&achBuffer[i];
3559	if ( u16 < 127
3560	&& ( (RT_C_IS_PRINT(u16) && u16 >= 32)
3561	\|\| u16 == '\t'
3562	\|\| u16 == '\n'))
3563	DBGCCmdHlpPrintf(pCmdHlp, "%c", (int)u16);
3564	else if (!u16)
3565	break;
3566	else
3567	DBGCCmdHlpPrintf(pCmdHlp, "\\x%0x", cbElement 2, u16);
3568	}
3569	if (u16 == '\0')
3570	cb = cbLeft = i + 1;
3571	if (cbLeft - cb <= 0 && u16Prev != '\n')
3572	DBGCCmdHlpPrintf(pCmdHlp, "\n");
3573	}
3574
3575	/*
3576	* Advance
3577	*/
3578	cbLeft -= (int)cb;
3579	rc = DBGCCmdHlpEval(pCmdHlp, &pDbgc->DumpPos, "(%Dv) + %x", &pDbgc->DumpPos, cb);
3580	if (RT_FAILURE(rc))
3581	return pCmdHlp->pfnVBoxError(pCmdHlp, rc, "Expression: (%Dv) + %x\n", &pDbgc->DumpPos, cb);
3582	if (cbLeft <= 0)
3583	break;
3584	}
3585
3586	NOREF(pCmd);
3587	return VINF_SUCCESS;
3588	}
3589
3590
3591	/**
3592	* Best guess at which paging mode currently applies to the guest
3593	* paging structures.
3594	*
3595	* This have to come up with a decent answer even when the guest
3596	* is in non-paged protected mode or real mode.
3597	*
3598	* @returns cr3.
3599	* @param pDbgc The DBGC instance.
3600	* @param pfPAE Where to store the page address extension indicator.
3601	* @param pfLME Where to store the long mode enabled indicator.
3602	* @param pfPSE Where to store the page size extension indicator.
3603	* @param pfPGE Where to store the page global enabled indicator.
3604	* @param pfNXE Where to store the no-execution enabled indicator.
3605	*/
3606	static RTGCPHYS dbgcGetGuestPageMode(PDBGC pDbgc, bool pfPAE, bool pfLME, bool pfPSE, bool pfPGE, bool *pfNXE)
3607	{
3608	PVMCPU pVCpu = VMMR3GetCpuByIdU(pDbgc->pUVM, pDbgc->idCpu);
3609	RTGCUINTREG cr4 = CPUMGetGuestCR4(pVCpu);
3610	*pfPSE = !!(cr4 & X86_CR4_PSE);
3611	*pfPGE = !!(cr4 & X86_CR4_PGE);
3612	if (cr4 & X86_CR4_PAE)
3613	{
3614	*pfPSE = true;
3615	*pfPAE = true;
3616	}
3617	else
3618	*pfPAE = false;
3619
3620	*pfLME = CPUMGetGuestMode(pVCpu) == CPUMMODE_LONG;
3621	pfNXE = false; / GUEST64 GUESTNX */
3622	return CPUMGetGuestCR3(pVCpu);
3623	}
3624
3625
3626	/**
3627	* Determine the shadow paging mode.
3628	*
3629	* @returns cr3.
3630	* @param pDbgc The DBGC instance.
3631	* @param pfPAE Where to store the page address extension indicator.
3632	* @param pfLME Where to store the long mode enabled indicator.
3633	* @param pfPSE Where to store the page size extension indicator.
3634	* @param pfPGE Where to store the page global enabled indicator.
3635	* @param pfNXE Where to store the no-execution enabled indicator.
