|
HyperDbg Debugger
|
| ►NEvalScripts | |
| ►Ngenerator | |
| ►Ninipp | |
| ►Nlalr1_parser | |
| ►Nlalr_parsing | |
| ►Nll1_parser | |
| C_ACTIVE_DEBUGGING_PROCESS | Structures related to current thread debugging state |
| C_ALLOCATED_MEMORY_FOR_SCRIPT_ENGINE_CASTING | |
| C_BUFFER_HEADER | Message buffer structure |
| C_CMD | |
| C_COMMAND_DETAIL | Details of each command |
| C_COMPATIBILITY_CHECKS_STATUS | The status of available features in the processor |
| C_CPUID | CPUID Registers |
| C_CR3_TYPE | CR3 Structure |
| C_CR_FIXED | |
| C_DATE_TIME_HOLDER | Timer for the core |
| C_DEBUGGEE_BP_DESCRIPTOR | The structure of storing breakpoints |
| C_DEBUGGEE_BP_LIST_OR_MODIFY_PACKET | The structure of breakpoint modification requests packet in HyperDbg |
| C_DEBUGGEE_BP_PACKET | The structure of bp command packet in HyperDbg |
| C_DEBUGGEE_CHANGE_CORE_PACKET | The structure of changing core packet in HyperDbg |
| C_DEBUGGEE_DETAILS_AND_SWITCH_PROCESS_PACKET | The structure of changing process and show process packet in HyperDbg |
| C_DEBUGGEE_DETAILS_AND_SWITCH_THREAD_PACKET | The structure of changing thead and show thread packet in HyperDbg |
| C_DEBUGGEE_EVENT_AND_ACTION_HEADER_FOR_REMOTE_PACKET | The structure of user-input packet in HyperDbg |
| C_DEBUGGEE_FORMATS_PACKET | The structure of .formats result packet in HyperDbg |
| C_DEBUGGEE_HALTED_CORE_TASK | Details of setting tasks for the locked (halted) cores |
| C_DEBUGGEE_INSTRUMENTATION_STEP_IN_TRACE | Use to trace the execution in the case of instrumentation step-in command (i command) |
| C_DEBUGGEE_KD_PAUSED_PACKET | The structure of pausing packet in kHyperDbg |
| C_DEBUGGEE_MESSAGE_PACKET | The structure of message packet in HyperDbg |
| C_DEBUGGEE_PROCESS_LIST_DETAILS_ENTRY | The structure showing list of processes (details of each entry) |
| C_DEBUGGEE_PROCESS_LIST_NEEDED_DETAILS | The structure of needed information to get the details of the process from nt!_EPROCESS and location of needed variables |
| C_DEBUGGEE_PROCESS_OR_THREAD_TRACING_DETAILS | Structure to save the state of adding trace for threads and processes |
| C_DEBUGGEE_REGISTER_READ_DESCRIPTION | Register Descriptor Structure to use in r command |
| C_DEBUGGEE_REGISTER_WRITE_DESCRIPTION | Register Descriptor Structure to write on registers |
| C_DEBUGGEE_REQUEST_TO_CHANGE_PROCESS | Request to change the process |
| C_DEBUGGEE_REQUEST_TO_CHANGE_THREAD | Request to change the thread |
| C_DEBUGGEE_REQUEST_TO_IGNORE_BREAKS_UNTIL_AN_EVENT | Request to pause and halt the system |
| C_DEBUGGEE_RESULT_OF_SEARCH_PACKET | The structure of result of search packet in HyperDbg |
| C_DEBUGGEE_SCRIPT_PACKET | The structure of script packet in HyperDbg |
| C_DEBUGGEE_SEND_GENERAL_PACKET_FROM_DEBUGGEE_TO_DEBUGGER | Request for send general packets from debuggee to debugger |
| C_DEBUGGEE_STEP_PACKET | The structure of stepping packet in HyperDbg |
| C_DEBUGGEE_SYMBOL_REQUEST_PACKET | The structure of .sym reload packet in HyperDbg |
| C_DEBUGGEE_SYMBOL_UPDATE_RESULT | Request that shows, symbol reload process is finished |
| C_DEBUGGEE_THREAD_LIST_DETAILS_ENTRY | The structure showing list of threads (details of each entry) |
