{"id":13419926,"url":"https://github.com/swwwolf/wdbgark","last_synced_at":"2025-03-15T06:30:50.898Z","repository":{"id":23626582,"uuid":"26996193","full_name":"swwwolf/wdbgark","owner":"swwwolf","description":"WinDBG Anti-RootKit Extension","archived":false,"fork":false,"pushed_at":"2020-07-29T11:42:26.000Z","size":3080,"stargazers_count":611,"open_issues_count":1,"forks_count":178,"subscribers_count":62,"default_branch":"master","last_synced_at":"2024-07-31T22:52:42.864Z","etag":null,"topics":["anomaly-detection","anti-rootkit","c-plus-plus","crash-dump","debugging-tool","driver","forensic-analysis","kernel-mode","malware","malware-analysis","malware-research","memory-forensics","sww","swwwolf","user-mode","visual-studio","wdbgark","windbg","windbg-extension","windows"],"latest_commit_sha":null,"homepage":"https://sww-it.ru","language":"C++","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/swwwolf.png","metadata":{"files":{"readme":"README.html","changelog":null,"contributing":null,"funding":null,"license":"COPYING","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2014-11-22T10:53:00.000Z","updated_at":"2024-07-17T13:31:35.000Z","dependencies_parsed_at":"2022-08-07T11:00:40.495Z","dependency_job_id":null,"html_url":"https://github.com/swwwolf/wdbgark","commit_stats":null,"previous_names":[],"tags_count":6,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/swwwolf%2Fwdbgark","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/swwwolf%2Fwdbgark/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/swwwolf%2Fwdbgark/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/swwwolf%2Fwdbgark/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/swwwolf","download_url":"https://codeload.github.com/swwwolf/wdbgark/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":243694817,"owners_count":20332619,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["anomaly-detection","anti-rootkit","c-plus-plus","crash-dump","debugging-tool","driver","forensic-analysis","kernel-mode","malware","malware-analysis","malware-research","memory-forensics","sww","swwwolf","user-mode","visual-studio","wdbgark","windbg","windbg-extension","windows"],"created_at":"2024-07-30T22:01:22.972Z","updated_at":"2025-03-15T06:30:50.892Z","avatar_url":"https://github.com/swwwolf.png","language":"C++","funding_links":[],"categories":["TODO scan for Android support in followings","Memory Forensics","C++","***Windows Kernel***"],"sub_categories":["Other Resources","***Debugging***"],"readme":"\u003c!DOCTYPE html\u003e\n\u003chtml\u003e\n\u003chead\u003e\n    \u003ctitle\u003eWinDBG Anti-RootKit extension\u003c/title\u003e\n\u003c/head\u003e\n\u003cbody\u003e\n\n    \u003ch1 id=\"windbg-anti-rootkit-extension\"\u003eWinDBG Anti-RootKit extension\u003c/h1\u003e\n\u003cp\u003e\u003ca href=\"https://scan.coverity.com/projects/3610\"\u003e\u003cimg src=\"https://scan.coverity.com/projects/3610/badge.svg\" alt=\"Coverity Scan Build Status\" /\u003e\u003c/a\u003e\n\u003ca href=\"https://ci.appveyor.com/project/swwwolf/wdbgark\"\u003e\u003cimg src=\"https://ci.appveyor.com/api/projects/status/opt8hoofoc2o9avt?svg=true\" alt=\"Build status\" /\u003e\u003c/a\u003e\n\u003ca href=\"https://www.gnu.org/licenses/gpl-3.0\"\u003e\u003cimg src=\"https://img.shields.io/badge/License-GPL%20v3-blue.svg\" alt=\"License: GPL v3\" /\u003e\u003c/a\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"#preface\"\u003ePreface\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"#requirements\"\u003eRequirements\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"#supported-commands\"\u003eSupported commands\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"#supported-targets\"\u003eSupported targets\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"#sources-and-build\"\u003eSources and build\u003c/a\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"#build-using-vs2017\"\u003eBuild