3636	*/
3637	static RTHCPHYS dbgcGetShadowPageMode(PDBGC pDbgc, bool pfPAE, bool pfLME, bool pfPSE, bool pfPGE, bool *pfNXE)
3638	{
3639	PVMCPU pVCpu = VMMR3GetCpuByIdU(pDbgc->pUVM, pDbgc->idCpu);
3640
3641	*pfPSE = true;
3642	*pfPGE = false;
3643	switch (PGMGetShadowMode(pVCpu))
3644	{
3645	default:
3646	case PGMMODE_32_BIT:
3647	pfPAE = pfLME = *pfNXE = false;
3648	break;
3649	case PGMMODE_PAE:
3650	pfLME = pfNXE = false;
3651	*pfPAE = true;
3652	break;
3653	case PGMMODE_PAE_NX:
3654	*pfLME = false;
3655	pfPAE = pfNXE = true;
3656	break;
3657	case PGMMODE_AMD64:
3658	*pfNXE = false;
3659	pfPAE = pfLME = true;
3660	break;
3661	case PGMMODE_AMD64_NX:
3662	pfPAE = pfLME = *pfNXE = true;
3663	break;
3664	}
3665	return PGMGetHyperCR3(pVCpu);
3666	}
3667
3668
3669	/**
3670	* @callback_method_impl{FNDBGCCMD,
3671	* The 'dpd'\, 'dpda'\, 'dpdb'\, 'dpdg' and 'dpdh' commands.}
3672	*/
3673	static DECLCALLBACK(int) dbgcCmdDumpPageDir(PCDBGCCMD pCmd, PDBGCCMDHLP pCmdHlp, PUVM pUVM, PCDBGCVAR paArgs, unsigned cArgs)
3674	{
3675	PDBGC pDbgc = DBGC_CMDHLP2DBGC(pCmdHlp);
3676
3677	/*
3678	* Validate input.
3679	*/
3680	DBGC_CMDHLP_ASSERT_PARSER_RET(pCmdHlp, pCmd, 0, cArgs <= 1);
3681	if (cArgs == 1 && pCmd->pszCmd[3] == 'a')
3682	DBGC_CMDHLP_ASSERT_PARSER_RET(pCmdHlp, pCmd, 0, DBGCVAR_ISPOINTER(paArgs[0].enmType));
3683	if (cArgs == 1 && pCmd->pszCmd[3] != 'a')
3684	DBGC_CMDHLP_ASSERT_PARSER_RET(pCmdHlp, pCmd, 0, paArgs[0].enmType == DBGCVAR_TYPE_NUMBER
3685	\|\| DBGCVAR_ISPOINTER(paArgs[0].enmType));
3686	DBGC_CMDHLP_REQ_UVM_RET(pCmdHlp, pCmd, pUVM);
3687
3688	/*
3689	* Guest or shadow page directories? Get the paging parameters.
3690	*/
3691	bool fGuest = pCmd->pszCmd[3] != 'h';
3692	if (!pCmd->pszCmd[3] \|\| pCmd->pszCmd[3] == 'a')
3693	fGuest = paArgs[0].enmType == DBGCVAR_TYPE_NUMBER
3694	? pDbgc->fRegCtxGuest
3695	: DBGCVAR_ISGCPOINTER(paArgs[0].enmType);
3696
3697	bool fPAE, fLME, fPSE, fPGE, fNXE;
3698	uint64_t cr3 = fGuest
3699	? dbgcGetGuestPageMode(pDbgc, &fPAE, &fLME, &fPSE, &fPGE, &fNXE)
3700	: dbgcGetShadowPageMode(pDbgc, &fPAE, &fLME, &fPSE, &fPGE, &fNXE);
3701	const unsigned cbEntry = fPAE ? sizeof(X86PTEPAE) : sizeof(X86PTE);
3702
3703	/*
3704	* Setup default argument if none was specified.
3705	* Fix address / index confusion.