| C_DEBUGGEE_THREAD_LIST_NEEDED_DETAILS | The structure of needed information to get the details of the thread from nt!_ETHREAD and location of needed variables |
| C_DEBUGGEE_UD_PAUSED_PACKET | The structure of pausing packet in uHyperDbg |
| C_DEBUGGEE_USER_INPUT_PACKET | The structure of user-input packet in HyperDbg |
| C_DEBUGGER_ATTACH_DETACH_USER_MODE_PROCESS | Request for attaching user-mode process |
| C_DEBUGGER_CALLSTACK_REQUEST | Request for callstack frames |
| C_DEBUGGER_CORE_EVENTS | List of all the different events |
| C_DEBUGGER_DEBUGGER_TEST_QUERY_BUFFER | Request for test query buffers |
| C_DEBUGGER_DT_COMMAND_OPTIONS | Requests options for dt and struct command |
| C_DEBUGGER_EDIT_MEMORY | Request for edit virtual and physical memory |
| C_DEBUGGER_EVENT | The structure of events in HyperDbg |
| C_DEBUGGER_EVENT_ACTION | The structure of actions in HyperDbg |
| C_DEBUGGER_EVENT_ACTION_RUN_SCRIPT_CONFIGURATION | Used for run the script |
| C_DEBUGGER_EVENT_AND_ACTION_RESULT | Status of register buffers |
| C_DEBUGGER_EVENT_FORWARDING | Structures hold the detail of event forwarding |
| C_DEBUGGER_EVENT_OPTIONS | Request for performing a short-circuiting event |
| C_DEBUGGER_EVENT_REQUEST_BUFFER | Used in the case of requesting a "request buffer" |
| C_DEBUGGER_EVENT_REQUEST_CUSTOM_CODE | Used in the case of custom code requests to the debugger |
| C_DEBUGGER_FLUSH_LOGGING_BUFFERS | Request for flushing buffers |
| C_DEBUGGER_GENERAL_ACTION | Each event can have multiple actions |
| C_DEBUGGER_GENERAL_EVENT_DETAIL | Each command is like the following struct, it also used for tracing works in user mode and sending it to the kernl mode |
| C_DEBUGGER_HIDE_AND_TRANSPARENT_DEBUGGER_MODE | Request for enable or disable transparent-mode |
| C_DEBUGGER_MODIFY_EVENTS | Request for modifying events (enable/disable/clear) |
| C_DEBUGGER_PAGE_IN_REQUEST | Requests for the '.pagein' command |
| C_DEBUGGER_PAUSE_PACKET_RECEIVED | Request to pause and halt the system |
| C_DEBUGGER_PERFORM_KERNEL_TESTS | Request performing kernel tests |
| C_DEBUGGER_PREACTIVATE_COMMAND | Requests for the 'preactivate' command |
| C_DEBUGGER_PREALLOC_COMMAND | Requests for the 'prealloc' command |
| C_DEBUGGER_PREPARE_DEBUGGEE | Request to make this computer to a debuggee |
| C_DEBUGGER_PROCESS_THREAD_INFORMATION | The thread/process information |
| C_DEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS | Request for query count of active processes and threads |
| C_DEBUGGER_READ_AND_WRITE_ON_MSR | Request to read or write on MSRs |
| C_DEBUGGER_READ_MEMORY | Request for reading virtual and physical memory |
| C_DEBUGGER_READ_PAGE_TABLE_ENTRIES_DETAILS | Request for !pte command |
| C_DEBUGGER_REMOTE_PACKET | The structure of remote packets in HyperDbg |
| C_DEBUGGER_SEARCH_MEMORY | Request for searching memory |
| C_DEBUGGER_SEND_COMMAND_EXECUTION_FINISHED_SIGNAL | Request for send a signal that command execution finished |
| C_DEBUGGER_SEND_USERMODE_MESSAGES_TO_DEBUGGER | Request for send a user-mode message to debugger |
