HyperDbg's SDK Headers Request Packets. More...

#include "Pcie.h"

Classes
struct	_DEBUGGER_INIT_VMM_PACKET
	request for initializing VMM More...
struct	_DEBUGGER_INIT_HYPERTRACE_PACKET
	request for initializing HyperTrace More...
struct	_DEBUGGER_READ_PAGE_TABLE_ENTRIES_DETAILS
	request for !pte command More...
struct	_DEBUGGER_VA2PA_AND_PA2VA_COMMANDS
	requests for !va2pa and !pa2va commands More...
struct	_DEBUGGER_PAGE_IN_REQUEST
	requests for the '.pagein' command More...
struct	_REVERSING_MACHINE_RECONSTRUCT_MEMORY_REQUEST
	requests for !rev command More...
struct	_DEBUGGER_DT_COMMAND_OPTIONS
	requests options for dt and struct command More...
struct	_DEBUGGER_PREALLOC_COMMAND
	requests for the 'prealloc' command More...
struct	_DEBUGGER_PREACTIVATE_COMMAND
	requests for the 'preactivate' command More...
struct	_DEBUGGER_READ_MEMORY
	request for reading virtual and physical memory More...
struct	_DEBUGGER_FLUSH_LOGGING_BUFFERS
	request for flushing buffers More...
struct	_DEBUGGER_DEBUGGER_TEST_QUERY_BUFFER
	request for test query buffers More...
struct	_DEBUGGER_PERFORM_KERNEL_TESTS
	request performing kernel tests More...
struct	_DEBUGGER_SEND_COMMAND_EXECUTION_FINISHED_SIGNAL
	request for send a signal that command execution finished More...
struct	_DEBUGGEE_SEND_GENERAL_PACKET_FROM_DEBUGGEE_TO_DEBUGGER
	request for send general packets from debuggee to debugger More...
struct	_DEBUGGER_SEND_USERMODE_MESSAGES_TO_DEBUGGER
	request for send a user-mode message to debugger More...
struct	_DEBUGGER_READ_AND_WRITE_ON_MSR
	request to read or write on MSRs More...
struct	_DEBUGGER_EDIT_MEMORY
	request for edit virtual and physical memory More...
struct	_DEBUGGER_SEARCH_MEMORY
	request for searching memory More...
struct	_SYSTEM_CALL_NUMBERS_INFORMATION
	Windows System call values that are intercepted by transparency mode. More...
struct	_DEBUGGER_HIDE_AND_TRANSPARENT_DEBUGGER_MODE
	request for enable or disable transparent-mode More...
struct	_DEBUGGER_PREPARE_DEBUGGEE
	request to make this computer to a debuggee More...
struct	_DEBUGGEE_CHANGE_CORE_PACKET
	The structure of changing core packet in HyperDbg. More...
struct	_DEBUGGER_ATTACH_DETACH_USER_MODE_PROCESS
	request for attaching user-mode process More...
struct	_DEBUGGEE_PROCESS_LIST_NEEDED_DETAILS
	The structure of needed information to get the details of the process from nt!_EPROCESS and location of needed variables. More...
struct	_DEBUGGEE_THREAD_LIST_NEEDED_DETAILS
	The structure of needed information to get the details of the thread from nt!_ETHREAD and location of needed variables. More...
struct	_DEBUGGEE_PROCESS_LIST_DETAILS_ENTRY
	The structure showing list of processes (details of each entry). More...
struct	_DEBUGGEE_THREAD_LIST_DETAILS_ENTRY
	The structure showing list of threads (details of each entry). More...
struct	_DEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS
	request for query count of active processes and threads More...
struct	_DEBUGGER_SINGLE_CALLSTACK_FRAME
	The structure for saving the callstack frame of one parameter. More...
struct	_DEBUGGER_CALLSTACK_REQUEST
	request for callstack frames More...
struct	_USERMODE_DEBUGGING_THREAD_OR_PROCESS_STATE_DETAILS
struct	_DEBUGGER_EVENT_ACTION_RUN_SCRIPT_CONFIGURATION
	Used for run the script. More...
struct	_DEBUGGER_EVENT_REQUEST_BUFFER
	used in the case of requesting a "request buffer" More...
struct	_DEBUGGER_EVENT_REQUEST_CUSTOM_CODE
	used in the case of custom code requests to the debugger More...
struct	_DEBUGGER_UD_COMMAND_ACTION
	Description of user-mode debugging actions. More...
struct	_DEBUGGER_UD_COMMAND_PACKET
	The structure of command packet in uHyperDbg. More...
struct	_DEBUGGEE_DETAILS_AND_SWITCH_PROCESS_PACKET
	The structure of changing process and show process packet in HyperDbg. More...
struct	_DEBUGGEE_DETAILS_AND_SWITCH_THREAD_PACKET
	The structure of changing thead and show thread packet in HyperDbg. More...
struct	_DEBUGGEE_STEP_PACKET
	The structure of stepping packet in HyperDbg. More...
struct	_DEBUGGER_APIC_REQUEST
	The structure of actions for APIC. More...
struct	_LAPIC_PAGE
	LAPIC structure and offsets. More...
struct	_IO_APIC_ENTRY_PACKETS
	The structure of I/O APIC result packet in HyperDbg. More...
struct	_SMI_OPERATION_PACKETS
	The structure of I/O APIC result packet in HyperDbg. More...
struct	_HYPERTRACE_LBR_OPERATION_PACKETS
	The structure of HyperTrace LBR result packet in HyperDbg. More...
struct	_HYPERTRACE_LBR_DUMP_PACKETS
	The structure of HyperTrace LBR dump result packet in HyperDbg. More...
struct	_HYPERTRACE_PT_OPERATION_PACKETS
	The structure of HyperTrace PT result packet in HyperDbg. More...
struct	_HYPERTRACE_PT_MMAP_PACKETS
	Result packet for the HyperTrace PT mmap surface. More...
struct	_INTERRUPT_DESCRIPTOR_TABLE_ENTRIES_PACKETS
	The structure of IDT entries result packet in HyperDbg. More...
struct	_DEBUGGEE_FORMATS_PACKET
	check so the INTERRUPT_DESCRIPTOR_TABLE_ENTRIES_PACKETS should be smaller than packet size More...
struct	_DEBUGGEE_SYMBOL_REQUEST_PACKET
	The structure of .sym reload packet in HyperDbg. More...
struct	_DEBUGGEE_BP_PACKET
	The structure of bp command packet in HyperDbg. More...
struct	_DEBUGGEE_BP_LIST_OR_MODIFY_PACKET
	The structure of breakpoint modification requests packet in HyperDbg. More...
struct	_DEBUGGEE_SCRIPT_PACKET
	The structure of script packet in HyperDbg. More...
struct	_DEBUGGEE_RESULT_OF_SEARCH_PACKET
	The structure of result of search packet in HyperDbg. More...
struct	_DEBUGGEE_REGISTER_READ_DESCRIPTION
	Register Descriptor Structure to use in r command. More...
struct	_DEBUGGEE_REGISTER_WRITE_DESCRIPTION
	Register Descriptor Structure to write on registers. More...
struct	_DEBUGGEE_PCITREE_REQUEST_RESPONSE_PACKET
	Pcitree Request-Response Packet. Represents PCI device tree. More...
struct	_DEBUGGEE_PCIDEVINFO_REQUEST_RESPONSE_PACKET
	PCI device info Request-Response Packet, used by !pcicam and future PCI-related commands. Represents a PCI device. More...