3706	*/
3707	DBGCVAR VarDefault;
3708	if (!cArgs)
3709	{
3710	if (pCmd->pszCmd[3] == 'a')
3711	{
3712	if (fLME \|\| fPAE)
3713	return DBGCCmdHlpPrintf(pCmdHlp, "Default argument for 'dpda' hasn't been fully implemented yet. Try with an address or use one of the other commands.\n");
3714	if (fGuest)
3715	DBGCVAR_INIT_GC_PHYS(&VarDefault, cr3);
3716	else
3717	DBGCVAR_INIT_HC_PHYS(&VarDefault, cr3);
3718	}
3719	else
3720	DBGCVAR_INIT_GC_FLAT(&VarDefault, 0);
3721	paArgs = &VarDefault;
3722	cArgs = 1;
3723	}
3724	else if (paArgs[0].enmType == DBGCVAR_TYPE_NUMBER)
3725	{
3726	/* If it's a number (not an address), it's an index, so convert it to an address. */
3727	Assert(pCmd->pszCmd[3] != 'a');
3728	VarDefault = paArgs[0];
3729	if (fPAE)
3730	return DBGCCmdHlpPrintf(pCmdHlp, "PDE indexing is only implemented for 32-bit paging.\n");
3731	if (VarDefault.u.u64Number >= PAGE_SIZE / cbEntry)
3732	return DBGCCmdHlpPrintf(pCmdHlp, "PDE index is out of range [0..%d].\n", PAGE_SIZE / cbEntry - 1);
3733	VarDefault.u.u64Number <<= X86_PD_SHIFT;
3734	VarDefault.enmType = DBGCVAR_TYPE_GC_FLAT;
3735	paArgs = &VarDefault;
3736	}
3737
3738	/*
3739	* Locate the PDE to start displaying at.
3740	*
3741	* The 'dpda' command takes the address of a PDE, while the others are guest
3742	* virtual address which PDEs should be displayed. So, 'dpda' is rather simple
3743	* while the others require us to do all the tedious walking thru the paging
3744	* hierarchy to find the intended PDE.
3745	*/
3746	unsigned iEntry = ~0U; /* The page directory index. ~0U for 'dpta'. */
3747	DBGCVAR VarGCPtr = { NULL, }; /* The GC address corresponding to the current PDE (iEntry != ~0U). */
3748	DBGCVAR VarPDEAddr; /* The address of the current PDE. */
3749	unsigned cEntries; /* The number of entries to display. */
3750	unsigned cEntriesMax; /* The max number of entries to display. */
3751	int rc;
3752	if (pCmd->pszCmd[3] == 'a')
3753	{
3754	VarPDEAddr = paArgs[0];
3755	switch (VarPDEAddr.enmRangeType)
3756	{
3757	case DBGCVAR_RANGE_BYTES: cEntries = VarPDEAddr.u64Range / cbEntry; break;
3758	case DBGCVAR_RANGE_ELEMENTS: cEntries = VarPDEAddr.u64Range; break;
3759	default: cEntries = 10; break;
3760	}
3761	cEntriesMax = PAGE_SIZE / cbEntry;
3762	}
3763	else
3764	{
3765	/*
3766	* Determine the range.
3767	*/
3768	switch (paArgs[0].enmRangeType)
3769	{
3770	case DBGCVAR_RANGE_BYTES: cEntries = paArgs[0].u64Range / PAGE_SIZE; break;
3771	case DBGCVAR_RANGE_ELEMENTS: cEntries = paArgs[0].u64Range; break;
3772	default: cEntries = 10; break;
3773	}
3774
3775	/*
3776	* Normalize the input address, it must be a flat GC address.
3777	*/
3778	rc = DBGCCmdHlpEval(pCmdHlp, &VarGCPtr, "%%(%Dv)", &paArgs[0]);
3779	if (RT_FAILURE(rc))
3780	return DBGCCmdHlpVBoxError(pCmdHlp, rc, "%%(%Dv)", &paArgs[0]);
3781	if (VarGCPtr.enmType == DBGCVAR_TYPE_HC_FLAT)
3782	{
3783	VarGCPtr.u.GCFlat = (uintptr_t)VarGCPtr.u.pvHCFlat;
3784	VarGCPtr.enmType = DBGCVAR_TYPE_GC_FLAT;
3785	}
3786	if (fPAE)
3787	VarGCPtr.u.GCFlat &= ~(((RTGCPTR)1 << X86_PD_PAE_SHIFT) - 1);
3788	else
3789	VarGCPtr.u.GCFlat &= ~(((RTGCPTR)1 << X86_PD_SHIFT) - 1);
3790
3791	/*
3792	* Do the paging walk until we get to the page directory.
