Class List

Here are the classes, structs, unions and interfaces with brief descriptions:

NEvalScripts
CEval
CHighLevelScriptGen
CProgram
CStatementGenerator
CIDENTIFIER_DEFINITION
Ngenerator
CGenerator
Ninipp
CFormat
CIni
Nlalr1_parser
CLALR1Parser
Nlalr_parsing
Ngrammar
CNonTerminal
CGrammar
Nlalr_one
CParsingTable
CLrZeroItemTableEntry
Nlr_zero
CAutomaton
Nll1_parser
CLL1Parser
C_ACTIVE_DEBUGGING_PROCESS	Structures related to current thread debugging state
C_ALLOCATED_MEMORY_FOR_SCRIPT_ENGINE_CASTING
C_BUFFER_HEADER	Message buffer structure
C_CMD
C_COMMAND_DETAIL	Details of each command
C_COMPATIBILITY_CHECKS_STATUS	The status of available features in the processor
C_CPU_LBR_MAP	The structure to hold the mapping of CPU model to its LBR capacity
C_CPUID	CPUID Registers
C_CPUID28_EAX
C_CPUID28_EBX
C_CPUID28_ECX
C_CPUID28_LEAFS
C_CR3_TYPE	CR3 Structure
C_CR_FIXED
C_DATE_TIME_HOLDER	Timer for the core
C_DEBUGGEE_BP_DESCRIPTOR	The structure of storing breakpoints
C_DEBUGGEE_BP_LIST_OR_MODIFY_PACKET	The structure of breakpoint modification requests packet in HyperDbg
C_DEBUGGEE_BP_PACKET	The structure of bp command packet in HyperDbg
C_DEBUGGEE_CHANGE_CORE_PACKET	The structure of changing core packet in HyperDbg
C_DEBUGGEE_DETAILS_AND_SWITCH_PROCESS_PACKET	The structure of changing process and show process packet in HyperDbg
C_DEBUGGEE_DETAILS_AND_SWITCH_THREAD_PACKET	The structure of changing thead and show thread packet in HyperDbg
C_DEBUGGEE_EVENT_AND_ACTION_HEADER_FOR_REMOTE_PACKET	The structure of user-input packet in HyperDbg
C_DEBUGGEE_FORMATS_PACKET	Check so the INTERRUPT_DESCRIPTOR_TABLE_ENTRIES_PACKETS should be smaller than packet size
C_DEBUGGEE_HALTED_CORE_TASK	Details of setting tasks for the locked (halted) cores
C_DEBUGGEE_INSTRUMENTATION_STEP_IN_TRACE	Use to trace the execution in the case of instrumentation step-in command (i command)
C_DEBUGGEE_KD_PAUSED_PACKET	The structure of pausing packet in kHyperDbg
C_DEBUGGEE_MESSAGE_PACKET	The structure of message packet in HyperDbg
C_DEBUGGEE_PCIDEVINFO_REQUEST_RESPONSE_PACKET	PCI device info Request-Response Packet, used by !pcicam and future PCI-related commands. Represents a PCI device
C_DEBUGGEE_PCITREE_REQUEST_RESPONSE_PACKET	Pcitree Request-Response Packet. Represents PCI device tree
C_DEBUGGEE_PROCESS_LIST_DETAILS_ENTRY	The structure showing list of processes (details of each entry)
C_DEBUGGEE_PROCESS_LIST_NEEDED_DETAILS	The structure of needed information to get the details of the process from nt!_EPROCESS and location of needed variables
C_DEBUGGEE_PROCESS_OR_THREAD_TRACING_DETAILS	Structure to save the state of adding trace for threads and processes
C_DEBUGGEE_REGISTER_READ_DESCRIPTION	Register Descriptor Structure to use in r command
C_DEBUGGEE_REGISTER_WRITE_DESCRIPTION	Register Descriptor Structure to write on registers
C_DEBUGGEE_REQUEST_TO_CHANGE_PROCESS	Request to change the process
C_DEBUGGEE_REQUEST_TO_CHANGE_THREAD	Request to change the thread
C_DEBUGGEE_REQUEST_TO_IGNORE_BREAKS_UNTIL_AN_EVENT	Request to pause and halt the system
C_DEBUGGEE_RESULT_OF_SEARCH_PACKET	The structure of result of search packet in HyperDbg
