HyperDbg Debugger
|
►NEvalScripts | |
►Ngenerator | |
►Ninipp | |
►Nlalr1_parser | |
►Nlalr_parsing | |
►Nll1_parser | |
C_ACTIVE_DEBUGGING_PROCESS | Structures related to current thread debugging state |
C_ALLOCATED_MEMORY_FOR_SCRIPT_ENGINE_CASTING | |
C_BUFFER_HEADER | Message buffer structure |
C_CMD | |
C_COMMAND_DETAIL | Details of each command |
C_COMPATIBILITY_CHECKS_STATUS | The status of available features in the processor |
C_CPUID | CPUID Registers |
C_CR3_TYPE | CR3 Structure |
C_CR_FIXED | |
C_DATE_TIME_HOLDER | Timer for the core |
C_DEBUGGEE_BP_DESCRIPTOR | The structure of storing breakpoints |
C_DEBUGGEE_BP_LIST_OR_MODIFY_PACKET | The structure of breakpoint modification requests packet in HyperDbg |
C_DEBUGGEE_BP_PACKET | The structure of bp command packet in HyperDbg |
C_DEBUGGEE_CHANGE_CORE_PACKET | The structure of changing core packet in HyperDbg |
C_DEBUGGEE_DETAILS_AND_SWITCH_PROCESS_PACKET | The structure of changing process and show process packet in HyperDbg |
C_DEBUGGEE_DETAILS_AND_SWITCH_THREAD_PACKET | The structure of changing thead and show thread packet in HyperDbg |
C_DEBUGGEE_EVENT_AND_ACTION_HEADER_FOR_REMOTE_PACKET | The structure of user-input packet in HyperDbg |
C_DEBUGGEE_FORMATS_PACKET | The structure of .formats result packet in HyperDbg |
C_DEBUGGEE_HALTED_CORE_TASK | Details of setting tasks for the locked (halted) cores |
C_DEBUGGEE_INSTRUMENTATION_STEP_IN_TRACE | Use to trace the execution in the case of instrumentation step-in command (i command) |
C_DEBUGGEE_KD_PAUSED_PACKET | The structure of pausing packet in kHyperDbg |
C_DEBUGGEE_MESSAGE_PACKET | The structure of message packet in HyperDbg |
C_DEBUGGEE_PROCESS_LIST_DETAILS_ENTRY | The structure showing list of processes (details of each entry) |
C_DEBUGGEE_PROCESS_LIST_NEEDED_DETAILS | The structure of needed information to get the details of the process from nt!_EPROCESS and location of needed variables |
C_DEBUGGEE_PROCESS_OR_THREAD_TRACING_DETAILS | Structure to save the state of adding trace for threads and processes |
C_DEBUGGEE_REGISTER_READ_DESCRIPTION | Register Descriptor Structure to use in r command |
C_DEBUGGEE_REGISTER_WRITE_DESCRIPTION | Register Descriptor Structure to write on registers |
C_DEBUGGEE_REQUEST_TO_CHANGE_PROCESS | Request to change the process |
C_DEBUGGEE_REQUEST_TO_CHANGE_THREAD | Request to change the thread |
C_DEBUGGEE_REQUEST_TO_IGNORE_BREAKS_UNTIL_AN_EVENT | Request to pause and halt the system |
C_DEBUGGEE_RESULT_OF_SEARCH_PACKET | The structure of result of search packet in HyperDbg |
C_DEBUGGEE_SCRIPT_PACKET | The structure of script packet in HyperDbg |
C_DEBUGGEE_SEND_GENERAL_PACKET_FROM_DEBUGGEE_TO_DEBUGGER | Request for send general packets from debuggee to debugger |
C_DEBUGGEE_STEP_PACKET | The structure of stepping packet in HyperDbg |
C_DEBUGGEE_SYMBOL_REQUEST_PACKET | The structure of .sym reload packet in HyperDbg |
C_DEBUGGEE_SYMBOL_UPDATE_RESULT | Request that shows, symbol reload process is finished |