3793	*/
3794	DBGCVAR VarCur;
3795	if (fGuest)
3796	DBGCVAR_INIT_GC_PHYS(&VarCur, cr3);
3797	else
3798	DBGCVAR_INIT_HC_PHYS(&VarCur, cr3);
3799	if (fLME)
3800	{
3801	/* Page Map Level 4 Lookup. */
3802	/* Check if it's a valid address first? */
3803	VarCur.u.u64Number &= X86_PTE_PAE_PG_MASK;
3804	VarCur.u.u64Number += (((uint64_t)VarGCPtr.u.GCFlat >> X86_PML4_SHIFT) & X86_PML4_MASK) * sizeof(X86PML4E);
3805	X86PML4E Pml4e;
3806	rc = pCmdHlp->pfnMemRead(pCmdHlp, &Pml4e, sizeof(Pml4e), &VarCur, NULL);
3807	if (RT_FAILURE(rc))
3808	return DBGCCmdHlpVBoxError(pCmdHlp, rc, "Reading PML4E memory at %DV.\n", &VarCur);
3809	if (!Pml4e.n.u1Present)
3810	return DBGCCmdHlpPrintf(pCmdHlp, "Page directory pointer table is not present for %Dv.\n", &VarGCPtr);
3811
3812	VarCur.u.u64Number = Pml4e.u & X86_PML4E_PG_MASK;
3813	Assert(fPAE);
3814	}
3815	if (fPAE)
3816	{
3817	/* Page directory pointer table. */
3818	X86PDPE Pdpe;
3819	VarCur.u.u64Number += ((VarGCPtr.u.GCFlat >> X86_PDPT_SHIFT) & X86_PDPT_MASK_PAE) * sizeof(Pdpe);
3820	rc = pCmdHlp->pfnMemRead(pCmdHlp, &Pdpe, sizeof(Pdpe), &VarCur, NULL);
3821	if (RT_FAILURE(rc))
3822	return DBGCCmdHlpVBoxError(pCmdHlp, rc, "Reading PDPE memory at %DV.\n", &VarCur);
3823	if (!Pdpe.n.u1Present)
3824	return DBGCCmdHlpPrintf(pCmdHlp, "Page directory is not present for %Dv.\n", &VarGCPtr);
3825
3826	iEntry = (VarGCPtr.u.GCFlat >> X86_PD_PAE_SHIFT) & X86_PD_PAE_MASK;
3827	VarPDEAddr = VarCur;
3828	VarPDEAddr.u.u64Number = Pdpe.u & X86_PDPE_PG_MASK;
3829	VarPDEAddr.u.u64Number += iEntry * sizeof(X86PDEPAE);
3830	}
3831	else
3832	{
3833	/* 32-bit legacy - CR3 == page directory. */
3834	iEntry = (VarGCPtr.u.GCFlat >> X86_PD_SHIFT) & X86_PD_MASK;
3835	VarPDEAddr = VarCur;
3836	VarPDEAddr.u.u64Number += iEntry * sizeof(X86PDE);
3837	}
3838	cEntriesMax = (PAGE_SIZE - iEntry) / cbEntry;
3839	}
3840
3841	/* adjust cEntries */
3842	cEntries = RT_MAX(1, cEntries);
3843	cEntries = RT_MIN(cEntries, cEntriesMax);
3844
3845	/*
3846	* The display loop.
3847	*/
3848	DBGCCmdHlpPrintf(pCmdHlp, iEntry != ~0U ? "%DV (index %#x):\n" : "%DV:\n",
3849	&VarPDEAddr, iEntry);
3850	do
3851	{
3852	/*
3853	* Read.
3854	*/
3855	X86PDEPAE Pde;
3856	Pde.u = 0;
3857	rc = pCmdHlp->pfnMemRead(pCmdHlp, &Pde, cbEntry, &VarPDEAddr, NULL);
3858	if (RT_FAILURE(rc))
3859	return pCmdHlp->pfnVBoxError(pCmdHlp, rc, "Reading PDE memory at %DV.\n", &VarPDEAddr);
3860
3861	/*
3862	* Display.