C_DEBUGGEE_SCRIPT_PACKET	The structure of script packet in HyperDbg
C_DEBUGGEE_SEND_GENERAL_PACKET_FROM_DEBUGGEE_TO_DEBUGGER	Request for send general packets from debuggee to debugger
C_DEBUGGEE_STEP_PACKET	The structure of stepping packet in HyperDbg
C_DEBUGGEE_SYMBOL_REQUEST_PACKET	The structure of .sym reload packet in HyperDbg
C_DEBUGGEE_SYMBOL_UPDATE_RESULT	Request that shows, symbol reload process is finished
C_DEBUGGEE_THREAD_LIST_DETAILS_ENTRY	The structure showing list of threads (details of each entry)
C_DEBUGGEE_THREAD_LIST_NEEDED_DETAILS	The structure of needed information to get the details of the thread from nt!_ETHREAD and location of needed variables
C_DEBUGGEE_UD_PAUSED_PACKET	The structure of pausing packet in uHyperDbg
C_DEBUGGEE_USER_INPUT_PACKET	The structure of user-input packet in HyperDbg
C_DEBUGGER_APIC_REQUEST	The structure of actions for APIC
C_DEBUGGER_ATTACH_DETACH_USER_MODE_PROCESS	Request for attaching user-mode process
C_DEBUGGER_CALLSTACK_REQUEST	Request for callstack frames
C_DEBUGGER_CORE_EVENTS	List of all the different events
C_DEBUGGER_DEBUGGER_TEST_QUERY_BUFFER	Request for test query buffers
C_DEBUGGER_DT_COMMAND_OPTIONS	Requests options for dt and struct command
C_DEBUGGER_EDIT_MEMORY	Request for edit virtual and physical memory
C_DEBUGGER_EVENT	The structure of events in HyperDbg
C_DEBUGGER_EVENT_ACTION	The structure of actions in HyperDbg
C_DEBUGGER_EVENT_ACTION_RUN_SCRIPT_CONFIGURATION	Used for run the script
C_DEBUGGER_EVENT_AND_ACTION_RESULT	Status of register buffers
C_DEBUGGER_EVENT_FORWARDING	Structures hold the detail of event forwarding
C_DEBUGGER_EVENT_OPTIONS	Request for performing a short-circuiting event
C_DEBUGGER_EVENT_REQUEST_BUFFER	Used in the case of requesting a "request buffer"
C_DEBUGGER_EVENT_REQUEST_CUSTOM_CODE	Used in the case of custom code requests to the debugger
C_DEBUGGER_FLUSH_LOGGING_BUFFERS	Request for flushing buffers
C_DEBUGGER_GENERAL_ACTION	Each event can have multiple actions
C_DEBUGGER_GENERAL_EVENT_DETAIL	Each command is like the following struct, it also used for tracing works in user mode and sending it to the kernl mode
C_DEBUGGER_HIDE_AND_TRANSPARENT_DEBUGGER_MODE	Request for enable or disable transparent-mode
C_DEBUGGER_INIT_HYPERTRACE_PACKET	Request for initializing HyperTrace
C_DEBUGGER_INIT_VMM_PACKET	Request for initializing VMM
C_DEBUGGER_MODIFY_EVENTS	Request for modifying events (enable/disable/clear)
C_DEBUGGER_PAGE_IN_REQUEST	Requests for the '.pagein' command
C_DEBUGGER_PAUSE_PACKET_RECEIVED	Request to pause and halt the system
C_DEBUGGER_PERFORM_KERNEL_TESTS	Request performing kernel tests
C_DEBUGGER_PREACTIVATE_COMMAND	Requests for the 'preactivate' command
C_DEBUGGER_PREALLOC_COMMAND	Requests for the 'prealloc' command
C_DEBUGGER_PREPARE_DEBUGGEE	Request to make this computer to a debuggee
C_DEBUGGER_PROCESS_THREAD_INFORMATION	The thread/process information
C_DEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS	Request for query count of active processes and threads
C_DEBUGGER_READ_AND_WRITE_ON_MSR	Request to read or write on MSRs
C_DEBUGGER_READ_MEMORY	Request for reading virtual and physical memory