Macros
#define	SIZEOF_DEBUGGER_INIT_VMM_PACKET sizeof(DEBUGGER_INIT_VMM_PACKET)
#define	SIZEOF_DEBUGGER_INIT_HYPERTRACE_PACKET sizeof(DEBUGGER_INIT_HYPERTRACE_PACKET)
#define	SIZEOF_DEBUGGER_READ_PAGE_TABLE_ENTRIES_DETAILS sizeof(DEBUGGER_READ_PAGE_TABLE_ENTRIES_DETAILS)
#define	SIZEOF_DEBUGGER_VA2PA_AND_PA2VA_COMMANDS sizeof(DEBUGGER_VA2PA_AND_PA2VA_COMMANDS)
#define	SIZEOF_DEBUGGER_PAGE_IN_REQUEST sizeof(DEBUGGER_PAGE_IN_REQUEST)
#define	SIZEOF_REVERSING_MACHINE_RECONSTRUCT_MEMORY_REQUEST sizeof(REVERSING_MACHINE_RECONSTRUCT_MEMORY_REQUEST)
#define	SIZEOF_DEBUGGER_DT_COMMAND_OPTIONS sizeof(DEBUGGER_DT_COMMAND_OPTIONS)
#define	SIZEOF_DEBUGGER_PREALLOC_COMMAND sizeof(DEBUGGER_PREALLOC_COMMAND)
#define	SIZEOF_DEBUGGER_PREACTIVATE_COMMAND sizeof(DEBUGGER_PREACTIVATE_COMMAND)
#define	SIZEOF_DEBUGGER_READ_MEMORY sizeof(DEBUGGER_READ_MEMORY)
#define	SIZEOF_DEBUGGER_FLUSH_LOGGING_BUFFERS sizeof(DEBUGGER_FLUSH_LOGGING_BUFFERS)
#define	SIZEOF_DEBUGGER_TEST_QUERY_BUFFER sizeof(DEBUGGER_TEST_QUERY_BUFFER)
#define	SIZEOF_DEBUGGER_PERFORM_KERNEL_TESTS sizeof(DEBUGGER_PERFORM_KERNEL_TESTS)
#define	SIZEOF_DEBUGGER_SEND_COMMAND_EXECUTION_FINISHED_SIGNAL sizeof(DEBUGGER_SEND_COMMAND_EXECUTION_FINISHED_SIGNAL)
#define	SIZEOF_DEBUGGEE_SEND_GENERAL_PACKET_FROM_DEBUGGEE_TO_DEBUGGER sizeof(DEBUGGEE_SEND_GENERAL_PACKET_FROM_DEBUGGEE_TO_DEBUGGER)
#define	SIZEOF_DEBUGGER_SEND_USERMODE_MESSAGES_TO_DEBUGGER sizeof(DEBUGGER_SEND_USERMODE_MESSAGES_TO_DEBUGGER)
#define	SIZEOF_DEBUGGER_READ_AND_WRITE_ON_MSR sizeof(DEBUGGER_READ_AND_WRITE_ON_MSR)
#define	SIZEOF_DEBUGGER_READ_AND_WRITE_ON_MSR sizeof(DEBUGGER_READ_AND_WRITE_ON_MSR)
#define	SIZEOF_DEBUGGER_EDIT_MEMORY sizeof(DEBUGGER_EDIT_MEMORY)
#define	SIZEOF_DEBUGGER_SEARCH_MEMORY sizeof(DEBUGGER_SEARCH_MEMORY)
#define	SIZEOF_DEBUGGER_HIDE_AND_TRANSPARENT_DEBUGGER_MODE sizeof(DEBUGGER_HIDE_AND_TRANSPARENT_DEBUGGER_MODE)
#define	SIZEOF_DEBUGGER_PREPARE_DEBUGGEE sizeof(DEBUGGER_PREPARE_DEBUGGEE)
#define	SIZEOF_DEBUGGER_ATTACH_DETACH_USER_MODE_PROCESS sizeof(DEBUGGER_ATTACH_DETACH_USER_MODE_PROCESS)
#define	SIZEOF_DEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS sizeof(DEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS)
#define	SIZEOF_DEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS sizeof(DEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS)
#define	SIZEOF_DEBUGGER_CALLSTACK_REQUEST sizeof(DEBUGGER_CALLSTACK_REQUEST)
#define	SIZEOF_USERMODE_DEBUGGING_THREAD_OR_PROCESS_STATE_DETAILS sizeof(USERMODE_DEBUGGING_THREAD_OR_PROCESS_STATE_DETAILS)
#define	SIZEOF_DEBUGGER_UD_COMMAND_PACKET sizeof(DEBUGGER_UD_COMMAND_PACKET)
#define	SIZEOF_DEBUGGEE_DETAILS_AND_SWITCH_PROCESS_PACKET sizeof(DEBUGGEE_DETAILS_AND_SWITCH_PROCESS_PACKET)
	Debugger size of DEBUGGEE_DETAILS_AND_SWITCH_PROCESS_PACKET.
#define	SIZEOF_DEBUGGEE_DETAILS_AND_SWITCH_THREAD_PACKET sizeof(DEBUGGEE_DETAILS_AND_SWITCH_THREAD_PACKET)
	Debugger size of DEBUGGEE_DETAILS_AND_SWITCH_THREAD_PACKET.
#define	DEBUGGER_REMOTE_TRACKING_DEFAULT_COUNT_OF_STEPPING 0xffffffff
	default number of instructions used in tracking and stepping
#define	SIZEOF_DEBUGGER_APIC_REQUEST sizeof(DEBUGGER_APIC_REQUEST)
	Debugger size of DEBUGGER_APIC_REQUEST.
#define	LAPIC_SIZE 0x400
	LAPIC structure size.
#define	LAPIC_LVT_FLAG_ENTRY_MASKED (1UL << 16)
#define	LAPIC_LVT_DELIVERY_MODE_EXT_INT (7UL << 8)
#define	LAPIC_SVR_FLAG_SW_ENABLE (1UL << 8)
#define	MAX_NUMBER_OF_IO_APIC_ENTRIES 400
	Maximum number of I/O APIC entries.
#define	SIZEOF_SMI_OPERATION_PACKETS sizeof(SMI_OPERATION_PACKETS)
	Debugger size of SMI_OPERATION_PACKETS.
#define	SIZEOF_HYPERTRACE_LBR_OPERATION_PACKETS sizeof(HYPERTRACE_LBR_OPERATION_PACKETS)
	Debugger size of HYPERTRACE_LBR_OPERATION_PACKETS.
#define	HYPERTRACE_LBR_DUMP_ALL_CORES 0xffffffff
	In the case of dumping all cores, this value is used to specify that all cores should be dumped.
#define	SIZEOF_HYPERTRACE_LBR_DUMP_PACKETS sizeof(HYPERTRACE_LBR_DUMP_PACKETS)
	Debugger size of HYPERTRACE_LBR_DUMP_PACKETS.
#define	SIZEOF_HYPERTRACE_PT_OPERATION_PACKETS sizeof(HYPERTRACE_PT_OPERATION_PACKETS)
	Debugger size of HYPERTRACE_PT_OPERATION_PACKETS.
#define	SIZEOF_HYPERTRACE_PT_MMAP_PACKETS sizeof(HYPERTRACE_PT_MMAP_PACKETS)
	Debugger size of HYPERTRACE_PT_MMAP_PACKETS.
#define	MAX_NUMBER_OF_IDT_ENTRIES 256
	Maximum number of IDT entries.
#define	SIZEOF_INTERRUPT_DESCRIPTOR_TABLE_ENTRIES_PACKETS sizeof(INTERRUPT_DESCRIPTOR_TABLE_ENTRIES_PACKETS)
	Debugger size of INTERRUPT_DESCRIPTOR_TABLE_ENTRIES_PACKETS.
#define	SIZEOF_DEBUGGEE_BP_PACKET sizeof(DEBUGGEE_BP_PACKET)
	Debugger size of DEBUGGEE_BP_PACKET.
#define	SIZEOF_DEBUGGEE_PCITREE_REQUEST_RESPONSE_PACKET sizeof(DEBUGGEE_PCITREE_REQUEST_RESPONSE_PACKET)
#define	SIZEOF_DEBUGGEE_PCIDEVINFO_REQUEST_RESPONSE_PACKET sizeof(DEBUGGEE_PCIDEVINFO_REQUEST_RESPONSE_PACKET)
	check so the DEBUGGEE_PCITREE_REQUEST_RESPONSE_PACKET should be smaller than packet size