3863	*/
3864	if (iEntry != ~0U)
3865	{
3866	DBGCCmdHlpPrintf(pCmdHlp, "%03x %DV: ", iEntry, &VarGCPtr);
3867	iEntry++;
3868	}
3869	if (fPSE && Pde.b.u1Size)
3870	DBGCCmdHlpPrintf(pCmdHlp,
3871	fPAE
3872	? "%016llx big phys=%016llx %s %s %s %s %s avl=%02x %s %s %s %s %s"
3873	: "%08llx big phys=%08llx %s %s %s %s %s avl=%02x %s %s %s %s %s",
3874	Pde.u,
3875	Pde.u & X86_PDE_PAE_PG_MASK,
3876	Pde.b.u1Present ? "p " : "np",
3877	Pde.b.u1Write ? "w" : "r",
3878	Pde.b.u1User ? "u" : "s",
3879	Pde.b.u1Accessed ? "a " : "na",
3880	Pde.b.u1Dirty ? "d " : "nd",
3881	Pde.b.u3Available,
3882	Pde.b.u1Global ? (fPGE ? "g" : "G") : " ",
3883	Pde.b.u1WriteThru ? "pwt" : " ",
3884	Pde.b.u1CacheDisable ? "pcd" : " ",
3885	Pde.b.u1PAT ? "pat" : "",
3886	Pde.b.u1NoExecute ? (fNXE ? "nx" : "NX") : " ");
3887	else
3888	DBGCCmdHlpPrintf(pCmdHlp,
3889	fPAE
3890	? "%016llx 4kb phys=%016llx %s %s %s %s %s avl=%02x %s %s %s %s"
3891	: "%08llx 4kb phys=%08llx %s %s %s %s %s avl=%02x %s %s %s %s",
3892	Pde.u,
3893	Pde.u & X86_PDE_PAE_PG_MASK,
3894	Pde.n.u1Present ? "p " : "np",
3895	Pde.n.u1Write ? "w" : "r",
3896	Pde.n.u1User ? "u" : "s",
3897	Pde.n.u1Accessed ? "a " : "na",
3898	Pde.u & RT_BIT(6) ? "6 " : " ",
3899	Pde.n.u3Available,
3900	Pde.u & RT_BIT(8) ? "8" : " ",
3901	Pde.n.u1WriteThru ? "pwt" : " ",
3902	Pde.n.u1CacheDisable ? "pcd" : " ",
3903	Pde.u & RT_BIT(7) ? "7" : "",
3904	Pde.n.u1NoExecute ? (fNXE ? "nx" : "NX") : " ");
3905	if (Pde.u & UINT64_C(0x7fff000000000000))
3906	DBGCCmdHlpPrintf(pCmdHlp, " weird=%RX64", (Pde.u & UINT64_C(0x7fff000000000000)));
3907	rc = DBGCCmdHlpPrintf(pCmdHlp, "\n");
3908	if (RT_FAILURE(rc))
3909	return rc;
3910
3911	/*
3912	* Advance.
3913	*/
3914	VarPDEAddr.u.u64Number += cbEntry;
3915	if (iEntry != ~0U)
3916	VarGCPtr.u.GCFlat += fPAE ? RT_BIT_32(X86_PD_PAE_SHIFT) : RT_BIT_32(X86_PD_SHIFT);
3917	} while (cEntries-- > 0);
3918
3919	return VINF_SUCCESS;
3920	}
3921
3922
3923	/**
3924	* @callback_method_impl{FNDBGCCMD, The 'dpdb' command.}
3925	*/
3926	static DECLCALLBACK(int) dbgcCmdDumpPageDirBoth(PCDBGCCMD pCmd, PDBGCCMDHLP pCmdHlp, PUVM pUVM, PCDBGCVAR paArgs, unsigned cArgs)
3927	{
3928	DBGC_CMDHLP_REQ_UVM_RET(pCmdHlp, pCmd, pUVM);
3929	int rc1 = pCmdHlp->pfnExec(pCmdHlp, "dpdg %DV", &paArgs[0]);
3930	int rc2 = pCmdHlp->pfnExec(pCmdHlp, "dpdh %DV", &paArgs[0]);
3931	if (RT_FAILURE(rc1))
3932	return rc1;
3933	NOREF(pCmd); NOREF(paArgs); NOREF(cArgs);
3934	return rc2;
3935	}
3936
3937
3938	/**
3939	* @callback_method_impl{FNDBGCCMD, The 'dph*' commands and main part of 'm'.}
3940	*/
3941	static DECLCALLBACK(int) dbgcCmdDumpPageHierarchy(PCDBGCCMD pCmd, PDBGCCMDHLP pCmdHlp, PUVM pUVM, PCDBGCVAR paArgs, unsigned cArgs)
3942	{
3943	PDBGC pDbgc = DBGC_CMDHLP2DBGC(pCmdHlp);
3944	DBGC_CMDHLP_REQ_UVM_RET(pCmdHlp, pCmd, pUVM);
3945
3946	/*
3947	* Figure the context and base flags.