using VS2017\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"#build-using-build\"\u003eBuild using BUILD\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"#build-using-cmd\"\u003eBuild using CMD\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"#using\"\u003eUsing\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"#faq\"\u003eFAQ\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"#help\"\u003eHelp\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"#used-code\"\u003eUsed code\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"#whoami\"\u003eWhoami\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"#license\"\u003eLicense\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2 id=\"preface\"\u003ePreface\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/swwwolf/wdbgark\"\u003eWDBGARK\u003c/a\u003e is an extension (dynamic library) for the\n\u003ca href=\"https://docs.microsoft.com/en-us/windows-hardware/drivers/debugger/index\"\u003eMicrosoft Debugging Tools for Windows\u003c/a\u003e.\nIt main purpose is to view and analyze anomalies in Windows kernel using kernel debugger. It is possible to view\nvarious system callbacks, system tables, object types and so on. For more user-friendly view extension uses DML.\nFor the most of commands kernel-mode connection is required. Feel free to use extension with live kernel-mode debugging\nor with kernel-mode crash dump analysis (some commands will not work). Public symbols are required, so use them, force\nto reload them, ignore checksum problems, prepare them before analysis and you'll be happy.\u003c/p\u003e\n\u003ch2 id=\"requirements\"\u003eRequirements\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMicrosoft Visual Studio 2017\u003c/li\u003e\n\u003cli\u003eWDK and SDK for Windows 10, version 1709 (10.0.16299.0)\u003c/li\u003e\n\u003cli\u003eVisual C++ Redistributable for Visual Studio 2017\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2 id=\"supported-commands\"\u003eSupported commands\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swwwolf/wdbgark/wiki/!wa_scan\"\u003e!wa_scan\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swwwolf/wdbgark/wiki/!wa_systemcb\"\u003e!wa_systemcb\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swwwolf/wdbgark/wiki/!wa_objtype\"\u003e!wa_objtype\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swwwolf/wdbgark/wiki/!wa_objtypeidx\"\u003e!wa_objtypeidx\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swwwolf/wdbgark/wiki/!wa_objtypecb\"\u003e!wa_objtypecb\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swwwolf/wdbgark/wiki/!wa_callouts\"\u003e!wa_callouts\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swwwolf/wdbgark/wiki/!wa_pnptable\"\u003e!wa_pnptable\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swwwolf/wdbgark/wiki/!wa_crashdmpcall\"\u003e!wa_crashdmpcall\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swwwolf/wdbgark/wiki/!wa_ssdt\"\u003e!wa_ssdt\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swwwolf/wdbgark/wiki/!wa_w32psdt\"\u003e!wa_w32psdt\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swwwolf/wdbgark/wiki/!wa_checkmsr\"\u003e!wa_checkmsr\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swwwolf/wdbgark/wiki/!wa_idt\"\u003e!wa_idt\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swwwolf/wdbgark/wiki/!wa_gdt\"\u003e!wa_gdt\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swwwolf/wdbgark/wiki/!wa_haltables\"\u003e!wa_haltables\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swwwolf/wdbgark/wiki/!wa_colorize\"\u003e!wa_colorize\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e!wa_chknirvana\u003c/li\u003e\n\u003cli\u003e!wa_eop\u003c/li\u003e\n\u003cli\u003e!wa_cicallbacks\u003c/li\u003e\n\u003cli\u003e!wa_ciinfo\u003c/li\u003e\n\u003cli\u003e!wa_drvmajor\u003c/li\u003e\n\u003cli\u003e!wa_lxsdt\u003c/li\u003e\n\u003cli\u003e!wa_psppico\u003c/li\u003e\n\u003cli\u003e!wa_systables\u003c/li\u003e\n\u003cli\u003e!wa_apiset\u003c/li\u003e\n\u003cli\u003e!wa_process_anomaly\u003c/li\u003e\n\u003cli\u003e!wa_w32psdt\u003c/li\u003e\n\u003cli\u003e!wa_w32psdtflt\u003c/li\u003e\n\u003cli\u003e!wdrce_copyfile\u003c/li\u003e\n\u003cli\u003e!wdrce_cpuid\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2 