Typedefs
typedef struct _DEBUGGER_INIT_VMM_PACKET	DEBUGGER_INIT_VMM_PACKET
	request for initializing VMM
typedef struct _DEBUGGER_INIT_VMM_PACKET *	PDEBUGGER_INIT_VMM_PACKET
typedef struct _DEBUGGER_INIT_HYPERTRACE_PACKET	DEBUGGER_INIT_HYPERTRACE_PACKET
	request for initializing HyperTrace
typedef struct _DEBUGGER_INIT_HYPERTRACE_PACKET *	PDEBUGGER_INIT_HYPERTRACE_PACKET
typedef struct _DEBUGGER_READ_PAGE_TABLE_ENTRIES_DETAILS	DEBUGGER_READ_PAGE_TABLE_ENTRIES_DETAILS
	request for !pte command
typedef struct _DEBUGGER_READ_PAGE_TABLE_ENTRIES_DETAILS *	PDEBUGGER_READ_PAGE_TABLE_ENTRIES_DETAILS
typedef struct _DEBUGGER_VA2PA_AND_PA2VA_COMMANDS	DEBUGGER_VA2PA_AND_PA2VA_COMMANDS
	requests for !va2pa and !pa2va commands
typedef struct _DEBUGGER_VA2PA_AND_PA2VA_COMMANDS *	PDEBUGGER_VA2PA_AND_PA2VA_COMMANDS
typedef struct _DEBUGGER_PAGE_IN_REQUEST	DEBUGGER_PAGE_IN_REQUEST
	requests for the '.pagein' command
typedef struct _DEBUGGER_PAGE_IN_REQUEST *	PDEBUGGER_PAGE_IN_REQUEST
typedef enum _REVERSING_MACHINE_RECONSTRUCT_MEMORY_MODE	REVERSING_MACHINE_RECONSTRUCT_MEMORY_MODE
	different modes of reconstruct requests
typedef enum _REVERSING_MACHINE_RECONSTRUCT_MEMORY_TYPE	REVERSING_MACHINE_RECONSTRUCT_MEMORY_TYPE
	different types of reconstruct requests
typedef struct _REVERSING_MACHINE_RECONSTRUCT_MEMORY_REQUEST	REVERSING_MACHINE_RECONSTRUCT_MEMORY_REQUEST
	requests for !rev command
typedef struct _REVERSING_MACHINE_RECONSTRUCT_MEMORY_REQUEST *	PREVERSING_MACHINE_RECONSTRUCT_MEMORY_REQUEST
typedef struct _DEBUGGER_DT_COMMAND_OPTIONS	DEBUGGER_DT_COMMAND_OPTIONS
	requests options for dt and struct command
typedef struct _DEBUGGER_DT_COMMAND_OPTIONS *	PDEBUGGER_DT_COMMAND_OPTIONS
typedef enum _DEBUGGER_PREALLOC_COMMAND_TYPE	DEBUGGER_PREALLOC_COMMAND_TYPE
	different types of prealloc requests
typedef struct _DEBUGGER_PREALLOC_COMMAND	DEBUGGER_PREALLOC_COMMAND
	requests for the 'prealloc' command
typedef struct _DEBUGGER_PREALLOC_COMMAND *	PDEBUGGER_PREALLOC_COMMAND
typedef enum _DEBUGGER_PREACTIVATE_COMMAND_TYPE	DEBUGGER_PREACTIVATE_COMMAND_TYPE
	different types of preactivate requests
typedef struct _DEBUGGER_PREACTIVATE_COMMAND	DEBUGGER_PREACTIVATE_COMMAND
	requests for the 'preactivate' command
typedef struct _DEBUGGER_PREACTIVATE_COMMAND *	PDEBUGGER_PREACTIVATE_COMMAND
typedef enum _DEBUGGER_READ_READING_TYPE	DEBUGGER_READ_READING_TYPE
	different types of reading memory
typedef enum _DEBUGGER_READ_MEMORY_TYPE	DEBUGGER_READ_MEMORY_TYPE
	different type of addresses
typedef enum _DEBUGGER_READ_MEMORY_ADDRESS_MODE	DEBUGGER_READ_MEMORY_ADDRESS_MODE
	different address mode
typedef enum _DEBUGGER_SHOW_MEMORY_STYLE	DEBUGGER_SHOW_MEMORY_STYLE
	the way that debugger should show the details of memory or disassemble them
typedef struct _DEBUGGER_READ_MEMORY	DEBUGGER_READ_MEMORY
	request for reading virtual and physical memory
typedef struct _DEBUGGER_READ_MEMORY *	PDEBUGGER_READ_MEMORY
typedef struct _DEBUGGER_FLUSH_LOGGING_BUFFERS	DEBUGGER_FLUSH_LOGGING_BUFFERS
	request for flushing buffers
typedef struct _DEBUGGER_FLUSH_LOGGING_BUFFERS *	PDEBUGGER_FLUSH_LOGGING_BUFFERS
typedef enum _DEBUGGER_TEST_QUERY_STATE	DEBUGGER_TEST_QUERY_STATE
	test query used for test purposed
typedef struct _DEBUGGER_DEBUGGER_TEST_QUERY_BUFFER	DEBUGGER_DEBUGGER_TEST_QUERY_BUFFER
	request for test query buffers
typedef struct _DEBUGGER_DEBUGGER_TEST_QUERY_BUFFER *	PDEBUGGER_DEBUGGER_TEST_QUERY_BUFFER
typedef struct _DEBUGGER_PERFORM_KERNEL_TESTS	DEBUGGER_PERFORM_KERNEL_TESTS
	request performing kernel tests
typedef struct _DEBUGGER_PERFORM_KERNEL_TESTS *	PDEBUGGER_PERFORM_KERNEL_TESTS
typedef struct _DEBUGGER_SEND_COMMAND_EXECUTION_FINISHED_SIGNAL	DEBUGGER_SEND_COMMAND_EXECUTION_FINISHED_SIGNAL
	request for send a signal that command execution finished
typedef struct _DEBUGGER_SEND_COMMAND_EXECUTION_FINISHED_SIGNAL *	PDEBUGGER_SEND_COMMAND_EXECUTION_FINISHED_SIGNAL
typedef struct _DEBUGGEE_SEND_GENERAL_PACKET_FROM_DEBUGGEE_TO_DEBUGGER	DEBUGGEE_SEND_GENERAL_PACKET_FROM_DEBUGGEE_TO_DEBUGGER
	request for send general packets from debuggee to debugger
typedef struct _DEBUGGEE_SEND_GENERAL_PACKET_FROM_DEBUGGEE_TO_DEBUGGER *	PDEBUGGEE_SEND_GENERAL_PACKET_FROM_DEBUGGEE_TO_DEBUGGER
typedef struct _DEBUGGER_SEND_USERMODE_MESSAGES_TO_DEBUGGER	DEBUGGER_SEND_USERMODE_MESSAGES_TO_DEBUGGER
	request for send a user-mode message to debugger
typedef struct _DEBUGGER_SEND_USERMODE_MESSAGES_TO_DEBUGGER *	PDEBUGGER_SEND_USERMODE_MESSAGES_TO_DEBUGGER
typedef enum _DEBUGGER_MSR_ACTION_TYPE	DEBUGGER_MSR_ACTION_TYPE
	different types of actions on MSRs
typedef struct _DEBUGGER_READ_AND_WRITE_ON_MSR	DEBUGGER_READ_AND_WRITE_ON_MSR
	request to read or write on MSRs
typedef struct _DEBUGGER_READ_AND_WRITE_ON_MSR *	PDEBUGGER_READ_AND_WRITE_ON_MSR
typedef enum _DEBUGGER_EDIT_MEMORY_TYPE	DEBUGGER_EDIT_MEMORY_TYPE
	different type of addresses for editing memory
typedef enum _DEBUGGER_EDIT_MEMORY_BYTE_SIZE	DEBUGGER_EDIT_MEMORY_BYTE_SIZE
	size of editing memory
typedef struct _DEBUGGER_EDIT_MEMORY	DEBUGGER_EDIT_MEMORY
	request for edit virtual and physical memory
typedef struct _DEBUGGER_EDIT_MEMORY *	PDEBUGGER_EDIT_MEMORY
typedef enum _DEBUGGER_SEARCH_MEMORY_TYPE	DEBUGGER_SEARCH_MEMORY_TYPE
	different types of address for searching on memory
typedef enum _DEBUGGER_SEARCH_MEMORY_BYTE_SIZE	DEBUGGER_SEARCH_MEMORY_BYTE_SIZE
	different sizes on searching memory
typedef struct _DEBUGGER_SEARCH_MEMORY	DEBUGGER_SEARCH_MEMORY
	request for searching memory