C_DEBUGGEE_THREAD_LIST_DETAILS_ENTRY | The structure showing list of threads (details of each entry) |
C_DEBUGGEE_THREAD_LIST_NEEDED_DETAILS | The structure of needed information to get the details of the thread from nt!_ETHREAD and location of needed variables |
C_DEBUGGEE_UD_PAUSED_PACKET | The structure of pausing packet in uHyperDbg |
C_DEBUGGEE_USER_INPUT_PACKET | The structure of user-input packet in HyperDbg |
C_DEBUGGER_ATTACH_DETACH_USER_MODE_PROCESS | Request for attaching user-mode process |
C_DEBUGGER_CALLSTACK_REQUEST | Request for callstack frames |
C_DEBUGGER_CORE_EVENTS | List of all the different events |
C_DEBUGGER_DEBUGGER_TEST_QUERY_BUFFER | Request for test query buffers |
C_DEBUGGER_DT_COMMAND_OPTIONS | Requests options for dt and struct command |
C_DEBUGGER_EDIT_MEMORY | Request for edit virtual and physical memory |
C_DEBUGGER_EVENT | The structure of events in HyperDbg |
C_DEBUGGER_EVENT_ACTION | The structure of actions in HyperDbg |
C_DEBUGGER_EVENT_ACTION_RUN_SCRIPT_CONFIGURATION | Used for run the script |
C_DEBUGGER_EVENT_AND_ACTION_RESULT | Status of register buffers |
C_DEBUGGER_EVENT_FORWARDING | Structures hold the detail of event forwarding |
C_DEBUGGER_EVENT_OPTIONS | Request for performing a short-circuiting event |
C_DEBUGGER_EVENT_REQUEST_BUFFER | Used in the case of requesting a "request buffer" |
C_DEBUGGER_EVENT_REQUEST_CUSTOM_CODE | Used in the case of custom code requests to the debugger |
C_DEBUGGER_FLUSH_LOGGING_BUFFERS | Request for flushing buffers |
C_DEBUGGER_GENERAL_ACTION | Each event can have multiple actions |
C_DEBUGGER_GENERAL_EVENT_DETAIL | Each command is like the following struct, it also used for tracing works in user mode and sending it to the kernl mode |
C_DEBUGGER_HIDE_AND_TRANSPARENT_DEBUGGER_MODE | Request for enable or disable transparent-mode |
C_DEBUGGER_MODIFY_EVENTS | Request for modifying events (enable/disable/clear) |
C_DEBUGGER_PAGE_IN_REQUEST | Requests for the '.pagein' command |
C_DEBUGGER_PAUSE_PACKET_RECEIVED | Request to pause and halt the system |
C_DEBUGGER_PERFORM_KERNEL_TESTS | Request performing kernel tests |
C_DEBUGGER_PREACTIVATE_COMMAND | Requests for the 'preactivate' command |
C_DEBUGGER_PREALLOC_COMMAND | Requests for the 'prealloc' command |
C_DEBUGGER_PREPARE_DEBUGGEE | Request to make this computer to a debuggee |
C_DEBUGGER_PROCESS_THREAD_INFORMATION | The thread/process information |
C_DEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS | Request for query count of active processes and threads |
C_DEBUGGER_READ_AND_WRITE_ON_MSR | Request to read or write on MSRs |
C_DEBUGGER_READ_MEMORY | Request for reading virtual and physical memory |
C_DEBUGGER_READ_PAGE_TABLE_ENTRIES_DETAILS | Request for !pte command |
C_DEBUGGER_REMOTE_PACKET | The structure of remote packets in HyperDbg |
C_DEBUGGER_SEARCH_MEMORY | Request for searching memory |
C_DEBUGGER_SEND_COMMAND_EXECUTION_FINISHED_SIGNAL | Request for send a signal that command execution finished |
C_DEBUGGER_SEND_USERMODE_MESSAGES_TO_DEBUGGER | Request for send a user-mode message to debugger |