id=\"supported-targets\"\u003eSupported targets\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMicrosoft Windows XP (x86)\u003c/li\u003e\n\u003cli\u003eMicrosoft Windows 2003 (x86/x64)\u003c/li\u003e\n\u003cli\u003eMicrosoft Windows Vista (x86/x64)\u003c/li\u003e\n\u003cli\u003eMicrosoft Windows 7 (x86/x64)\u003c/li\u003e\n\u003cli\u003eMicrosoft Windows 8.x (x86/x64)\u003c/li\u003e\n\u003cli\u003eMicrosoft Windows 10 (x86/x64)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eMultiple targets debugging is not supported!\u003c/p\u003e\n\u003cp\u003eWindows BETA/RC is supported by design, but read a few notes. First, i don't care about checked builds.\nSecond, i don't care if you don't have \u003ca href=\"https://developer.microsoft.com/en-us/windows/hardware/download-symbols\"\u003esymbols\u003c/a\u003e\n(public or private). IA64/ARM is unsupported (and will not).\u003c/p\u003e\n\u003ch2 id=\"sources-and-build\"\u003eSources and build\u003c/h2\u003e\n\u003cp\u003eSources are organized as a Visual Studio 2017 solution.\u003c/p\u003e\n\u003ch3 id=\"build-using-vs2017\"\u003eBuild using VS2017\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDownload and install latest \u003ca href=\"https://developer.microsoft.com/en-us/windows/hardware/windows-driver-kit\"\u003eWDK\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSelect \u003cstrong\u003eBuild -\u0026gt; Batch Build\u003c/strong\u003e from the menu and build dummypdb module (x86 and x64).\n\u003cimg src=\"https://raw.githubusercontent.com/swwwolf/wdbgark/master/images/batch_build.png\" alt=\"Batch Build\" /\u003e\u003c/li\u003e\n\u003cli\u003eChoose solution configuration and platform for the main project.\u003c/li\u003e\n\u003cli\u003eBuild.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch4 id=\"note\"\u003eNOTE!\u003c/h4\u003e\n\u003cp\u003ePost-build event is enabled for debug build. It automatically copies linked extension into WinDBG's plugins folder (e.g. x64 target:\u003cbr /\u003e\n\u003ccode\u003e\u0026quot;copy /B /Y \u0026quot;$(OutDir)$(TargetName)$(TargetExt)\u0026quot; \u0026quot;$(WindowsSdkDir)Debuggers\\x64\\winext\\$(TargetName)$(TargetExt)\u0026quot;\u003c/code\u003e).\u003c/p\u003e\n\u003ch3 id=\"build-using-build\"\u003eBuild using BUILD\u003c/h3\u003e\n\u003cp\u003eDeprecated.\u003c/p\u003e\n\u003ch3 id=\"build-using-cmd\"\u003eBuild using CMD\u003c/h3\u003e\n\u003cp\u003eYeah, it's possible to build all the stuff using simple batch script.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eMake sure that you have already installed PowerShell at least version 3.0.\n\u003cul\u003e\n\u003cli\u003eIf not, then download and install \u003ca href=\"http://www.microsoft.com/en-US/download/details.aspx?id=40855\"\u003eWindows Management Framework\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eExecute the \u003ca href=\"release_build.cmd\"\u003erelease_build.cmd\u003c/a\u003e with a single parameter - a version.\u003c/li\u003e\n\u003cli\u003eVoila! If there were no errors, the archive file will be created (e.g. wdbgark.X.Y.zip).\n\u003cul\u003e\n\u003cli\u003eIf something is wrong, check the path to the Visual Studio 2017 in the script and/or output log file (release_build.log).