typedef struct _DEBUGGER_SEARCH_MEMORY *	PDEBUGGER_SEARCH_MEMORY
typedef struct _SYSTEM_CALL_NUMBERS_INFORMATION	SYSTEM_CALL_NUMBERS_INFORMATION
	Windows System call values that are intercepted by transparency mode.
typedef struct _SYSTEM_CALL_NUMBERS_INFORMATION *	PSYSTEM_CALL_NUMBERS_INFORMATION
typedef struct _DEBUGGER_HIDE_AND_TRANSPARENT_DEBUGGER_MODE	DEBUGGER_HIDE_AND_TRANSPARENT_DEBUGGER_MODE
	request for enable or disable transparent-mode
typedef struct _DEBUGGER_HIDE_AND_TRANSPARENT_DEBUGGER_MODE *	PDEBUGGER_HIDE_AND_TRANSPARENT_DEBUGGER_MODE
typedef struct _DEBUGGER_PREPARE_DEBUGGEE	DEBUGGER_PREPARE_DEBUGGEE
	request to make this computer to a debuggee
typedef struct _DEBUGGER_PREPARE_DEBUGGEE *	PDEBUGGER_PREPARE_DEBUGGEE
typedef struct _DEBUGGEE_CHANGE_CORE_PACKET	DEBUGGEE_CHANGE_CORE_PACKET
	The structure of changing core packet in HyperDbg.
typedef struct _DEBUGGEE_CHANGE_CORE_PACKET *	PDEBUGGEE_CHANGE_CORE_PACKET
typedef enum _DEBUGGER_ATTACH_DETACH_USER_MODE_PROCESS_ACTION_TYPE	DEBUGGER_ATTACH_DETACH_USER_MODE_PROCESS_ACTION_TYPE
	different actions of switchings
typedef struct _DEBUGGER_ATTACH_DETACH_USER_MODE_PROCESS	DEBUGGER_ATTACH_DETACH_USER_MODE_PROCESS
	request for attaching user-mode process
typedef struct _DEBUGGER_ATTACH_DETACH_USER_MODE_PROCESS *	PDEBUGGER_ATTACH_DETACH_USER_MODE_PROCESS
typedef enum _DEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS_TYPES	DEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS_TYPES
	different type of process or thread queries
typedef enum _DEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS_ACTIONS	DEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS_ACTIONS
	different actions on showing or querying list of process or threads
typedef struct _DEBUGGEE_PROCESS_LIST_NEEDED_DETAILS	DEBUGGEE_PROCESS_LIST_NEEDED_DETAILS
	The structure of needed information to get the details of the process from nt!_EPROCESS and location of needed variables.
typedef struct _DEBUGGEE_PROCESS_LIST_NEEDED_DETAILS *	PDEBUGGEE_PROCESS_LIST_NEEDED_DETAILS
typedef struct _DEBUGGEE_THREAD_LIST_NEEDED_DETAILS	DEBUGGEE_THREAD_LIST_NEEDED_DETAILS
	The structure of needed information to get the details of the thread from nt!_ETHREAD and location of needed variables.
typedef struct _DEBUGGEE_THREAD_LIST_NEEDED_DETAILS *	PDEBUGGEE_THREAD_LIST_NEEDED_DETAILS
typedef struct _DEBUGGEE_PROCESS_LIST_DETAILS_ENTRY	DEBUGGEE_PROCESS_LIST_DETAILS_ENTRY
	The structure showing list of processes (details of each entry).
typedef struct _DEBUGGEE_PROCESS_LIST_DETAILS_ENTRY *	PDEBUGGEE_PROCESS_LIST_DETAILS_ENTRY
typedef struct _DEBUGGEE_THREAD_LIST_DETAILS_ENTRY	DEBUGGEE_THREAD_LIST_DETAILS_ENTRY
	The structure showing list of threads (details of each entry).
typedef struct _DEBUGGEE_THREAD_LIST_DETAILS_ENTRY *	PDEBUGGEE_THREAD_LIST_DETAILS_ENTRY
typedef struct _DEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS	DEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS
	request for query count of active processes and threads
typedef struct _DEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS *	PDEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS
typedef struct _DEBUGGER_SINGLE_CALLSTACK_FRAME	DEBUGGER_SINGLE_CALLSTACK_FRAME
	The structure for saving the callstack frame of one parameter.
typedef struct _DEBUGGER_SINGLE_CALLSTACK_FRAME *	PDEBUGGER_SINGLE_CALLSTACK_FRAME
typedef enum _DEBUGGER_CALLSTACK_DISPLAY_METHOD	DEBUGGER_CALLSTACK_DISPLAY_METHOD
	callstack showing method
typedef struct _DEBUGGER_CALLSTACK_REQUEST	DEBUGGER_CALLSTACK_REQUEST
	request for callstack frames
typedef struct _DEBUGGER_CALLSTACK_REQUEST *	PDEBUGGER_CALLSTACK_REQUEST
typedef struct _USERMODE_DEBUGGING_THREAD_OR_PROCESS_STATE_DETAILS	USERMODE_DEBUGGING_THREAD_OR_PROCESS_STATE_DETAILS
typedef struct _USERMODE_DEBUGGING_THREAD_OR_PROCESS_STATE_DETAILS *	PUSERMODE_DEBUGGING_THREAD_OR_PROCESS_STATE_DETAILS
typedef struct _DEBUGGER_EVENT_ACTION_RUN_SCRIPT_CONFIGURATION	DEBUGGER_EVENT_ACTION_RUN_SCRIPT_CONFIGURATION
	Used for run the script.
typedef struct _DEBUGGER_EVENT_ACTION_RUN_SCRIPT_CONFIGURATION *	PDEBUGGER_EVENT_ACTION_RUN_SCRIPT_CONFIGURATION
typedef struct _DEBUGGER_EVENT_REQUEST_BUFFER	DEBUGGER_EVENT_REQUEST_BUFFER
	used in the case of requesting a "request buffer"
typedef struct _DEBUGGER_EVENT_REQUEST_BUFFER *	PDEBUGGER_EVENT_REQUEST_BUFFER
typedef struct _DEBUGGER_EVENT_REQUEST_CUSTOM_CODE	DEBUGGER_EVENT_REQUEST_CUSTOM_CODE
	used in the case of custom code requests to the debugger
typedef struct _DEBUGGER_EVENT_REQUEST_CUSTOM_CODE *	PDEBUGGER_EVENT_REQUEST_CUSTOM_CODE
typedef enum _DEBUGGER_UD_COMMAND_ACTION_TYPE	DEBUGGER_UD_COMMAND_ACTION_TYPE
	User-mode debugging actions.
typedef struct _DEBUGGER_UD_COMMAND_ACTION	DEBUGGER_UD_COMMAND_ACTION
	Description of user-mode debugging actions.
typedef struct _DEBUGGER_UD_COMMAND_ACTION *	PDEBUGGER_UD_COMMAND_ACTION
typedef struct _DEBUGGER_UD_COMMAND_PACKET	DEBUGGER_UD_COMMAND_PACKET
	The structure of command packet in uHyperDbg.
typedef struct _DEBUGGER_UD_COMMAND_PACKET *	PDEBUGGER_UD_COMMAND_PACKET
typedef enum _DEBUGGEE_DETAILS_AND_SWITCH_PROCESS_TYPE	DEBUGGEE_DETAILS_AND_SWITCH_PROCESS_TYPE
	Debugger process switch and process details.
typedef struct _DEBUGGEE_DETAILS_AND_SWITCH_PROCESS_PACKET	DEBUGGEE_DETAILS_AND_SWITCH_PROCESS_PACKET
	The structure of changing process and show process packet in HyperDbg.
typedef struct _DEBUGGEE_DETAILS_AND_SWITCH_PROCESS_PACKET *	PDEBUGGEE_DETAILS_AND_SWITCH_PROCESS_PACKET
