HyperDbg Debugger
Loading...
Searching...
No Matches
Termination.h
Go to the documentation of this file.
1
13#pragma once
14
16// Functions //
18
19VOID
20TerminateExternalInterruptEvent(PDEBUGGER_EVENT Event, BOOLEAN InputFromVmxRoot);
21
22VOID
23TerminateHiddenHookReadAndWriteAndExecuteEvent(PDEBUGGER_EVENT Event, BOOLEAN InputFromVmxRoot);
24
25VOID
26TerminateHiddenHookExecCcEvent(PDEBUGGER_EVENT Event, BOOLEAN InputFromVmxRoot);
27
28VOID
29TerminateHiddenHookExecDetoursEvent(PDEBUGGER_EVENT Event, BOOLEAN InputFromVmxRoot);
30
31VOID
32TerminateRdmsrExecutionEvent(PDEBUGGER_EVENT Event, BOOLEAN InputFromVmxRoot);
33
34VOID
35TerminateWrmsrExecutionEvent(PDEBUGGER_EVENT Event, BOOLEAN InputFromVmxRoot);
36
37VOID
38TerminateExceptionEvent(PDEBUGGER_EVENT Event, BOOLEAN InputFromVmxRoot);
39
40VOID
41TerminateInInstructionExecutionEvent(PDEBUGGER_EVENT Event, BOOLEAN InputFromVmxRoot);
42
43VOID
44TerminateOutInstructionExecutionEvent(PDEBUGGER_EVENT Event, BOOLEAN InputFromVmxRoot);
45
46VOID
47TerminateSyscallHookEferEvent(PDEBUGGER_EVENT Event, BOOLEAN InputFromVmxRoot);
48
49VOID
50TerminateSysretHookEferEvent(PDEBUGGER_EVENT Event, BOOLEAN InputFromVmxRoot);
51
52VOID
53TerminateVmcallExecutionEvent(PDEBUGGER_EVENT Event, BOOLEAN InputFromVmxRoot);
54
55VOID
56TerminateExecTrapModeChangedEvent(PDEBUGGER_EVENT Event, BOOLEAN InputFromVmxRoot);
57
58VOID
59TerminateTscEvent(PDEBUGGER_EVENT Event, BOOLEAN InputFromVmxRoot);
60
61VOID
62TerminatePmcEvent(PDEBUGGER_EVENT Event, BOOLEAN InputFromVmxRoot);
63
64VOID
65TerminateDebugRegistersEvent(PDEBUGGER_EVENT Event, BOOLEAN InputFromVmxRoot);
66
67VOID
68TerminateCpuidExecutionEvent(PDEBUGGER_EVENT Event, BOOLEAN InputFromVmxRoot);
69
70VOID
71TerminateControlRegistersEvent(PDEBUGGER_EVENT Event, BOOLEAN InputFromVmxRoot);
72
73BOOLEAN
74TerminateEptHookUnHookSingleAddressFromVmxRootAndApplyInvalidation(UINT64 VirtualAddress,
75 UINT64 PhysAddress);
76
77BOOLEAN
78TerminateEptHookUnHookAllHooksByHookingTagFromVmxRootAndApplyInvalidation(UINT64 HookingTag);
79
80BOOLEAN
81TerminateQueryDebuggerResource(UINT32 CoreId,
82 PROTECTED_HV_RESOURCES_TYPE ResourceType,
83 PVOID Context,
84 PROTECTED_HV_RESOURCES_PASSING_OVERS PassOver);
BOOLEAN
UCHAR BOOLEAN
Definition BasicTypes.h:39
VOID
#define VOID
Definition BasicTypes.h:33
UINT64
unsigned __int64 UINT64
Definition BasicTypes.h:21
UINT32
unsigned int UINT32
Definition BasicTypes.h:48
TerminateSysretHookEferEvent
VOID TerminateSysretHookEferEvent(PDEBUGGER_EVENT Event, BOOLEAN InputFromVmxRoot)
Termination function for SYSRET Instruction events.
Definition Termination.c:1216
TerminateControlRegistersEvent
VOID TerminateControlRegistersEvent(PDEBUGGER_EVENT Event, BOOLEAN InputFromVmxRoot)
Termination function for MOV to control registers events.
Definition Termination.c:957
TerminatePmcEvent
VOID TerminatePmcEvent(PDEBUGGER_EVENT Event, BOOLEAN InputFromVmxRoot)
Termination function for RDPMC Instruction events.
Definition Termination.c:873
TerminateExecTrapModeChangedEvent
VOID TerminateExecTrapModeChangedEvent(PDEBUGGER_EVENT Event, BOOLEAN InputFromVmxRoot)
Termination function for user-mode, kernel-mode exec trap events.
Definition Termination.c:690
TerminateInInstructionExecutionEvent
VOID TerminateInInstructionExecutionEvent(PDEBUGGER_EVENT Event, BOOLEAN InputFromVmxRoot)
Termination function for IN instruction events.