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2 id=\"using\"\u003eUsing\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDownload and install \u003ca href=\"https://developer.microsoft.com/en-us/windows/hardware/download-windbg\"\u003eDebugging Tools\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"#sources-and-build\"\u003eBuild\u003c/a\u003e or \u003ca href=\"https://github.com/swwwolf/wdbgark/releases\"\u003edownload\u003c/a\u003e the extention.\u003c/li\u003e\n\u003cli\u003eMake sure that \u003ca href=\"https://www.visualstudio.com/en-us/productinfo/2017-redistribution-vs\"\u003eVisual C++ Redistributable for Visual Studio 2017\u003c/a\u003e has already been installed.\u003c/li\u003e\n\u003cli\u003eCopy extension to the WDK debugger's directory (e.g. WDK 10):\n\u003cul\u003e\n\u003cli\u003ex64: \u003ccode\u003eC:\\Program Files (x86)\\Windows Kits\\10\\Debuggers\\x64\\winext\\\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003ex86: \u003ccode\u003eC:\\Program Files (x86)\\Windows Kits\\10\\Debuggers\\x86\\winext\\\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eStart WinDBG.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://msdn.microsoft.com/en-us/library/windows/desktop/ee416588(v=vs.85).aspx\"\u003eSetup\u003c/a\u003e WinDBG to use Microsoft Symbol Server correctly or deal with them manually.\u003c/li\u003e\n\u003cli\u003eLoad extension by \u003cstrong\u003e.load wdbgark\u003c/strong\u003e (you can see loaded extensions with a \u003cstrong\u003e.chain\u003c/strong\u003e command).\u003c/li\u003e\n\u003cli\u003eExecute \u003cstrong\u003e!wdbgark.help\u003c/strong\u003e for help or \u003cstrong\u003e!wdbgark.wa_scan\u003c/strong\u003e for a full system scan.\u003c/li\u003e\n\u003cli\u003eHave fun!\u003c/li\u003e\n\u003c/ul\u003e\n\u003cpre\u003e\u003ccode\u003e0: kd\u0026gt; .load wdbgark\n0: kd\u0026gt; .chain\nExtension DLL search Path:\n\u0026lt;...\u0026gt;\nExtension DLL chain:\n    wdbgark: image 2.5.0.0, API 2.5.0, built Fri Oct 20 17:54:03 2017\n        [path: C:\\Program Files (x86)\\Windows Kits\\10\\Debuggers\\x64\\winext\\wdbgark.dll]\n    dbghelp: image 10.0.16299.15, API 10.0.6, \n        [path: C:\\Program Files (x86)\\Windows Kits\\10\\Debuggers\\x64\\dbghelp.dll]\n    ext: image 10.0.16299.15, API 1.0.0, \n        [path: C:\\Program Files (x86)\\Windows Kits\\10\\Debuggers\\x64\\winext\\ext.dll]\n    exts: image 10.0.16299.15, API 1.0.0, \n        [path: C:\\Program Files (x86)\\Windows Kits\\10\\Debuggers\\x64\\WINXP\\exts.dll]\n    kext: image 10.0.16299.15, API 1.0.0, \n        [path: C:\\Program Files (x86)\\Windows Kits\\10\\Debuggers\\x64\\winext\\kext.dll]\n    kdexts: image 10.0.16299.15, API 1.0.0, \n        [path: C:\\Program Files (x86)\\Windows Kits\\10\\Debuggers\\x64\\WINXP\\kdexts.dll]\n0: kd\u0026gt; !wdbgark.help\nCommands for C:\\Program Files (x86)\\Windows Kits\\10\\Debuggers\\x64\\winext\\wdbgark.dll:\n  !help               - Displays information on available extension commands\n  !wa_apiset          - Output user-mode and/or kernel-mode ApiSet map\n  !wa_callouts        - Output kernel-mode win32k callouts\n  !wa_checkmsr        - Output system MSRs (live debug only!)\n  !wa_chknirvana      - Checks processes for Hooking Nirvana instrumentation\n  !wa_cicallbacks     - Output kernel-mode nt!g_CiCallbacks or nt!SeCiCallbacks\n  !wa_ciinfo          - Output Code Integrity information\n  !wa_colorize        - Adjust WinDBG colors dynamically (prints info with no\n                        parameters)\n  !wa_crashdmpcall    - Output kernel-mode nt!CrashdmpCallTable\n  !wa_drvmajor        - Output driver(s) major table\n  !wa_eop             - Checks processes for Elevation of Privilege\n  !wa_gdt             - Output processors GDT\n  !wa_haltables       - Output kernel-mode HAL tables: nt!HalDispatchTable,\n                        nt!HalPrivateDispatchTable, nt!HalIommuDispatchTable\n  !wa_idt             - Output processors IDT\n  !wa_lxsdt           - Output the Linux Subsystem Service Descriptor Table\n  !wa_objtype         - Output kernel-mode object