3948	*/
3949	uint32_t fFlags = DBGFPGDMP_FLAGS_PAGE_INFO \| DBGFPGDMP_FLAGS_PRINT_CR3;
3950	if (pCmd->pszCmd[0] == 'm')
3951	fFlags \|= DBGFPGDMP_FLAGS_GUEST \| DBGFPGDMP_FLAGS_SHADOW;
3952	else if (pCmd->pszCmd[3] == '\0')
3953	fFlags \|= pDbgc->fRegCtxGuest ? DBGFPGDMP_FLAGS_GUEST : DBGFPGDMP_FLAGS_SHADOW;
3954	else if (pCmd->pszCmd[3] == 'g')
3955	fFlags \|= DBGFPGDMP_FLAGS_GUEST;
3956	else if (pCmd->pszCmd[3] == 'h')
3957	fFlags \|= DBGFPGDMP_FLAGS_SHADOW;
3958	else
3959	AssertFailed();
3960
3961	if (pDbgc->cPagingHierarchyDumps == 0)
3962	fFlags \|= DBGFPGDMP_FLAGS_HEADER;
3963	pDbgc->cPagingHierarchyDumps = (pDbgc->cPagingHierarchyDumps + 1) % 42;
3964
3965	/*
3966	* Get the range.
3967	*/
3968	PCDBGCVAR pRange = cArgs > 0 ? &paArgs[0] : pDbgc->pLastPos;
3969	RTGCPTR GCPtrFirst = NIL_RTGCPTR;
3970	int rc = DBGCCmdHlpVarToFlatAddr(pCmdHlp, pRange, &GCPtrFirst);
3971	if (RT_FAILURE(rc))
3972	return DBGCCmdHlpFail(pCmdHlp, pCmd, "Failed to convert %DV to a flat address: %Rrc", pRange, rc);
3973
3974	uint64_t cbRange;
3975	rc = DBGCCmdHlpVarGetRange(pCmdHlp, pRange, PAGE_SIZE, PAGE_SIZE * 8, &cbRange);
3976	if (RT_FAILURE(rc))
3977	return DBGCCmdHlpFail(pCmdHlp, pCmd, "Failed to obtain the range of %DV: %Rrc", pRange, rc);
3978
3979	RTGCPTR GCPtrLast = RTGCPTR_MAX - GCPtrFirst;
3980	if (cbRange >= GCPtrLast)
3981	GCPtrLast = RTGCPTR_MAX;
3982	else if (!cbRange)
3983	GCPtrLast = GCPtrFirst;
3984	else
3985	GCPtrLast = GCPtrFirst + cbRange - 1;
3986
3987	/*
3988	* Do we have a CR3?
3989	*/
3990	uint64_t cr3 = 0;
3991	if (cArgs > 1)
3992	{
3993	if ((fFlags & (DBGFPGDMP_FLAGS_GUEST \| DBGFPGDMP_FLAGS_SHADOW)) == (DBGFPGDMP_FLAGS_GUEST \| DBGFPGDMP_FLAGS_SHADOW))
3994	return DBGCCmdHlpFail(pCmdHlp, pCmd, "No CR3 or mode arguments when dumping both context, please.");
3995	if (paArgs[1].enmType != DBGCVAR_TYPE_NUMBER)
3996	return DBGCCmdHlpFail(pCmdHlp, pCmd, "The CR3 argument is not a number: %DV", &paArgs[1]);
3997	cr3 = paArgs[1].u.u64Number;
3998	}
3999	else
4000	fFlags \|= DBGFPGDMP_FLAGS_CURRENT_CR3;
4001
4002	/*
4003	* Do we have a mode?