C_DEBUGGER_READ_PAGE_TABLE_ENTRIES_DETAILS	Request for !pte command
C_DEBUGGER_REMOTE_PACKET	The structure of remote packets in HyperDbg
C_DEBUGGER_SEARCH_MEMORY	Request for searching memory
C_DEBUGGER_SEND_COMMAND_EXECUTION_FINISHED_SIGNAL	Request for send a signal that command execution finished
C_DEBUGGER_SEND_USERMODE_MESSAGES_TO_DEBUGGER	Request for send a user-mode message to debugger
C_DEBUGGER_SHORT_CIRCUITING_EVENT	Request for performing a short-circuiting event
C_DEBUGGER_SINGLE_CALLSTACK_FRAME	The structure for saving the callstack frame of one parameter
C_DEBUGGER_SYNCRONIZATION_EVENTS_STATE	In debugger holds the state of events
C_DEBUGGER_TRAP_FLAG_STATE	The status of RFLAGS.TF masking
C_DEBUGGER_TRIGGERED_EVENT_DETAILS	The structure of detail of a triggered event in HyperDbg
C_DEBUGGER_UD_COMMAND_ACTION	Description of user-mode debugging actions
C_DEBUGGER_UD_COMMAND_PACKET	The structure of command packet in uHyperDbg
C_DEBUGGER_UPDATE_SYMBOL_TABLE	Request to add new symbol detail or update a previous symbol table entry
C_DEBUGGER_VA2PA_AND_PA2VA_COMMANDS	Requests for !va2pa and !pa2va commands
C_DIRECT_VMCALL_PARAMETERS	Used for sending direct VMCALLs on the VMX root-mode
C_DW_APB_SSI_REGISTERS
C_EPT_HOOKED_PAGE_DETAIL	Structure to save the state of each hooked pages
C_EPT_HOOKS_ADDRESS_DETAILS_FOR_EPTHOOK2	Setting details for EPT Hooks (!epthook2)
C_EPT_HOOKS_ADDRESS_DETAILS_FOR_MEMORY_MONITOR	Setting details for EPT Hooks (!monitor)
C_EPT_HOOKS_CONTEXT	Temporary $context used in some EPT hook commands
C_EPT_SINGLE_HOOK_UNHOOKING_DETAILS	Details of unhooking single EPT hooks
C_EPT_STATE	Main structure for saving the state of EPT among the project
C_EVENT_INFORMATION	Event information
C_FIFO_TX_BLOCK
C_HARDWARE_DEBUG_REGISTER_DETAILS	Store the details of a hardware debug register to ignore any trigger for other threads
C_HIDDEN_HOOKS_DETOUR_DETAILS	Details of detours style EPT hooks
C_HOST_EXCEPTION_INFO	Filled out when a host exception occurs
C_HV_X64_MSR_STIMER_CONFIG_CONTENTS
C_HWDBG_INSTANCE_INFORMATION	The structure of script capabilities information in hwdbg
C_HWDBG_SCRIPT_CAPABILITIES
C_HWDBG_PORT_INFORMATION_ITEMS	The structure of port information (each item) in hwdbg
C_HWDBG_SCRIPT_BUFFER	The structure of script buffer in hwdbg
C_HYPERCALL_INPUT_VALUE	Hypercalls for Hyper-V
C_HYPEREVADE_CALLBACKS	Prototype of each function needed by hyperevade module
C_HYPERPERF_CALLBACKS	Prototype of each function needed by hyperperf module
C_HYPERTRACE_CALLBACKS	Prototype of each function needed by hypertrace module
C_HYPERTRACE_LBR_DUMP_PACKETS	The structure of HyperTrace LBR dump result packet in HyperDbg
C_HYPERTRACE_LBR_OPERATION_PACKETS	The structure of HyperTrace LBR result packet in HyperDbg
C_HYPERTRACE_PT_MMAP_PACKETS	Result packet for the HyperTrace PT mmap surface
C_HYPERTRACE_PT_OPERATION_PACKETS	The structure of HyperTrace PT result packet in HyperDbg
C_IA32_LBR_CTL_REGISTER	The structure to hold the IA32_LBR_CTL MSR, which is used to enable and configure the LBR feature
C_IA32_MTRR_FIXED_RANGE_TYPE	Fixed range MTRR
C_IMAGE_DOS_HEADER
C_IMAGE_FILE_HEADER
C_IMAGE_SECTION_HEADER
C_INCLUDE_NODE	Include file linked list node
