Windbg emulation plugin
Switch branches/tags
Clone or download
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
include
libs
pegasus
screenshot
test
LICENSE
README.md
pegasus.sln

README.md

pegasus - Windbg extension DLL for emulation

Build Support Support

demo

commands

0:000> .load pegasus.dll
*****************************************************
*                                                   *
*         PEGASUS - Windbg emulation plugin         *
*                                                   *
*****************************************************

0:000> !attach -?
; 0:000> !attach command attachs the current target application to the emulator.

0:000> !detach -?
; 0:000> !detach command detachs the current target application to the emulator.

0:000> !trace -?
; !trace [/so] [/bp ]
;  /bp - break point. (space-delimited)
;  /so - step over.
; 0:000> !trace command executes a single instruction.

0:000> !steps -?
; 0:000> !steps command displays the trace step.

0:000> !ddvm -?
0:000> !dbvm -?
; !dbvm [/a ] [/l ]
;  /a  - address (space-delimited)
;  /l  - length (space-delimited)
; 0:000> !dbvm command displays the contents of memory in the given range.

0:000> !regs -?
; 0:000> !reg command displays current registers.

chae - malware researcher and analyst