| C_DEBUGGER_SHORT_CIRCUITING_EVENT | Request for performing a short-circuiting event |
| C_DEBUGGER_SINGLE_CALLSTACK_FRAME | The structure for saving the callstack frame of one parameter |
| C_DEBUGGER_SYNCRONIZATION_EVENTS_STATE | In debugger holds the state of events |
| C_DEBUGGER_TRAP_FLAG_STATE | The status of RFLAGS.TF masking |
| C_DEBUGGER_TRIGGERED_EVENT_DETAILS | The structure of detail of a triggered event in HyperDbg |
| C_DEBUGGER_UD_COMMAND_ACTION | Description of user-mode debugging actions |
| C_DEBUGGER_UD_COMMAND_PACKET | The structure of command packet in uHyperDbg |
| C_DEBUGGER_UPDATE_SYMBOL_TABLE | Request to add new symbol detail or update a previous symbol table entry |
| C_DEBUGGER_VA2PA_AND_PA2VA_COMMANDS | Requests for !va2pa and !pa2va commands |
| C_DIRECT_VMCALL_PARAMETERS | Used for sending direct VMCALLs on the VMX root-mode |
| C_DW_APB_SSI_REGISTERS | |
| C_EPT_HOOKED_PAGE_DETAIL | Structure to save the state of each hooked pages |
| C_EPT_HOOKS_ADDRESS_DETAILS_FOR_EPTHOOK2 | Setting details for EPT Hooks (!epthook2) |
| C_EPT_HOOKS_ADDRESS_DETAILS_FOR_MEMORY_MONITOR | Setting details for EPT Hooks (!monitor) |
| C_EPT_HOOKS_CONTEXT | Temporary $context used in some EPT hook commands |
| C_EPT_SINGLE_HOOK_UNHOOKING_DETAILS | Details of unhooking single EPT hooks |
| C_EPT_STATE | Main structure for saving the state of EPT among the project |
| C_EVENT_INFORMATION | Event information |
| C_FIFO_TX_BLOCK | |
| C_HARDWARE_DEBUG_REGISTER_DETAILS | Store the details of a hardware debug register to ignore any trigger for other threads |
| C_HIDDEN_HOOKS_DETOUR_DETAILS | Details of detours style EPT hooks |
| C_HOST_EXCEPTION_INFO | Filled out when a host exception occurs |
| ►C_HWDBG_INSTANCE_INFORMATION | The structure of script capabilities information in hwdbg |
| C_HWDBG_PORT_INFORMATION_ITEMS | The structure of port information (each item) in hwdbg |
| C_HWDBG_SCRIPT_BUFFER | The structure of script buffer in hwdbg |
| C_HYPERCALL_INPUT_VALUE | Hypercalls for Hyper-V |
| C_IA32_MTRR_FIXED_RANGE_TYPE | Fixed range MTRR |
| C_INTERRUPT_INFO | Interrupt injection and event format |
| C_INTERRUPT_TRAP_FRAME | Trap frame for interrupts |
| C_KD_NMI_STATE | The status of NMI in the kernel debugger |
| C_LDR_DATA_TABLE_ENTRY | LDR Data Table 64-bit |
| C_LDR_DATA_TABLE_ENTRY32 | LDR Data Table 32-bit |
| C_LOCAL_FUNCTION_DESCRIPTION | Save the local function symbols' description |
| C_LOG_BUFFER_INFORMATION | Core-specific buffers |
| C_MEMORY_MAPPER_ADDRESSES | Memory mapper PTE and reserved virtual address |
| C_MESSAGE_TRACING_CALLBACKS | Prototype of each function needed by message tracer |
| C_MODULE_SYMBOL_DETAIL | Structures for sending and saving details about each module and symbols details |
| C_MSR | General MSR Structure |
| C_MTRR_RANGE_DESCRIPTOR | MTRR Descriptor |
| C_MX6_UART_REGISTERS | |
| C_NMI_BROADCASTING_STATE | The status of NMI broadcasting in VMX |
| C_NOTIFY_RECORD | The usermode request |
| C_NT_KPROCESS | KPROCESS Brief structure |
| C_PAGE_ENTRY | Page Entries |
| C_PEB | PEB 64-bit |
| C_PEB32 | PEB 32-bit |
| C_PEB_LDR_DATA | PEB LDR Data |
| C_PEB_LDR_DATA32 | LDR Data 32-bit |