C_INTERRUPT_DESCRIPTOR_TABLE_ENTRIES_PACKETS	The structure of IDT entries result packet in HyperDbg
C_INTERRUPT_INFO	Interrupt injection and event format
C_INTERRUPT_TRAP_FRAME	Trap frame for interrupts
C_IO_APIC_ENT
C_IO_APIC_ENTRY_PACKETS	The structure of I/O APIC result packet in HyperDbg
C_KD_NMI_STATE	The status of NMI in the kernel debugger
C_KDESCRIPTOR64
C_KIDT_ENTRY
C_KIDTENTRY64
C_LAPIC_PAGE	LAPIC structure and offsets
C_LBR_BRANCH_ENTRY	The structure to hold a single LBR entry (from and to addresses)
C_LBR_STACK_ENTRY	The structure to hold the LBR stack for a single processor core, including the branch entries and the TOS index
C_LDR_DATA_TABLE_ENTRY	LDR Data Table 64-bit
C_LDR_DATA_TABLE_ENTRY32	LDR Data Table 32-bit
C_LOCAL_FUNCTION_DESCRIPTION	Save the local function symbols' description
C_LOG_BUFFER_INFORMATION	Core-specific buffers
C_MEMORY_MAPPER_ADDRESSES	Memory mapper PTE and reserved virtual address
C_MESSAGE_TRACING_CALLBACKS	Prototype of each function needed by message tracer
C_MODULE_SYMBOL_DETAIL	Structures for sending and saving details about each module and symbols details
C_MSR	General MSR Structure
C_MTRR_RANGE_DESCRIPTOR	MTRR Descriptor
C_MX6_UART_REGISTERS
C_NMI_BROADCASTING_STATE	The status of NMI broadcasting in VMX
C_NOTIFY_RECORD	The usermode request
C_NT_KPROCESS	KPROCESS Brief structure
C_PAGE_ENTRY	Page Entries
C_PCI_DEV	PCI Device Data Structure
C_PCI_DEV_MINIMAL	PCI Device Minimal Data Structure for !pcitree
C_PCI_DEV_MMIOBAR_INFO	PCI Device MMIO BAR Metadata
C_PE_IMAGE_READER
C_PE_RAW_SECTION_RANGE
C_PEB	PEB 64-bit
C_PEB32	PEB 32-bit
C_PEB_LDR_DATA	PEB LDR Data
C_PEB_LDR_DATA32	LDR Data 32-bit
C_POOL_TABLE	Table of holding pools detail structure
C_PORTABLE_PCI_COMMON_HEADER	PCI Common Header
C_PORTABLE_PCI_CONFIG_SPACE_HEADER	PCI Configuration Space Header
C_PORTABLE_PCI_CONFIG_SPACE_HEADER_MINIMAL	PCI Configuration Space Minimal Header for !pcitree
C_PORTABLE_PCI_DEVICE_HEADER	PCI Device Header
C_PORTABLE_PCI_EP_HEADER
C_PORTABLE_PCI_BRIDGE_HEADER
C_PROC_BASIC_INFO
C_PROCESSOR_DEBUGGING_MSR_READ_OR_WRITE	Use to modify Msrs or read MSR values
C_PROCESSOR_DEBUGGING_STATE	Saves the debugger state
C_PT_ADDR_RANGE	Intel PT IP filter range
C_PT_BUFFER	Per-CPU PT buffer layout
C_PT_CAPABILITIES	Discovered Intel PT capabilities (populated from CPUID leaf 0x14)
C_PT_FILTER_OPTIONS	Narrow input descriptor for PtFilter
C_PT_OUTPUT_BUFFER	Trace output descriptor
C_PT_OUTPUT_MASK_PTRS_REGISTER	IA32_RTIT_OUTPUT_MASK_PTRS — Output position tracker
C_PT_PER_CPU	Per-CPU Intel PT state — one of these per logical processor
C_PT_RTIT_CTL_REGISTER	IA32_RTIT_CTL — PT master control register
C_PT_RTIT_STATUS_REGISTER	IA32_RTIT_STATUS — PT status / error register
C_PT_TOPA_ENTRY	ToPA Table Entry
C_PT_TRACE_CONFIG	Intel PT trace configuration — what the user specifies
C_PT_USER_BUFFER_DESC	One per-CPU descriptor returned by the PT mmap surface
C_PT_USER_MAPPING	Per-CPU bookkeeping for the user-mode mmap surface
C_REGISTER_NOTIFY_BUFFER	Used to register event for transferring buffer between user-to-kernel
C_REQUEST_NEW_ALLOCATION	Manage the requests for new allocations