typedef enum _DEBUGGEE_DETAILS_AND_SWITCH_THREAD_TYPE	DEBUGGEE_DETAILS_AND_SWITCH_THREAD_TYPE
	Debugger thread switch and thread details.
typedef struct _DEBUGGEE_DETAILS_AND_SWITCH_THREAD_PACKET	DEBUGGEE_DETAILS_AND_SWITCH_THREAD_PACKET
	The structure of changing thead and show thread packet in HyperDbg.
typedef struct _DEBUGGEE_DETAILS_AND_SWITCH_THREAD_PACKET *	PDEBUGGEE_DETAILS_AND_SWITCH_THREAD_PACKET
typedef enum _DEBUGGER_REMOTE_STEPPING_REQUEST	DEBUGGER_REMOTE_STEPPING_REQUEST
	stepping and tracking types
typedef struct _DEBUGGEE_STEP_PACKET	DEBUGGEE_STEP_PACKET
	The structure of stepping packet in HyperDbg.
typedef struct _DEBUGGEE_STEP_PACKET *	PDEBUGGEE_STEP_PACKET
typedef enum _DEBUGGER_APIC_REQUEST_TYPE	DEBUGGER_APIC_REQUEST_TYPE
	Perform actions related to APIC.
typedef struct _DEBUGGER_APIC_REQUEST	DEBUGGER_APIC_REQUEST
	The structure of actions for APIC.
typedef struct _DEBUGGER_APIC_REQUEST *	PDEBUGGER_APIC_REQUEST
typedef struct _LAPIC_PAGE	LAPIC_PAGE
	LAPIC structure and offsets.
typedef struct _LAPIC_PAGE *	PLAPIC_PAGE
typedef struct _IO_APIC_ENTRY_PACKETS	IO_APIC_ENTRY_PACKETS
	The structure of I/O APIC result packet in HyperDbg.
typedef struct _IO_APIC_ENTRY_PACKETS *	PIO_APIC_ENTRY_PACKETS
typedef enum _SMI_OPERATION_REQUEST_TYPE	SMI_OPERATION_REQUEST_TYPE
	check so the IO_APIC_ENTRY_PACKETS should be smaller than packet size
typedef struct _SMI_OPERATION_PACKETS	SMI_OPERATION_PACKETS
	The structure of I/O APIC result packet in HyperDbg.
typedef struct _SMI_OPERATION_PACKETS *	PSMI_OPERATION_PACKETS
typedef enum _HYPERTRACE_LBR_OPERATION_REQUEST_TYPE	HYPERTRACE_LBR_OPERATION_REQUEST_TYPE
	Perform actions related to HyperTrace for LBR.
typedef struct _HYPERTRACE_LBR_OPERATION_PACKETS	HYPERTRACE_LBR_OPERATION_PACKETS
	The structure of HyperTrace LBR result packet in HyperDbg.
typedef struct _HYPERTRACE_LBR_OPERATION_PACKETS *	PHYPERTRACE_LBR_OPERATION_PACKETS
typedef struct _HYPERTRACE_LBR_DUMP_PACKETS	HYPERTRACE_LBR_DUMP_PACKETS
	The structure of HyperTrace LBR dump result packet in HyperDbg.
typedef struct _HYPERTRACE_LBR_DUMP_PACKETS *	PHYPERTRACE_LBR_DUMP_PACKETS
typedef enum _HYPERTRACE_PT_OPERATION_REQUEST_TYPE	HYPERTRACE_PT_OPERATION_REQUEST_TYPE
	Perform actions related to HyperTrace for PT.
typedef struct _HYPERTRACE_PT_OPERATION_PACKETS	HYPERTRACE_PT_OPERATION_PACKETS
	The structure of HyperTrace PT result packet in HyperDbg.
typedef struct _HYPERTRACE_PT_OPERATION_PACKETS *	PHYPERTRACE_PT_OPERATION_PACKETS
typedef struct _HYPERTRACE_PT_MMAP_PACKETS	HYPERTRACE_PT_MMAP_PACKETS
	Result packet for the HyperTrace PT mmap surface.
typedef struct _HYPERTRACE_PT_MMAP_PACKETS *	PHYPERTRACE_PT_MMAP_PACKETS
typedef struct _INTERRUPT_DESCRIPTOR_TABLE_ENTRIES_PACKETS	INTERRUPT_DESCRIPTOR_TABLE_ENTRIES_PACKETS
	The structure of IDT entries result packet in HyperDbg.
typedef struct _INTERRUPT_DESCRIPTOR_TABLE_ENTRIES_PACKETS *	PINTERRUPT_DESCRIPTOR_TABLE_ENTRIES_PACKETS
typedef struct _DEBUGGEE_FORMATS_PACKET	DEBUGGEE_FORMATS_PACKET
	check so the INTERRUPT_DESCRIPTOR_TABLE_ENTRIES_PACKETS should be smaller than packet size
typedef struct _DEBUGGEE_FORMATS_PACKET *	PDEBUGGEE_FORMATS_PACKET
typedef struct _DEBUGGEE_SYMBOL_REQUEST_PACKET	DEBUGGEE_SYMBOL_REQUEST_PACKET
	The structure of .sym reload packet in HyperDbg.
typedef struct _DEBUGGEE_SYMBOL_REQUEST_PACKET *	PDEBUGGEE_SYMBOL_REQUEST_PACKET
typedef struct _DEBUGGEE_BP_PACKET	DEBUGGEE_BP_PACKET
	The structure of bp command packet in HyperDbg.
typedef struct _DEBUGGEE_BP_PACKET *	PDEBUGGEE_BP_PACKET
typedef enum _DEBUGGEE_BREAKPOINT_MODIFICATION_REQUEST	DEBUGGEE_BREAKPOINT_MODIFICATION_REQUEST
	breakpoint modification types
typedef struct _DEBUGGEE_BP_LIST_OR_MODIFY_PACKET	DEBUGGEE_BP_LIST_OR_MODIFY_PACKET
	The structure of breakpoint modification requests packet in HyperDbg.
typedef struct _DEBUGGEE_BP_LIST_OR_MODIFY_PACKET *	PDEBUGGEE_BP_LIST_OR_MODIFY_PACKET
typedef enum _DEBUGGER_CONDITIONAL_JUMP_STATUS	DEBUGGER_CONDITIONAL_JUMP_STATUS
	Whether a jump is taken or not taken.
typedef struct _DEBUGGEE_SCRIPT_PACKET	DEBUGGEE_SCRIPT_PACKET
	The structure of script packet in HyperDbg.
typedef struct _DEBUGGEE_SCRIPT_PACKET *	PDEBUGGEE_SCRIPT_PACKET
typedef struct _DEBUGGEE_RESULT_OF_SEARCH_PACKET	DEBUGGEE_RESULT_OF_SEARCH_PACKET
	The structure of result of search packet in HyperDbg.
typedef struct _DEBUGGEE_RESULT_OF_SEARCH_PACKET *	PDEBUGGEE_RESULT_OF_SEARCH_PACKET
typedef struct _DEBUGGEE_REGISTER_READ_DESCRIPTION	DEBUGGEE_REGISTER_READ_DESCRIPTION
	Register Descriptor Structure to use in r command.
typedef struct _DEBUGGEE_REGISTER_READ_DESCRIPTION *	PDEBUGGEE_REGISTER_READ_DESCRIPTION
typedef struct _DEBUGGEE_REGISTER_WRITE_DESCRIPTION	DEBUGGEE_REGISTER_WRITE_DESCRIPTION
	Register Descriptor Structure to write on registers.
typedef struct _DEBUGGEE_REGISTER_WRITE_DESCRIPTION *	PDEBUGGEE_REGISTER_WRITE_DESCRIPTION
typedef struct _DEBUGGEE_PCITREE_REQUEST_RESPONSE_PACKET	DEBUGGEE_PCITREE_REQUEST_RESPONSE_PACKET
	Pcitree Request-Response Packet. Represents PCI device tree.
typedef struct _DEBUGGEE_PCITREE_REQUEST_RESPONSE_PACKET *	PDEBUGGEE_PCITREE_REQUEST_RESPONSE_PACKET
typedef struct _DEBUGGEE_PCIDEVINFO_REQUEST_RESPONSE_PACKET	DEBUGGEE_PCIDEVINFO_REQUEST_RESPONSE_PACKET
	PCI device info Request-Response Packet, used by !pcicam and future PCI-related commands. Represents a PCI device.
typedef struct _DEBUGGEE_PCIDEVINFO_REQUEST_RESPONSE_PACKET *	PDEBUGGEE_PCIDEVINFO_REQUEST_RESPONSE_PACKET