type(s)\n  !wa_objtypecb       - Output kernel-mode callbacks registered with\n                        ObRegisterCallbacks\n  !wa_objtypeidx      - Output kernel-mode nt!ObTypeIndexTable\n  !wa_pnptable        - Output kernel-mode nt!PlugPlayHandlerTable\n  !wa_process_anomaly - Checks processes for various anomalies\n  !wa_psppico         - Output kernel-mode Pico tables\n  !wa_scan            - Scan system (execute all commands)\n  !wa_ssdt            - Output the System Service Descriptor Table\n  !wa_systables       - Output various kernel-mode system tables\n  !wa_systemcb        - Output kernel-mode registered callback(s)\n  !wa_ver             - Shows extension version number\n  !wa_w32psdt         - Output the Win32k Service Descriptor Table\n  !wa_w32psdtflt      - Output the Win32k Service Descriptor Table Filter\n  !wdrce_copyfile     - Copy file (live debug only!)\n  !wdrce_cpuid        - Execute CPUID instruction (live debug only!)\n!help \u0026lt;cmd\u0026gt; will give more information for a particular command\n\u003c/code\u003e\u003c/pre\u003e\n\u003ch2 id=\"faq\"\u003eFAQ\u003c/h2\u003e\n\u003cp\u003eQ: What is the main purpose of the extension?\u003cbr /\u003e\nA: Well, first is educational only. Second, for fun and profit.\u003c/p\u003e\n\u003cp\u003eQ: Do you know about PyKd? I can script the whole Anti-Rootkit using Python.\u003cbr /\u003e\nA: Yeah, i know, but C++ is much better.\u003c/p\u003e\n\u003cp\u003eQ: Where is version 1.0?\u003cbr /\u003e\nA: Lost in space of Google Code.\u003c/p\u003e\n\u003cp\u003eQ: When did the project start?\u003cbr /\u003e\nA: February 2013 on Google Code.\u003c/p\u003e\n\u003cp\u003eQ: What version should i use?\u003cbr /\u003e\nA: Please use x64 version only. In the era of x64 i dunno why the heck you may need to use x86 version. x64 WinDBG is\nable to debug both x86 and x64. Host OS bitness is the only limitation.\u003c/p\u003e\n\u003cp\u003eQ: How can i help?\u003cbr /\u003e\nA: Spread a word. Report issues and feature requests. I'm open for any suggestions. Thanks!\u003c/p\u003e\n\u003cp\u003eQ: What kind of memory dump is better to use with an extension?\u003cbr /\u003e\nA: Complete memory dump.\u003c/p\u003e\n\u003cp\u003eQ: How to report an issue?\u003cbr /\u003e\nA: Feel free to report an issue using GitHub or email to me directly, but please, attach complete memory crash dump file.\u003c/p\u003e\n\u003ch2 id=\"help\"\u003eHelp\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/swwwolf/wdbgark/wiki\"\u003eWiki\u003c/a\u003e can help.\u003c/p\u003e\n\u003ch2 id=\"used-code\"\u003eUsed code\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dattanchu/bprinter\"\u003eBPrinter\u003c/a\u003e. BSD License.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/vmt/udis86\"\u003eUdis86\u003c/a\u003e. Simplified BSD License.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/leethomason/tinyxml2\"\u003eTinyXML2\u003c/a\u003e. Zlib license.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2 id=\"whoami\"\u003eWhoami\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://www.linkedin.com/in/vrusakov\"\u003eLinkedIn profile\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://sww-it.ru/\"\u003eBlog\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2 id=\"license\"\u003eLicense\u003c/h2\u003e\n\u003cp\u003eThis software is released under the GNU GPL v3 License. See the \u003ca href=\"COPYING\"\u003eCOPYING file\u003c/a\u003e for the full license text and\n\u003ca href=\"http://www.gnu.org/licenses/gpl-faq.en.html#GPLPluginsInNF\"\u003ethis\u003c/a\u003e small addition.\u003c/p\u003e\n\n\n\u003c/body\u003e\n\u003c/html\u003e","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fswwwolf%2Fwdbgark","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fswwwolf%2Fwdbgark","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fswwwolf%2Fwdbgark/lists"}