4004	*/
4005	if (cArgs > 2)
4006	{
4007	if (paArgs[2].enmType != DBGCVAR_TYPE_STRING)
4008	return DBGCCmdHlpFail(pCmdHlp, pCmd, "The mode argument is not a string: %DV", &paArgs[2]);
4009	static const struct MODETOFLAGS
4010	{
4011	const char *pszName;
4012	uint32_t fFlags;
4013	} s_aModeToFlags[] =
4014	{
4015	{ "ept", DBGFPGDMP_FLAGS_EPT },
4016	{ "legacy", 0 },
4017	{ "legacy-np", DBGFPGDMP_FLAGS_NP },
4018	{ "pse", DBGFPGDMP_FLAGS_PSE },
4019	{ "pse-np", DBGFPGDMP_FLAGS_PSE \| DBGFPGDMP_FLAGS_NP },
4020	{ "pae", DBGFPGDMP_FLAGS_PSE \| DBGFPGDMP_FLAGS_PAE },
4021	{ "pae-np", DBGFPGDMP_FLAGS_PSE \| DBGFPGDMP_FLAGS_PAE \| DBGFPGDMP_FLAGS_NP },
4022	{ "pae-nx", DBGFPGDMP_FLAGS_PSE \| DBGFPGDMP_FLAGS_PAE \| DBGFPGDMP_FLAGS_NXE },
4023	{ "pae-nx-np", DBGFPGDMP_FLAGS_PSE \| DBGFPGDMP_FLAGS_PAE \| DBGFPGDMP_FLAGS_NXE \| DBGFPGDMP_FLAGS_NP },
4024	{ "long", DBGFPGDMP_FLAGS_PSE \| DBGFPGDMP_FLAGS_PAE \| DBGFPGDMP_FLAGS_LME },
4025	{ "long-np", DBGFPGDMP_FLAGS_PSE \| DBGFPGDMP_FLAGS_PAE \| DBGFPGDMP_FLAGS_LME \| DBGFPGDMP_FLAGS_NP },
4026	{ "long-nx", DBGFPGDMP_FLAGS_PSE \| DBGFPGDMP_FLAGS_PAE \| DBGFPGDMP_FLAGS_LME \| DBGFPGDMP_FLAGS_NXE },
4027	{ "long-nx-np", DBGFPGDMP_FLAGS_PSE \| DBGFPGDMP_FLAGS_PAE \| DBGFPGDMP_FLAGS_LME \| DBGFPGDMP_FLAGS_NXE \| DBGFPGDMP_FLAGS_NP }
4028	};
4029	int i = RT_ELEMENTS(s_aModeToFlags);
4030	while (i-- > 0)
4031	if (!strcmp(s_aModeToFlags[i].pszName, paArgs[2].u.pszString))
4032	{
4033	fFlags \|= s_aModeToFlags[i].fFlags;
4034	break;
4035	}
4036	if (i < 0)
4037	return DBGCCmdHlpFail(pCmdHlp, pCmd, "Unknown mode: \"%s\"", paArgs[2].u.pszString);
4038	}
4039	else
4040	fFlags \|= DBGFPGDMP_FLAGS_CURRENT_MODE;
4041
4042	/*
4043	* Call the worker.