Enumerations
enum	_REVERSING_MACHINE_RECONSTRUCT_MEMORY_MODE { REVERSING_MACHINE_RECONSTRUCT_MEMORY_MODE_UNKNOWN = 0 , REVERSING_MACHINE_RECONSTRUCT_MEMORY_MODE_USER_MODE , REVERSING_MACHINE_RECONSTRUCT_MEMORY_MODE_KERNEL_MODE }
	different modes of reconstruct requests More...
enum	_REVERSING_MACHINE_RECONSTRUCT_MEMORY_TYPE { REVERSING_MACHINE_RECONSTRUCT_MEMORY_TYPE_UNKNOWN = 0 , REVERSING_MACHINE_RECONSTRUCT_MEMORY_TYPE_RECONSTRUCT , REVERSING_MACHINE_RECONSTRUCT_MEMORY_TYPE_PATTERN }
	different types of reconstruct requests More...
enum	_DEBUGGER_PREALLOC_COMMAND_TYPE { DEBUGGER_PREALLOC_COMMAND_TYPE_THREAD_INTERCEPTION , DEBUGGER_PREALLOC_COMMAND_TYPE_MONITOR , DEBUGGER_PREALLOC_COMMAND_TYPE_EPTHOOK , DEBUGGER_PREALLOC_COMMAND_TYPE_EPTHOOK2 , DEBUGGER_PREALLOC_COMMAND_TYPE_REGULAR_EVENT , DEBUGGER_PREALLOC_COMMAND_TYPE_BIG_EVENT , DEBUGGER_PREALLOC_COMMAND_TYPE_REGULAR_SAFE_BUFFER , DEBUGGER_PREALLOC_COMMAND_TYPE_BIG_SAFE_BUFFER }
	different types of prealloc requests More...
enum	_DEBUGGER_PREACTIVATE_COMMAND_TYPE { DEBUGGER_PREACTIVATE_COMMAND_TYPE_MODE }
	different types of preactivate requests More...
enum	_DEBUGGER_READ_READING_TYPE { READ_FROM_KERNEL , READ_FROM_VMX_ROOT }
	different types of reading memory More...
enum	_DEBUGGER_READ_MEMORY_TYPE { DEBUGGER_READ_PHYSICAL_ADDRESS , DEBUGGER_READ_VIRTUAL_ADDRESS }
	different type of addresses More...
enum	_DEBUGGER_READ_MEMORY_ADDRESS_MODE { DEBUGGER_READ_ADDRESS_MODE_32_BIT , DEBUGGER_READ_ADDRESS_MODE_64_BIT }
	different address mode More...
enum	_DEBUGGER_SHOW_MEMORY_STYLE { DEBUGGER_SHOW_COMMAND_DT = 1 , DEBUGGER_SHOW_COMMAND_DISASSEMBLE64 , DEBUGGER_SHOW_COMMAND_DISASSEMBLE32 , DEBUGGER_SHOW_COMMAND_DB , DEBUGGER_SHOW_COMMAND_DC , DEBUGGER_SHOW_COMMAND_DQ , DEBUGGER_SHOW_COMMAND_DD , DEBUGGER_SHOW_COMMAND_DUMP }
	the way that debugger should show the details of memory or disassemble them More...
enum	_DEBUGGER_TEST_QUERY_STATE { TEST_QUERY_HALTING_CORE_STATUS = 1 , TEST_QUERY_PREALLOCATED_POOL_STATE = 2 , TEST_QUERY_TRAP_STATE = 3 , TEST_BREAKPOINT_TURN_OFF_BPS = 4 , TEST_BREAKPOINT_TURN_ON_BPS = 5 , TEST_BREAKPOINT_TURN_OFF_BPS_AND_EVENTS_FOR_COMMANDS_IN_REMOTE_COMPUTER = 6 , TEST_BREAKPOINT_TURN_ON_BPS_AND_EVENTS_FOR_COMMANDS_IN_REMOTE_COMPUTER = 7 , TEST_SETTING_TARGET_TASKS_ON_HALTED_CORES_SYNCHRONOUS = 8 , TEST_SETTING_TARGET_TASKS_ON_HALTED_CORES_ASYNCHRONOUS = 9 , TEST_SETTING_TARGET_TASKS_ON_TARGET_HALTED_CORES = 10 , TEST_BREAKPOINT_TURN_OFF_DBS = 11 , TEST_BREAKPOINT_TURN_ON_DBS = 12 }
	test query used for test purposed More...
enum	_DEBUGGER_MSR_ACTION_TYPE { DEBUGGER_MSR_READ , DEBUGGER_MSR_WRITE }
	different types of actions on MSRs More...
enum	_DEBUGGER_EDIT_MEMORY_TYPE { EDIT_VIRTUAL_MEMORY , EDIT_PHYSICAL_MEMORY }
	different type of addresses for editing memory More...
enum	_DEBUGGER_EDIT_MEMORY_BYTE_SIZE { EDIT_BYTE , EDIT_DWORD , EDIT_QWORD }
	size of editing memory More...
enum	_DEBUGGER_SEARCH_MEMORY_TYPE { SEARCH_PHYSICAL_MEMORY , SEARCH_VIRTUAL_MEMORY , SEARCH_PHYSICAL_FROM_VIRTUAL_MEMORY }
	different types of address for searching on memory More...
enum	_DEBUGGER_SEARCH_MEMORY_BYTE_SIZE { SEARCH_BYTE , SEARCH_DWORD , SEARCH_QWORD }
	different sizes on searching memory More...
enum	_DEBUGGER_ATTACH_DETACH_USER_MODE_PROCESS_ACTION_TYPE { DEBUGGER_ATTACH_DETACH_USER_MODE_PROCESS_ACTION_ATTACH , DEBUGGER_ATTACH_DETACH_USER_MODE_PROCESS_ACTION_DETACH , DEBUGGER_ATTACH_DETACH_USER_MODE_PROCESS_ACTION_REMOVE_HOOKS , DEBUGGER_ATTACH_DETACH_USER_MODE_PROCESS_ACTION_KILL_PROCESS , DEBUGGER_ATTACH_DETACH_USER_MODE_PROCESS_ACTION_CONTINUE_PROCESS , DEBUGGER_ATTACH_DETACH_USER_MODE_PROCESS_ACTION_PAUSE_PROCESS , DEBUGGER_ATTACH_DETACH_USER_MODE_PROCESS_ACTION_SWITCH_BY_PROCESS_OR_THREAD , DEBUGGER_ATTACH_DETACH_USER_MODE_PROCESS_ACTION_QUERY_COUNT_OF_ACTIVE_DEBUGGING_THREADS }
	different actions of switchings More...
enum	_DEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS_TYPES { DEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS_QUERY_PROCESS_COUNT = 1 , DEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS_QUERY_THREAD_COUNT = 2 , DEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS_QUERY_PROCESS_LIST = 3 , DEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS_QUERY_THREAD_LIST = 4 , DEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS_QUERY_CURRENT_PROCESS = 5 , DEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS_QUERY_CURRENT_THREAD = 6 }
	different type of process or thread queries More...
enum	_DEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS_ACTIONS { DEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS_ACTION_SHOW_INSTANTLY = 1 , DEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS_ACTION_QUERY_COUNT = 2 , DEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS_ACTION_QUERY_SAVE_DETAILS = 3 }
	different actions on showing or querying list of process or threads More...
enum	_DEBUGGER_CALLSTACK_DISPLAY_METHOD { DEBUGGER_CALLSTACK_DISPLAY_METHOD_WITHOUT_PARAMS , DEBUGGER_CALLSTACK_DISPLAY_METHOD_WITH_PARAMS }
	callstack showing method More...
enum	_DEBUGGER_UD_COMMAND_ACTION_TYPE { DEBUGGER_UD_COMMAND_ACTION_TYPE_NONE = 0 , DEBUGGER_UD_COMMAND_ACTION_TYPE_PAUSE , DEBUGGER_UD_COMMAND_ACTION_TYPE_REGULAR_STEP , DEBUGGER_UD_COMMAND_ACTION_TYPE_READ_REGISTERS , DEBUGGER_UD_COMMAND_ACTION_TYPE_EXECUTE_SCRIPT_BUFFER }
	User-mode debugging actions. More...
enum	_DEBUGGEE_DETAILS_AND_SWITCH_PROCESS_TYPE { DEBUGGEE_DETAILS_AND_SWITCH_PROCESS_GET_PROCESS_DETAILS , DEBUGGEE_DETAILS_AND_SWITCH_PROCESS_GET_PROCESS_LIST , DEBUGGEE_DETAILS_AND_SWITCH_PROCESS_PERFORM_SWITCH }
	Debugger process switch and process details. More...
enum	_DEBUGGEE_DETAILS_AND_SWITCH_THREAD_TYPE { DEBUGGEE_DETAILS_AND_SWITCH_THREAD_PERFORM_SWITCH , DEBUGGEE_DETAILS_AND_SWITCH_THREAD_GET_THREAD_DETAILS , DEBUGGEE_DETAILS_AND_SWITCH_THREAD_GET_THREAD_LIST }
	Debugger thread switch and thread details. More...
enum	_DEBUGGER_REMOTE_STEPPING_REQUEST { DEBUGGER_REMOTE_STEPPING_REQUEST_STEP_IN , DEBUGGER_REMOTE_STEPPING_REQUEST_INSTRUMENTATION_STEP_IN , DEBUGGER_REMOTE_STEPPING_REQUEST_INSTRUMENTATION_STEP_IN_FOR_TRACKING , DEBUGGER_REMOTE_STEPPING_REQUEST_STEP_OVER , DEBUGGER_REMOTE_STEPPING_REQUEST_STEP_OVER_FOR_GU , DEBUGGER_REMOTE_STEPPING_REQUEST_STEP_OVER_FOR_GU_LAST_INSTRUCTION }
	stepping and tracking types More...
enum	_DEBUGGER_APIC_REQUEST_TYPE { DEBUGGER_APIC_REQUEST_TYPE_READ_LOCAL_APIC , DEBUGGER_APIC_REQUEST_TYPE_READ_IO_APIC }
	Perform actions related to APIC. More...
enum	_SMI_OPERATION_REQUEST_TYPE { SMI_OPERATION_REQUEST_TYPE_READ_COUNT , SMI_OPERATION_REQUEST_TYPE_TRIGGER_POWER_SMI }
	check so the IO_APIC_ENTRY_PACKETS should be smaller than packet size More...
enum	_HYPERTRACE_LBR_OPERATION_REQUEST_TYPE { HYPERTRACE_LBR_OPERATION_REQUEST_TYPE_ENABLE , HYPERTRACE_LBR_OPERATION_REQUEST_TYPE_DISABLE , HYPERTRACE_LBR_OPERATION_REQUEST_TYPE_FLUSH , HYPERTRACE_LBR_OPERATION_REQUEST_TYPE_FILTER }
	Perform actions related to HyperTrace for LBR. More...
enum	_HYPERTRACE_PT_OPERATION_REQUEST_TYPE { HYPERTRACE_PT_OPERATION_REQUEST_TYPE_ENABLE , HYPERTRACE_PT_OPERATION_REQUEST_TYPE_DISABLE , HYPERTRACE_PT_OPERATION_REQUEST_TYPE_PAUSE , HYPERTRACE_PT_OPERATION_REQUEST_TYPE_RESUME , HYPERTRACE_PT_OPERATION_REQUEST_TYPE_SIZE , HYPERTRACE_PT_OPERATION_REQUEST_TYPE_DUMP , HYPERTRACE_PT_OPERATION_REQUEST_TYPE_FLUSH , HYPERTRACE_PT_OPERATION_REQUEST_TYPE_FILTER }
	Perform actions related to HyperTrace for PT. More...
enum	_DEBUGGEE_BREAKPOINT_MODIFICATION_REQUEST { DEBUGGEE_BREAKPOINT_MODIFICATION_REQUEST_LIST_BREAKPOINTS , DEBUGGEE_BREAKPOINT_MODIFICATION_REQUEST_ENABLE , DEBUGGEE_BREAKPOINT_MODIFICATION_REQUEST_DISABLE , DEBUGGEE_BREAKPOINT_MODIFICATION_REQUEST_CLEAR }
	breakpoint modification types More...
enum	_DEBUGGER_CONDITIONAL_JUMP_STATUS { DEBUGGER_CONDITIONAL_JUMP_STATUS_ERROR = 0 , DEBUGGER_CONDITIONAL_JUMP_STATUS_NOT_CONDITIONAL_JUMP , DEBUGGER_CONDITIONAL_JUMP_STATUS_JUMP_IS_TAKEN , DEBUGGER_CONDITIONAL_JUMP_STATUS_JUMP_IS_NOT_TAKEN }
	Whether a jump is taken or not taken. More...