C_DEBUGGER_SHORT_CIRCUITING_EVENT | Request for performing a short-circuiting event |
C_DEBUGGER_SINGLE_CALLSTACK_FRAME | The structure for saving the callstack frame of one parameter |
C_DEBUGGER_SYNCRONIZATION_EVENTS_STATE | In debugger holds the state of events |
C_DEBUGGER_TRAP_FLAG_STATE | The status of RFLAGS.TF masking |
C_DEBUGGER_TRIGGERED_EVENT_DETAILS | The structure of detail of a triggered event in HyperDbg |
C_DEBUGGER_UD_COMMAND_ACTION | Description of user-mode debugging actions |
C_DEBUGGER_UD_COMMAND_PACKET | The structure of command packet in uHyperDbg |
C_DEBUGGER_UPDATE_SYMBOL_TABLE | Request to add new symbol detail or update a previous symbol table entry |
C_DEBUGGER_VA2PA_AND_PA2VA_COMMANDS | Requests for !va2pa and !pa2va commands |
C_DIRECT_VMCALL_PARAMETERS | Used for sending direct VMCALLs on the VMX root-mode |
C_DW_APB_SSI_REGISTERS | |
C_EPT_HOOKED_PAGE_DETAIL | Structure to save the state of each hooked pages |
C_EPT_HOOKS_ADDRESS_DETAILS_FOR_EPTHOOK2 | Setting details for EPT Hooks (!epthook2) |
C_EPT_HOOKS_ADDRESS_DETAILS_FOR_MEMORY_MONITOR | Setting details for EPT Hooks (!monitor) |
C_EPT_HOOKS_CONTEXT | Temporary $context used in some EPT hook commands |
C_EPT_SINGLE_HOOK_UNHOOKING_DETAILS | Details of unhooking single EPT hooks |
C_EPT_STATE | Main structure for saving the state of EPT among the project |
C_EVENT_INFORMATION | Event information |
C_FIFO_TX_BLOCK | |
C_HARDWARE_DEBUG_REGISTER_DETAILS | Store the details of a hardware debug register to ignore any trigger for other threads |
C_HIDDEN_HOOKS_DETOUR_DETAILS | Details of detours style EPT hooks |
C_HOST_EXCEPTION_INFO | Filled out when a host exception occurs |
►C_HWDBG_INSTANCE_INFORMATION | The structure of script capabilities information in hwdbg |
C_HWDBG_PORT_INFORMATION_ITEMS | The structure of port information (each item) in hwdbg |
C_HWDBG_SCRIPT_BUFFER | The structure of script buffer in hwdbg |
C_HYPERCALL_INPUT_VALUE | Hypercalls for Hyper-V |
C_IA32_MTRR_FIXED_RANGE_TYPE | Fixed range MTRR |
C_INTERRUPT_INFO | Interrupt injection and event format |
C_INTERRUPT_TRAP_FRAME | Trap frame for interrupts |
C_KD_NMI_STATE | The status of NMI in the kernel debugger |
C_LDR_DATA_TABLE_ENTRY | LDR Data Table 64-bit |
C_LDR_DATA_TABLE_ENTRY32 | LDR Data Table 32-bit |
C_LOCAL_FUNCTION_DESCRIPTION | Save the local function symbols' description |
C_LOG_BUFFER_INFORMATION | Core-specific buffers |
C_MEMORY_MAPPER_ADDRESSES | Memory mapper PTE and reserved virtual address |
C_MESSAGE_TRACING_CALLBACKS | Prototype of each function needed by message tracer |
C_MODULE_SYMBOL_DETAIL | Structures for sending and saving details about each module and symbols details |
C_MSR | General MSR Structure |
C_MTRR_RANGE_DESCRIPTOR | MTRR Descriptor |
C_MX6_UART_REGISTERS | |
C_NMI_BROADCASTING_STATE | The status of NMI broadcasting in VMX |
C_NOTIFY_RECORD | The usermode request |
C_NT_KPROCESS | KPROCESS Brief structure |
C_PAGE_ENTRY | Page Entries |
C_PEB | PEB 64-bit |
C_PEB32 | PEB 32-bit |
C_PEB_LDR_DATA | PEB LDR Data |