| C_POOL_TABLE | Table of holding pools detail structure |
| C_PROCESSOR_DEBUGGING_MSR_READ_OR_WRITE | Use to modify Msrs or read MSR values |
| C_PROCESSOR_DEBUGGING_STATE | Saves the debugger state |
| C_REGISTER_NOTIFY_BUFFER | Used to register event for transferring buffer between user-to-kernel |
| C_REQUEST_NEW_ALLOCATION | Manage the requests for new allocations |
| C_REVERSING_MACHINE_RECONSTRUCT_MEMORY_REQUEST | Requests for !rev command |
| C_RTL_PROCESS_MODULE_INFORMATION | |
| C_RTL_PROCESS_MODULES | |
| C_RTL_USER_PROCESS_PARAMETERS | User process params |
| C_SCRIPT_ENGINE_VARIABLES_LIST | List of different variables |
| C_SERIAL_PORT_MAX311XE | |
| C_SSDTStruct | SSDT structure |
| C_STUPID_STRUCT1 | |
| C_STUPID_STRUCT2 | |
| C_SYMBOL_LOADED_MODULE_DETAILS | Hold detail about the loaded modules |
| C_SYSTEM_MODULE_ENTRY | Module entry |
| C_SYSTEM_MODULE_INFORMATION | System Information for modules |
| C_TOKEN | Read tokens from input stored in this structure |
| C_TOKEN_LIST | This structure is a dynamic container of TOKENS |
| C_TRANSPARENCY_MEASUREMENTS | The measurements from user-mode and kernel-mode |
| C_TRANSPARENCY_PROCESS | The ProcessList of TRANSPARENCY_MEASUREMENTS is from this architecture |
| C_UNICODE_STRING | |
| C_USER_KERNEL_EXECUTION_TRAP_STATE | The status user-mode, kernel-mode execution traps for processes |
| C_USERMODE_DEBUGGING_PROCESS_DETAILS | Description of each active thread in user-mode attaching mechanism |
| C_USERMODE_DEBUGGING_THREAD_DETAILS | Details of each thread in process |
| C_USERMODE_DEBUGGING_THREAD_HOLDER | The holder for detail of each thread in process |
| C_USERMODE_DEBUGGING_THREAD_OR_PROCESS_STATE_DETAILS | |
| C_USERMODE_LOADED_MODULE_DETAILS | |
| C_USERMODE_LOADED_MODULE_SYMBOLS | |
| C_VIRTUAL_MACHINE_STATE | The status of each core after and before VMX |
| C_VM_EXIT_TRANSPARENCY | The status of transparency of each core after and before VMX |
| C_VMM_CALLBACKS | Prototype of each function needed by VMM module |
| C_VMM_EPT_DYNAMIC_SPLIT | Split 2MB granularity to 4 KB granularity |
| C_VMM_EPT_PAGE_TABLE | Structure for saving EPT Table |
| C_VMX_SEGMENT_SELECTOR | Segment selector |
| C_VMX_VMXOFF_STATE | Save the state of core in the case of VMXOFF |
| CACTION_BUFFER | |
| CAssembleData | |
| CCommandParser | |
| CGUEST_EXTRA_REGISTERS | Struct for extra registers |
| CGUEST_REGS | |
| CHKeyHolder | |
| Chv_enlightened_vmcs | |
| Chv_gpa_range_for_visibility | |
| Chv_msi_address_register | |
| Chv_msi_data_register | |
| Chv_msi_entry | |
| Chv_nested_enlightenments_control | |
| Chv_partition_assist_pg | |
| Chv_reenlightenment_control | |
| Chv_tsc_emulation_control | |
| Chv_tsc_emulation_status | |
| Chv_vp_assist_msr_contents | |
| Chv_vp_assist_page | |
| Chv_x64_msr_hypercall_contents | |
| CHWDBG_SHORT_SYMBOL | |
| CInstructionSet | |
| CMODE_BASED_RAM_REGIONS | The RAM regions |
| CSYMBOL | |
| CSYMBOL_BUFFER | |
| CSYMBOL_MAP | |
| CUSER_DEFINED_FUNCTION_NODE | |
| CVARIABLE_TYPE | |
| CVMX_SEGMENT_ACCESS_RIGHTS_TYPE | Describe segment selector in VMX |
| CZydisSymbol_ | Defines the ZydisSymbol struct |