Attaching.h

Go to the documentation of this file.

#pragma once

//                 Constants                    //

#define MAX_USER_ACTIONS_FOR_THREADS 3

#define MAX_THREADS_IN_A_PROCESS_HOLDER 100

//                 Functions                    //
 
BOOLEAN
AttachingInitialize();
 
BOOLEAN
AttachingCheckThreadInterceptionWithUserDebugger(UINT32 CoreId);
 
BOOLEAN
AttachingConfigureInterceptingThreads(UINT64 ProcessDebuggingToken, BOOLEAN Enable);
 
VOID
AttachingTargetProcess(PDEBUGGER_ATTACH_DETACH_USER_MODE_PROCESS Request);
 
VOID
AttachingHandleEntrypointInterception(PROCESSOR_DEBUGGING_STATE * DbgState);
 
VOID
AttachingRemoveAndFreeAllProcessDebuggingDetails();
 
PUSERMODE_DEBUGGING_PROCESS_DETAILS
AttachingFindProcessDebuggingDetailsByToken(UINT64 Token);
 
PUSERMODE_DEBUGGING_PROCESS_DETAILS
AttachingFindProcessDebuggingDetailsByProcessId(UINT32 ProcessId);
 
BOOLEAN
AttachingQueryDetailsOfActiveDebuggingThreadsAndProcesses(PVOID BufferToStoreDetails, UINT32 BufferSize);
 
BOOLEAN
AttachingCheckUnhandledEptViolation(UINT32 CoreId,
                                    UINT64 ViolationQualification,
                                    UINT64 GuestPhysicalAddr);
 
BOOLEAN
AttachingReachedToValidLoadedModule(PROCESSOR_DEBUGGING_STATE *         DbgState,
                                    PUSERMODE_DEBUGGING_PROCESS_DETAILS ProcessDebuggingDetail);