Detailed Description

HyperDbg's SDK Headers Request Packets.

Author: Sina Karvandi (sina@.nosp@m.hype.nosp@m.rdbg..nosp@m.org); jtaw5649

This file contains definitions of request packets (enums, structs)

Version: 0.2

Date: 2022-06-28

Copyright: This project is released under the GNU Public License v3.

Macro Definition Documentation

◆ DEBUGGER_REMOTE_TRACKING_DEFAULT_COUNT_OF_STEPPING

#define DEBUGGER_REMOTE_TRACKING_DEFAULT_COUNT_OF_STEPPING 0xffffffff

default number of instructions used in tracking and stepping

◆ HYPERTRACE_LBR_DUMP_ALL_CORES

#define HYPERTRACE_LBR_DUMP_ALL_CORES 0xffffffff

In the case of dumping all cores, this value is used to specify that all cores should be dumped.

◆ LAPIC_LVT_DELIVERY_MODE_EXT_INT

#define LAPIC_LVT_DELIVERY_MODE_EXT_INT (7UL << 8)

◆ LAPIC_LVT_FLAG_ENTRY_MASKED

#define LAPIC_LVT_FLAG_ENTRY_MASKED (1UL << 16)

◆ LAPIC_SIZE

#define LAPIC_SIZE 0x400

LAPIC structure size.

◆ LAPIC_SVR_FLAG_SW_ENABLE

#define LAPIC_SVR_FLAG_SW_ENABLE (1UL << 8)

◆ MAX_NUMBER_OF_IDT_ENTRIES

#define MAX_NUMBER_OF_IDT_ENTRIES 256

Maximum number of IDT entries.

◆ MAX_NUMBER_OF_IO_APIC_ENTRIES

#define MAX_NUMBER_OF_IO_APIC_ENTRIES 400

Maximum number of I/O APIC entries.

Usually 256 entries are enough (but we allocate 400 for systems with more I/O APIC entries) We're not gonna make the packet bigger than it's needed

◆ SIZEOF_DEBUGGEE_BP_PACKET

#define SIZEOF_DEBUGGEE_BP_PACKET sizeof(DEBUGGEE_BP_PACKET)

Debugger size of DEBUGGEE_BP_PACKET.

1531#define SIZEOF_DEBUGGEE_BP_PACKET \

1532 sizeof(DEBUGGEE_BP_PACKET)

◆ SIZEOF_DEBUGGEE_DETAILS_AND_SWITCH_PROCESS_PACKET

#define SIZEOF_DEBUGGEE_DETAILS_AND_SWITCH_PROCESS_PACKET sizeof(DEBUGGEE_DETAILS_AND_SWITCH_PROCESS_PACKET)

Debugger size of DEBUGGEE_DETAILS_AND_SWITCH_PROCESS_PACKET.

997#define SIZEOF_DEBUGGEE_DETAILS_AND_SWITCH_PROCESS_PACKET \

998 sizeof(DEBUGGEE_DETAILS_AND_SWITCH_PROCESS_PACKET)

◆ SIZEOF_DEBUGGEE_DETAILS_AND_SWITCH_THREAD_PACKET

#define SIZEOF_DEBUGGEE_DETAILS_AND_SWITCH_THREAD_PACKET sizeof(DEBUGGEE_DETAILS_AND_SWITCH_THREAD_PACKET)

Debugger size of DEBUGGEE_DETAILS_AND_SWITCH_THREAD_PACKET.

1035#define SIZEOF_DEBUGGEE_DETAILS_AND_SWITCH_THREAD_PACKET \

1036 sizeof(DEBUGGEE_DETAILS_AND_SWITCH_THREAD_PACKET)

◆ SIZEOF_DEBUGGEE_PCIDEVINFO_REQUEST_RESPONSE_PACKET

#define SIZEOF_DEBUGGEE_PCIDEVINFO_REQUEST_RESPONSE_PACKET sizeof(DEBUGGEE_PCIDEVINFO_REQUEST_RESPONSE_PACKET)

check so the DEBUGGEE_PCITREE_REQUEST_RESPONSE_PACKET should be smaller than packet size

1663#define SIZEOF_DEBUGGEE_PCIDEVINFO_REQUEST_RESPONSE_PACKET \

1664 sizeof(DEBUGGEE_PCIDEVINFO_REQUEST_RESPONSE_PACKET)

◆ SIZEOF_DEBUGGEE_PCITREE_REQUEST_RESPONSE_PACKET

#define SIZEOF_DEBUGGEE_PCITREE_REQUEST_RESPONSE_PACKET sizeof(DEBUGGEE_PCITREE_REQUEST_RESPONSE_PACKET)

1639#define SIZEOF_DEBUGGEE_PCITREE_REQUEST_RESPONSE_PACKET \

1640 sizeof(DEBUGGEE_PCITREE_REQUEST_RESPONSE_PACKET)

◆ SIZEOF_DEBUGGEE_SEND_GENERAL_PACKET_FROM_DEBUGGEE_TO_DEBUGGER

#define SIZEOF_DEBUGGEE_SEND_GENERAL_PACKET_FROM_DEBUGGEE_TO_DEBUGGER sizeof(DEBUGGEE_SEND_GENERAL_PACKET_FROM_DEBUGGEE_TO_DEBUGGER)

397#define SIZEOF_DEBUGGEE_SEND_GENERAL_PACKET_FROM_DEBUGGEE_TO_DEBUGGER \

398 sizeof(DEBUGGEE_SEND_GENERAL_PACKET_FROM_DEBUGGEE_TO_DEBUGGER)

◆ SIZEOF_DEBUGGER_APIC_REQUEST

#define SIZEOF_DEBUGGER_APIC_REQUEST sizeof(DEBUGGER_APIC_REQUEST)

Debugger size of DEBUGGER_APIC_REQUEST.

1108#define SIZEOF_DEBUGGER_APIC_REQUEST \

1109 sizeof(DEBUGGER_APIC_REQUEST)

◆ SIZEOF_DEBUGGER_ATTACH_DETACH_USER_MODE_PROCESS

#define SIZEOF_DEBUGGER_ATTACH_DETACH_USER_MODE_PROCESS sizeof(DEBUGGER_ATTACH_DETACH_USER_MODE_PROCESS)

655#define SIZEOF_DEBUGGER_ATTACH_DETACH_USER_MODE_PROCESS \

656 sizeof(DEBUGGER_ATTACH_DETACH_USER_MODE_PROCESS)

◆ SIZEOF_DEBUGGER_CALLSTACK_REQUEST

#define SIZEOF_DEBUGGER_CALLSTACK_REQUEST sizeof(DEBUGGER_CALLSTACK_REQUEST)

824#define SIZEOF_DEBUGGER_CALLSTACK_REQUEST \

825 sizeof(DEBUGGER_CALLSTACK_REQUEST)

◆ SIZEOF_DEBUGGER_DT_COMMAND_OPTIONS

#define SIZEOF_DEBUGGER_DT_COMMAND_OPTIONS sizeof(DEBUGGER_DT_COMMAND_OPTIONS)

156#define SIZEOF_DEBUGGER_DT_COMMAND_OPTIONS \

157 sizeof(DEBUGGER_DT_COMMAND_OPTIONS)

◆ SIZEOF_DEBUGGER_EDIT_MEMORY

#define SIZEOF_DEBUGGER_EDIT_MEMORY sizeof(DEBUGGER_EDIT_MEMORY)

◆ SIZEOF_DEBUGGER_FLUSH_LOGGING_BUFFERS

#define SIZEOF_DEBUGGER_FLUSH_LOGGING_BUFFERS sizeof(DEBUGGER_FLUSH_LOGGING_BUFFERS)

311#define SIZEOF_DEBUGGER_FLUSH_LOGGING_BUFFERS \

312 sizeof(DEBUGGER_FLUSH_LOGGING_BUFFERS)

◆ SIZEOF_DEBUGGER_HIDE_AND_TRANSPARENT_DEBUGGER_MODE

#define SIZEOF_DEBUGGER_HIDE_AND_TRANSPARENT_DEBUGGER_MODE sizeof(DEBUGGER_HIDE_AND_TRANSPARENT_DEBUGGER_MODE)

588#define SIZEOF_DEBUGGER_HIDE_AND_TRANSPARENT_DEBUGGER_MODE \

589 sizeof(DEBUGGER_HIDE_AND_TRANSPARENT_DEBUGGER_MODE)

◆ SIZEOF_DEBUGGER_INIT_HYPERTRACE_PACKET

#define SIZEOF_DEBUGGER_INIT_HYPERTRACE_PACKET sizeof(DEBUGGER_INIT_HYPERTRACE_PACKET)

31#define SIZEOF_DEBUGGER_INIT_HYPERTRACE_PACKET \

32 sizeof(DEBUGGER_INIT_HYPERTRACE_PACKET)

◆ SIZEOF_DEBUGGER_INIT_VMM_PACKET

#define SIZEOF_DEBUGGER_INIT_VMM_PACKET sizeof(DEBUGGER_INIT_VMM_PACKET)