C_REVERSING_MACHINE_RECONSTRUCT_MEMORY_REQUEST	Requests for !rev command
C_RICH_HEADER
C_RICH_HEADER_ENTRY
C_RICH_HEADER_INFO
C_RSDS_FAKE_FALLBACK_CONTEXT
C_RTL_PROCESS_MODULE_INFORMATION
C_RTL_PROCESS_MODULES
C_RTL_USER_PROCESS_PARAMETERS	User process params
C_SCRIPT_ENGINE_GENERAL_REGISTERS	List of different variables
C_SCRIPT_ENGINE_TOKEN	Read tokens from input stored in this structure
C_SCRIPT_ENGINE_TOKEN_LIST	This structure is a dynamic container of TOKENS
C_SERIAL_PORT_MAX311XE
C_SIDT_ENTRY
C_SMI_OPERATION_PACKETS	The structure of I/O APIC result packet in HyperDbg
C_SSDT_STRUCT	SSDT structure
C_STUPID_STRUCT1
C_STUPID_STRUCT2
C_SYMBOL_LOADED_MODULE_DETAILS	Hold detail about the loaded modules
C_SYSCALL_CALLBACK_CONTEXT_PARAMS	The (optional) context parameters for the transparent-mode
C_SYSCALL_CALLBACK_PROCESS_THREAD_INFORMATION	The thread/process information
C_SYSCALL_CALLBACK_TRAP_FLAG_STATE	The threads that we expect to get the trap flag
C_SYSTEM_CALL_NUMBERS_INFORMATION	Windows System call values that are intercepted by transparency mode
C_SYSTEM_CODEINTEGRITY_INFORMATION	System Information for Code Integrity
C_SYSTEM_MODULE_ENTRY	Module entry
C_SYSTEM_MODULE_INFORMATION	System Information for modules
C_SYSTEM_PROCESS_INFORMATION	System Information for running processes
C_TRANSPARENCY_MEASUREMENTS	The measurements from user-mode and kernel-mode
C_TRANSPARENCY_PROCESS	The ProcessList of TRANSPARENCY_MEASUREMENTS is from this architecture
C_UNICODE_STRING
C_USER_DEFINED_FUNCTION_NODE	User-defined function linked list node
C_USER_KERNEL_EXECUTION_TRAP_STATE	The status user-mode, kernel-mode execution traps for processes
C_USERMODE_DEBUGGING_PROCESS_DETAILS	Description of each active thread in user-mode attaching mechanism
C_USERMODE_DEBUGGING_THREAD_DETAILS	Details of each thread in process
C_USERMODE_DEBUGGING_THREAD_HOLDER	The holder for detail of each thread in process
C_USERMODE_DEBUGGING_THREAD_OR_PROCESS_STATE_DETAILS
C_USERMODE_LOADED_MODULE_DETAILS
C_USERMODE_LOADED_MODULE_SYMBOLS
C_VARIABLE_TYPE
C_VIRTUAL_MACHINE_STATE	The status of each core after and before VMX
C_VM_EXIT_TRANSPARENCY	The status of transparency of each core after and before VMX
C_VMM_CALLBACKS	Prototype of each function needed by VMM module
C_VMM_EPT_DYNAMIC_SPLIT	Split 2MB granularity to 4 KB granularity
C_VMM_EPT_PAGE_TABLE	Structure for saving EPT Table
C_VMX_SEGMENT_SELECTOR	Segment selector
C_VMX_VMXOFF_STATE	Save the state of core in the case of VMXOFF
CACTION_BUFFER
CAssembleData
CCommandParser
CDevice
CGUEST_EXTRA_REGISTERS	Struct for extra registers
CGUEST_REGS
CGUEST_XMM_REGS
Chv_enlightened_vmcs
Chv_gpa_range_for_visibility
Chv_msi_address_register
Chv_msi_data_register
Chv_msi_entry
Chv_nested_enlightenments_control
Chv_partition_assist_pg
Chv_reenlightenment_control
Chv_tsc_emulation_control
Chv_tsc_emulation_status
Chv_vp_assist_msr_contents
Chv_vp_assist_page
Chv_x64_msr_hypercall_contents
CHWDBG_SHORT_SYMBOL
CInstructionSet
CMODE_BASED_RAM_REGIONS	The RAM regions
CMSR_LBR_INFO
CSubDevice
CSYMBOL
CSYMBOL_BUFFER
CSYMBOL_MAP
CVendor
CVMX_SEGMENT_ACCESS_RIGHTS_TYPE	Describe segment selector in VMX
CXMM_REG
CZydisSymbol_	Defines the ZydisSymbol struct