HyperDbg Debugger
Loading...
Searching...
No Matches
Callback.h
Go to the documentation of this file.
1
13#pragma once
14
15//
16// VMM Callbacks
17//
18
19VMM_CALLBACK_TRIGGERING_EVENT_STATUS_TYPE
20VmmCallbackTriggerEvents(VMM_EVENT_TYPE_ENUM EventType,
21 VMM_CALLBACK_EVENT_CALLING_STAGE_TYPE CallingStage,
22 PVOID Context,
23 BOOLEAN * PostEventRequired,
24 GUEST_REGS * Regs);
25
26BOOLEAN
27VmmCallbackVmcallHandler(UINT32 CoreId,
28 UINT64 VmcallNumber,
29 UINT64 OptionalParam1,
30 UINT64 OptionalParam2,
31 UINT64 OptionalParam3);
32
33BOOLEAN
34VmmCallbackQueryTerminateProtectedResource(UINT32 CoreId,
35 PROTECTED_HV_RESOURCES_TYPE ResourceType,
36 PVOID Context,
37 PROTECTED_HV_RESOURCES_PASSING_OVERS PassOver);
38
39BOOLEAN
40VmmCallbackRestoreEptState(UINT32 CoreId);
41
42BOOLEAN
43VmmCallbackUnhandledEptViolation(UINT32 CoreId,
44 UINT64 ViolationQualification,
45 UINT64 GuestPhysicalAddr);
46
47BOOLEAN
48VmmCallbackHandleMtfCallback(UINT32 CoreId);
49
50VOID
51VmmCallbackSetLastError(UINT32 LastError);
52
53VOID
54VmmCallbackNmiBroadcastRequestHandler(UINT32 CoreId, BOOLEAN IsOnVmxNmiHandler);
55
56//
57// HyperTrace Callbacks
58//
59BOOLEAN
60HyperTraceCallbackLbrIsSupported(UINT32 * Capacity, BOOLEAN * IsArchLbr);
61
62//
63// Debugging Callbacks
64//
65
66BOOLEAN
67DebuggingCallbackHandleBreakpointException(UINT32 CoreId);
68
69BOOLEAN
70DebuggingCallbackHandleDebugBreakpointException(UINT32 CoreId);
71
72BOOLEAN
73DebuggingCallbackCheckThreadInterception(UINT32 CoreId);
74
75BOOLEAN
76DebuggingCallbackTriggerOnClockAndIpiEvents(UINT32 CoreId);
77
78BOOLEAN
79DebuggingCallbackIgnoreHandlingMov2DebugRegs(UINT32 CoreId);
80
81//
82// Pool Manager Callbacks
83//
84
85BOOLEAN
86PoolManagerCallbackRequestAllocation(SIZE_T Size, UINT32 Count, POOL_ALLOCATION_INTENTION Intention);
87
88UINT64
89PoolManagerCallbackRequestPool(POOL_ALLOCATION_INTENTION Intention, BOOLEAN RequestNewPool, UINT32 Size);
90
91BOOLEAN
92PoolManagerCallbackFreePool(UINT64 AddressToFree);
93
94//
95// Interception Callbacks
96//
97
98VOID
99InterceptionCallbackTriggerCr3ProcessChange(UINT32 CoreId);
PoolManagerCallbackRequestAllocation
BOOLEAN PoolManagerCallbackRequestAllocation(SIZE_T Size, UINT32 Count, POOL_ALLOCATION_INTENTION Intention)
routine callback to request pool allocation
Definition Callback.c:335
PoolManagerCallbackFreePool
BOOLEAN PoolManagerCallbackFreePool(UINT64 AddressToFree)
routine callback to free pool
Definition Callback.c:378
DebuggingCallbackHandleDebugBreakpointException
BOOLEAN DebuggingCallbackHandleDebugBreakpointException(UINT32 CoreId)
routine callback to handle debug breakpoint exception
Definition Callback.c:252
VmmCallbackTriggerEvents
VMM_CALLBACK_TRIGGERING_EVENT_STATUS_TYPE VmmCallbackTriggerEvents(VMM_EVENT_TYPE_ENUM EventType, VMM_CALLBACK_EVENT_CALLING_STAGE_TYPE CallingStage, PVOID Context, BOOLEAN *PostEventRequired, GUEST_REGS *Regs)
routines callback to trigger events
Definition Callback.c:26
PoolManagerCallbackRequestPool
UINT64 PoolManagerCallbackRequestPool(POOL_ALLOCATION_INTENTION Intention, BOOLEAN RequestNewPool, UINT32 Size)
routine callback to request pool
Definition Callback.c:358
VmmCallbackHandleMtfCallback
BOOLEAN VmmCallbackHandleMtfCallback(UINT32 CoreId)
routine callback to handle MTF callback
Definition Callback.c:189
VmmCallbackRestoreEptState
BOOLEAN VmmCallbackRestoreEptState(UINT32 CoreId)