C_PEB_LDR_DATA32 | LDR Data 32-bit |
C_POOL_TABLE | Table of holding pools detail structure |
C_PROCESSOR_DEBUGGING_MSR_READ_OR_WRITE | Use to modify Msrs or read MSR values |
C_PROCESSOR_DEBUGGING_STATE | Saves the debugger state |
C_REGISTER_NOTIFY_BUFFER | Used to register event for transferring buffer between user-to-kernel |
C_REQUEST_NEW_ALLOCATION | Manage the requests for new allocations |
C_REVERSING_MACHINE_RECONSTRUCT_MEMORY_REQUEST | Requests for !rev command |
C_RTL_PROCESS_MODULE_INFORMATION | |
C_RTL_PROCESS_MODULES | |
C_RTL_USER_PROCESS_PARAMETERS | User process params |
C_SCRIPT_ENGINE_VARIABLES_LIST | List of different variables |
C_SERIAL_PORT_MAX311XE | |
C_SSDTStruct | SSDT structure |
C_STUPID_STRUCT1 | |
C_STUPID_STRUCT2 | |
C_SYMBOL_LOADED_MODULE_DETAILS | Hold detail about the loaded modules |
C_SYSTEM_MODULE_ENTRY | Module entry |
C_SYSTEM_MODULE_INFORMATION | System Information for modules |
C_TOKEN | Read tokens from input stored in this structure |
C_TOKEN_LIST | This structure is a dynamic container of TOKENS |
C_TRANSPARENCY_MEASUREMENTS | The measurements from user-mode and kernel-mode |
C_TRANSPARENCY_PROCESS | The ProcessList of TRANSPARENCY_MEASUREMENTS is from this architecture |
C_UNICODE_STRING | |
C_USER_KERNEL_EXECUTION_TRAP_STATE | The status user-mode, kernel-mode execution traps for processes |
C_USERMODE_DEBUGGING_PROCESS_DETAILS | Description of each active thread in user-mode attaching mechanism |
C_USERMODE_DEBUGGING_THREAD_DETAILS | Details of each thread in process |
C_USERMODE_DEBUGGING_THREAD_HOLDER | The holder for detail of each thread in process |
C_USERMODE_DEBUGGING_THREAD_OR_PROCESS_STATE_DETAILS | |
C_USERMODE_LOADED_MODULE_DETAILS | |
C_USERMODE_LOADED_MODULE_SYMBOLS | |
C_VIRTUAL_MACHINE_STATE | The status of each core after and before VMX |
C_VM_EXIT_TRANSPARENCY | The status of transparency of each core after and before VMX |
C_VMM_CALLBACKS | Prototype of each function needed by VMM module |
C_VMM_EPT_DYNAMIC_SPLIT | Split 2MB granularity to 4 KB granularity |
C_VMM_EPT_PAGE_TABLE | Structure for saving EPT Table |
C_VMX_SEGMENT_SELECTOR | Segment selector |
C_VMX_VMXOFF_STATE | Save the state of core in the case of VMXOFF |
CACTION_BUFFER | |
CAssembleData | |
CCommandParser | |
CGUEST_EXTRA_REGISTERS | Struct for extra registers |
CGUEST_REGS | |
CHKeyHolder | |
Chv_enlightened_vmcs | |
Chv_gpa_range_for_visibility | |
Chv_msi_address_register | |
Chv_msi_data_register | |
Chv_msi_entry | |
Chv_nested_enlightenments_control | |
Chv_partition_assist_pg | |
Chv_reenlightenment_control | |
Chv_tsc_emulation_control | |
Chv_tsc_emulation_status | |
Chv_vp_assist_msr_contents | |
Chv_vp_assist_page | |
Chv_x64_msr_hypercall_contents | |
CHWDBG_SHORT_SYMBOL | |
CInstructionSet | |
CMODE_BASED_RAM_REGIONS | The RAM regions |
CSYMBOL | |
CSYMBOL_BUFFER | |
CSYMBOL_MAP | |
CUSER_DEFINED_FUNCTION_NODE | |
CVARIABLE_TYPE | |
CVMX_SEGMENT_ACCESS_RIGHTS_TYPE | Describe segment selector in VMX |
CZydisSymbol_ | Defines the ZydisSymbol struct |