4044	*/
4045	rc = DBGFR3PagingDumpEx(pUVM, pDbgc->idCpu, fFlags, cr3, GCPtrFirst, GCPtrLast, 99 /cMaxDepth/,
4046	DBGCCmdHlpGetDbgfOutputHlp(pCmdHlp));
4047	if (RT_FAILURE(rc))
4048	return DBGCCmdHlpFail(pCmdHlp, pCmd, "DBGFR3PagingDumpEx: %Rrc\n", rc);
4049	return VINF_SUCCESS;
4050	}
4051
4052
4053
4054	/**
4055	* @callback_method_impl{FNDBGCCMD, The 'dpg*' commands.}
4056	*/
4057	static DECLCALLBACK(int) dbgcCmdDumpPageTable(PCDBGCCMD pCmd, PDBGCCMDHLP pCmdHlp, PUVM pUVM, PCDBGCVAR paArgs, unsigned cArgs)
4058	{
4059	PDBGC pDbgc = DBGC_CMDHLP2DBGC(pCmdHlp);
4060
4061	/*
4062	* Validate input.
4063	*/
4064	DBGC_CMDHLP_ASSERT_PARSER_RET(pCmdHlp, pCmd, 0, cArgs == 1);
4065	if (pCmd->pszCmd[3] == 'a')
4066	DBGC_CMDHLP_ASSERT_PARSER_RET(pCmdHlp, pCmd, 0, DBGCVAR_ISPOINTER(paArgs[0].enmType));
4067	else
4068	DBGC_CMDHLP_ASSERT_PARSER_RET(pCmdHlp, pCmd, 0, paArgs[0].enmType == DBGCVAR_TYPE_NUMBER
4069	\|\| DBGCVAR_ISPOINTER(paArgs[0].enmType));
4070	DBGC_CMDHLP_REQ_UVM_RET(pCmdHlp, pCmd, pUVM);
4071
4072	/*
4073	* Guest or shadow page tables? Get the paging parameters.
4074	*/
4075	bool fGuest = pCmd->pszCmd[3] != 'h';
4076	if (!pCmd->pszCmd[3] \|\| pCmd->pszCmd[3] == 'a')
4077	fGuest = paArgs[0].enmType == DBGCVAR_TYPE_NUMBER
4078	? pDbgc->fRegCtxGuest
4079	: DBGCVAR_ISGCPOINTER(paArgs[0].enmType);
4080
4081	bool fPAE, fLME, fPSE, fPGE, fNXE;
4082	uint64_t cr3 = fGuest
4083	? dbgcGetGuestPageMode(pDbgc, &fPAE, &fLME, &fPSE, &fPGE, &fNXE)
4084	: dbgcGetShadowPageMode(pDbgc, &fPAE, &fLME, &fPSE, &fPGE, &fNXE);
4085	const unsigned cbEntry = fPAE ? sizeof(X86PTEPAE) : sizeof(X86PTE);
4086
4087	/*
4088	* Locate the PTE to start displaying at.
4089	*
4090	* The 'dpta' command takes the address of a PTE, while the others are guest
4091	* virtual address which PTEs should be displayed. So, 'pdta' is rather simple
4092	* while the others require us to do all the tedious walking thru the paging
4093	* hierarchy to find the intended PTE.
4094	*/
4095	unsigned iEntry = ~0U; /* The page table index. ~0U for 'dpta'. */
4096	DBGCVAR VarGCPtr; /* The GC address corresponding to the current PTE (iEntry != ~0U). */
4097	DBGCVAR VarPTEAddr; /* The address of the current PTE. */
4098	unsigned cEntries; /* The number of entries to display. */
4099	unsigned cEntriesMax; /* The max number of entries to display. */
4100	int rc;
4101	if (pCmd->pszCmd[3] == 'a')
4102	{
4103	VarPTEAddr = paArgs[0];
4104	switch (VarPTEAddr.enmRangeType)
4105	{
4106	case DBGCVAR_RANGE_BYTES: cEntries = VarPTEAddr.u64Range / cbEntry; break;
4107	case DBGCVAR_RANGE_ELEMENTS: cEntries = VarPTEAddr.u64Range; break;
4108	default: cEntries = 10; break;
4109	}
4110	cEntriesMax = PAGE_SIZE / cbEntry;
4111	}
4112	else
4113	{
4114	/*
4115	* Determine the range.
4116	*/
4117	switch (paArgs[0].enmRangeType)
4118	{
4119	case DBGCVAR_RANGE_BYTES: cEntries = paArgs[0].u64Range / PAGE_SIZE; break