routine callback to restore EPT state
Definition Callback.c:145
VmmCallbackSetLastError
VOID VmmCallbackSetLastError(UINT32 LastError)
routine callback to set last error
Definition Callback.c:47
DebuggingCallbackHandleBreakpointException
BOOLEAN DebuggingCallbackHandleBreakpointException(UINT32 CoreId)
routine callback to handle breakpoint exception
Definition Callback.c:231
VmmCallbackQueryTerminateProtectedResource
BOOLEAN VmmCallbackQueryTerminateProtectedResource(UINT32 CoreId, PROTECTED_HV_RESOURCES_TYPE ResourceType, PVOID Context, PROTECTED_HV_RESOURCES_PASSING_OVERS PassOver)
routine callback to query for termination of protected resources
Definition Callback.c:122
DebuggingCallbackTriggerOnClockAndIpiEvents
BOOLEAN DebuggingCallbackTriggerOnClockAndIpiEvents(UINT32 CoreId)
routine callback to trigger on clock and IPI events for checking process or thread change
Definition Callback.c:294
VmmCallbackNmiBroadcastRequestHandler
VOID VmmCallbackNmiBroadcastRequestHandler(UINT32 CoreId, BOOLEAN IsOnVmxNmiHandler)
routine callback to handle NMI requests
Definition Callback.c:98
VmmCallbackUnhandledEptViolation
BOOLEAN VmmCallbackUnhandledEptViolation(UINT32 CoreId, UINT64 ViolationQualification, UINT64 GuestPhysicalAddr)
routine callback to handle unhandled EPT violations
Definition Callback.c:167
DebuggingCallbackCheckThreadInterception
BOOLEAN DebuggingCallbackCheckThreadInterception(UINT32 CoreId)
routine callback to handle thread interception
Definition Callback.c:273
VmmCallbackVmcallHandler
BOOLEAN VmmCallbackVmcallHandler(UINT32 CoreId, UINT64 VmcallNumber, UINT64 OptionalParam1, UINT64 OptionalParam2, UINT64 OptionalParam3)
routine callback to handle external VMCALLs
Definition Callback.c:72
DebuggingCallbackIgnoreHandlingMov2DebugRegs
BOOLEAN DebuggingCallbackIgnoreHandlingMov2DebugRegs(UINT32 CoreId)
routine callback to ignore handling mov 2 debug registers
Definition Callback.c:313
HyperTraceCallbackLbrIsSupported
BOOLEAN HyperTraceCallbackLbrIsSupported(UINT32 *Capacity, BOOLEAN *IsArchLbr)
routine callback to check if LBR is supported and get the LBR capacity if supported
Definition Callback.c:211
InterceptionCallbackTriggerCr3ProcessChange
VOID InterceptionCallbackTriggerCr3ProcessChange(UINT32 CoreId)
routine callback to handle cr3 process change
Definition Callback.c:398
BOOLEAN
UCHAR BOOLEAN
Definition BasicTypes.h:35
PVOID
void * PVOID
Definition BasicTypes.h:56
UINT32
unsigned int UINT32
Definition BasicTypes.h:54
VMM_CALLBACK_EVENT_CALLING_STAGE_TYPE
enum _VMM_CALLBACK_EVENT_CALLING_STAGE_TYPE VMM_CALLBACK_EVENT_CALLING_STAGE_TYPE
Type of calling the event.
POOL_ALLOCATION_INTENTION
enum _POOL_ALLOCATION_INTENTION POOL_ALLOCATION_INTENTION
Inum of intentions for buffers (buffer tag).
PROTECTED_HV_RESOURCES_TYPE
enum _PROTECTED_HV_RESOURCES_TYPE PROTECTED_HV_RESOURCES_TYPE
Type of protected (multi-used) resources.
VMM_CALLBACK_TRIGGERING_EVENT_STATUS_TYPE
enum _VMM_CALLBACK_TRIGGERING_EVENT_STATUS_TYPE VMM_CALLBACK_TRIGGERING_EVENT_STATUS_TYPE
The status of triggering events.
PROTECTED_HV_RESOURCES_PASSING_OVERS
enum _PROTECTED_HV_RESOURCES_PASSING_OVERS PROTECTED_HV_RESOURCES_PASSING_OVERS
Things to consider when applying resources.
VMM_EVENT_TYPE_ENUM
enum _VMM_EVENT_TYPE_ENUM VMM_EVENT_TYPE_ENUM
enum to show type of all HyperDbg events
GUEST_REGS
Definition BasicTypes.h:136