Definition Termination.c:465
TerminateEptHookUnHookSingleAddressFromVmxRootAndApplyInvalidation
BOOLEAN TerminateEptHookUnHookSingleAddressFromVmxRootAndApplyInvalidation(UINT64 VirtualAddress, UINT64 PhysAddress)
Remove single hook from the hooked pages list and invalidate TLB.
Definition Termination.c:1593
TerminateRdmsrExecutionEvent
VOID TerminateRdmsrExecutionEvent(PDEBUGGER_EVENT Event, BOOLEAN InputFromVmxRoot)
Termination function for msr read events.
Definition Termination.c:213
TerminateTscEvent
VOID TerminateTscEvent(PDEBUGGER_EVENT Event, BOOLEAN InputFromVmxRoot)
Termination function for RDTSC/RDTSCP Instruction events.
Definition Termination.c:789
TerminateDebugRegistersEvent
VOID TerminateDebugRegistersEvent(PDEBUGGER_EVENT Event, BOOLEAN InputFromVmxRoot)
Termination function for MOV to debug registers events.
Definition Termination.c:1041
TerminateExternalInterruptEvent
VOID TerminateExternalInterruptEvent(PDEBUGGER_EVENT Event, BOOLEAN InputFromVmxRoot)
Termination function for external-interrupts.
Definition Termination.c:24
TerminateWrmsrExecutionEvent
VOID TerminateWrmsrExecutionEvent(PDEBUGGER_EVENT Event, BOOLEAN InputFromVmxRoot)
Termination function for msr write events.
Definition Termination.c:297
TerminateHiddenHookExecDetoursEvent
VOID TerminateHiddenHookExecDetoursEvent(PDEBUGGER_EVENT Event, BOOLEAN InputFromVmxRoot)
Termination function for hidden hook (detours)
Definition Termination.c:173
TerminateEptHookUnHookAllHooksByHookingTagFromVmxRootAndApplyInvalidation
BOOLEAN TerminateEptHookUnHookAllHooksByHookingTagFromVmxRootAndApplyInvalidation(UINT64 HookingTag)
Remove all hooks from the hooked pages list and invalidate TLB using hooking tag.
Definition Termination.c:1648
TerminateHiddenHookExecCcEvent
VOID TerminateHiddenHookExecCcEvent(PDEBUGGER_EVENT Event, BOOLEAN InputFromVmxRoot)
Termination function for hidden hook (hidden breakpoints)
Definition Termination.c:135
TerminateOutInstructionExecutionEvent
VOID TerminateOutInstructionExecutionEvent(PDEBUGGER_EVENT Event, BOOLEAN InputFromVmxRoot)
Termination function for OUT Instructions events.
Definition Termination.c:556
TerminateQueryDebuggerResource
BOOLEAN TerminateQueryDebuggerResource(UINT32 CoreId, PROTECTED_HV_RESOURCES_TYPE ResourceType, PVOID Context, PROTECTED_HV_RESOURCES_PASSING_OVERS PassOver)
Termination query state of debugger.
Definition Termination.c:1713
TerminateExceptionEvent
VOID TerminateExceptionEvent(PDEBUGGER_EVENT Event, BOOLEAN InputFromVmxRoot)
Termination function for exception events.
Definition Termination.c:381
TerminateVmcallExecutionEvent
VOID TerminateVmcallExecutionEvent(PDEBUGGER_EVENT Event, BOOLEAN InputFromVmxRoot)
Termination function for VMCALL Instruction events.
Definition Termination.c:647
TerminateSyscallHookEferEvent
VOID TerminateSyscallHookEferEvent(PDEBUGGER_EVENT Event, BOOLEAN InputFromVmxRoot)
Termination function for SYSCALL Instruction events.
Definition Termination.c:1125
TerminateCpuidExecutionEvent
VOID TerminateCpuidExecutionEvent(PDEBUGGER_EVENT Event, BOOLEAN InputFromVmxRoot)
Termination function for CPUID Instruction events.
Definition Termination.c:746
TerminateHiddenHookReadAndWriteAndExecuteEvent
VOID TerminateHiddenHookReadAndWriteAndExecuteEvent(PDEBUGGER_EVENT Event, BOOLEAN InputFromVmxRoot)
Termination function for hidden hook read/write/execute.
Definition Termination.c:108
Context
NTKERNELAPI _In_opt_ PVOID Context
Definition Dpc.h:25
PROTECTED_HV_RESOURCES_TYPE
enum _PROTECTED_HV_RESOURCES_TYPE PROTECTED_HV_RESOURCES_TYPE
Type of protected (multi-used) resources.
PROTECTED_HV_RESOURCES_PASSING_OVERS
enum _PROTECTED_HV_RESOURCES_PASSING_OVERS PROTECTED_HV_RESOURCES_PASSING_OVERS
Things to consider when applying resources.
_DEBUGGER_EVENT
The structure of events in HyperDbg.
Definition Debugger.h:108