16#define SIZEOF_DEBUGGER_INIT_VMM_PACKET \

17 sizeof(DEBUGGER_INIT_VMM_PACKET)

◆ SIZEOF_DEBUGGER_PAGE_IN_REQUEST

#define SIZEOF_DEBUGGER_PAGE_IN_REQUEST sizeof(DEBUGGER_PAGE_IN_REQUEST)

96#define SIZEOF_DEBUGGER_PAGE_IN_REQUEST \

97 sizeof(DEBUGGER_PAGE_IN_REQUEST)

◆ SIZEOF_DEBUGGER_PERFORM_KERNEL_TESTS

#define SIZEOF_DEBUGGER_PERFORM_KERNEL_TESTS sizeof(DEBUGGER_PERFORM_KERNEL_TESTS)

366#define SIZEOF_DEBUGGER_PERFORM_KERNEL_TESTS \

367 sizeof(DEBUGGER_PERFORM_KERNEL_TESTS)

◆ SIZEOF_DEBUGGER_PREACTIVATE_COMMAND

#define SIZEOF_DEBUGGER_PREACTIVATE_COMMAND sizeof(DEBUGGER_PREACTIVATE_COMMAND)

221#define SIZEOF_DEBUGGER_PREACTIVATE_COMMAND \

222 sizeof(DEBUGGER_PREACTIVATE_COMMAND)

◆ SIZEOF_DEBUGGER_PREALLOC_COMMAND

#define SIZEOF_DEBUGGER_PREALLOC_COMMAND sizeof(DEBUGGER_PREALLOC_COMMAND)

194#define SIZEOF_DEBUGGER_PREALLOC_COMMAND \

195 sizeof(DEBUGGER_PREALLOC_COMMAND)

◆ SIZEOF_DEBUGGER_PREPARE_DEBUGGEE

#define SIZEOF_DEBUGGER_PREPARE_DEBUGGEE sizeof(DEBUGGER_PREPARE_DEBUGGEE)

◆ SIZEOF_DEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS [1/2]

#define SIZEOF_DEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS sizeof(DEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS)

700#define SIZEOF_DEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS \

701 sizeof(DEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS)

◆ SIZEOF_DEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS [2/2]

#define SIZEOF_DEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS sizeof(DEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS)

700#define SIZEOF_DEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS \

701 sizeof(DEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS)

◆ SIZEOF_DEBUGGER_READ_AND_WRITE_ON_MSR [1/2]

#define SIZEOF_DEBUGGER_READ_AND_WRITE_ON_MSR sizeof(DEBUGGER_READ_AND_WRITE_ON_MSR)

441#define SIZEOF_DEBUGGER_READ_AND_WRITE_ON_MSR \

442 sizeof(DEBUGGER_READ_AND_WRITE_ON_MSR)

◆ SIZEOF_DEBUGGER_READ_AND_WRITE_ON_MSR [2/2]

#define SIZEOF_DEBUGGER_READ_AND_WRITE_ON_MSR sizeof(DEBUGGER_READ_AND_WRITE_ON_MSR)

441#define SIZEOF_DEBUGGER_READ_AND_WRITE_ON_MSR \

442 sizeof(DEBUGGER_READ_AND_WRITE_ON_MSR)

◆ SIZEOF_DEBUGGER_READ_MEMORY

#define SIZEOF_DEBUGGER_READ_MEMORY sizeof(DEBUGGER_READ_MEMORY)

◆ SIZEOF_DEBUGGER_READ_PAGE_TABLE_ENTRIES_DETAILS

#define SIZEOF_DEBUGGER_READ_PAGE_TABLE_ENTRIES_DETAILS sizeof(DEBUGGER_READ_PAGE_TABLE_ENTRIES_DETAILS)

46#define SIZEOF_DEBUGGER_READ_PAGE_TABLE_ENTRIES_DETAILS \

47 sizeof(DEBUGGER_READ_PAGE_TABLE_ENTRIES_DETAILS)

◆ SIZEOF_DEBUGGER_SEARCH_MEMORY

#define SIZEOF_DEBUGGER_SEARCH_MEMORY sizeof(DEBUGGER_SEARCH_MEMORY)

◆ SIZEOF_DEBUGGER_SEND_COMMAND_EXECUTION_FINISHED_SIGNAL

#define SIZEOF_DEBUGGER_SEND_COMMAND_EXECUTION_FINISHED_SIGNAL sizeof(DEBUGGER_SEND_COMMAND_EXECUTION_FINISHED_SIGNAL)

381#define SIZEOF_DEBUGGER_SEND_COMMAND_EXECUTION_FINISHED_SIGNAL \

382 sizeof(DEBUGGER_SEND_COMMAND_EXECUTION_FINISHED_SIGNAL)

◆ SIZEOF_DEBUGGER_SEND_USERMODE_MESSAGES_TO_DEBUGGER

#define SIZEOF_DEBUGGER_SEND_USERMODE_MESSAGES_TO_DEBUGGER sizeof(DEBUGGER_SEND_USERMODE_MESSAGES_TO_DEBUGGER)

420#define SIZEOF_DEBUGGER_SEND_USERMODE_MESSAGES_TO_DEBUGGER \

421 sizeof(DEBUGGER_SEND_USERMODE_MESSAGES_TO_DEBUGGER)

◆ SIZEOF_DEBUGGER_TEST_QUERY_BUFFER

#define SIZEOF_DEBUGGER_TEST_QUERY_BUFFER sizeof(DEBUGGER_TEST_QUERY_BUFFER)

328#define SIZEOF_DEBUGGER_TEST_QUERY_BUFFER \

329 sizeof(DEBUGGER_TEST_QUERY_BUFFER)

◆ SIZEOF_DEBUGGER_UD_COMMAND_PACKET

#define SIZEOF_DEBUGGER_UD_COMMAND_PACKET sizeof(DEBUGGER_UD_COMMAND_PACKET)

◆ SIZEOF_DEBUGGER_VA2PA_AND_PA2VA_COMMANDS

#define SIZEOF_DEBUGGER_VA2PA_AND_PA2VA_COMMANDS sizeof(DEBUGGER_VA2PA_AND_PA2VA_COMMANDS)

77#define SIZEOF_DEBUGGER_VA2PA_AND_PA2VA_COMMANDS \

78 sizeof(DEBUGGER_VA2PA_AND_PA2VA_COMMANDS)

◆ SIZEOF_HYPERTRACE_LBR_DUMP_PACKETS

#define SIZEOF_HYPERTRACE_LBR_DUMP_PACKETS sizeof(HYPERTRACE_LBR_DUMP_PACKETS)

Debugger size of HYPERTRACE_LBR_DUMP_PACKETS.

1343#define SIZEOF_HYPERTRACE_LBR_DUMP_PACKETS \

1344 sizeof(HYPERTRACE_LBR_DUMP_PACKETS)

◆ SIZEOF_HYPERTRACE_LBR_OPERATION_PACKETS

#define SIZEOF_HYPERTRACE_LBR_OPERATION_PACKETS sizeof(HYPERTRACE_LBR_OPERATION_PACKETS)

Debugger size of HYPERTRACE_LBR_OPERATION_PACKETS.

1313#define SIZEOF_HYPERTRACE_LBR_OPERATION_PACKETS \

1314 sizeof(HYPERTRACE_LBR_OPERATION_PACKETS)

◆ SIZEOF_HYPERTRACE_PT_MMAP_PACKETS

#define SIZEOF_HYPERTRACE_PT_MMAP_PACKETS sizeof(HYPERTRACE_PT_MMAP_PACKETS)

Debugger size of HYPERTRACE_PT_MMAP_PACKETS.

1448#define SIZEOF_HYPERTRACE_PT_MMAP_PACKETS \

1449 sizeof(HYPERTRACE_PT_MMAP_PACKETS)

◆ SIZEOF_HYPERTRACE_PT_OPERATION_PACKETS

#define SIZEOF_HYPERTRACE_PT_OPERATION_PACKETS sizeof(HYPERTRACE_PT_OPERATION_PACKETS)

Debugger size of HYPERTRACE_PT_OPERATION_PACKETS.

1412#define SIZEOF_HYPERTRACE_PT_OPERATION_PACKETS \

1413 sizeof(HYPERTRACE_PT_OPERATION_PACKETS)

◆ SIZEOF_INTERRUPT_DESCRIPTOR_TABLE_ENTRIES_PACKETS

#define SIZEOF_INTERRUPT_DESCRIPTOR_TABLE_ENTRIES_PACKETS sizeof(INTERRUPT_DESCRIPTOR_TABLE_ENTRIES_PACKETS)

Debugger size of INTERRUPT_DESCRIPTOR_TABLE_ENTRIES_PACKETS.

1474#define SIZEOF_INTERRUPT_DESCRIPTOR_TABLE_ENTRIES_PACKETS \

1475 sizeof(INTERRUPT_DESCRIPTOR_TABLE_ENTRIES_PACKETS)

◆ SIZEOF_REVERSING_MACHINE_RECONSTRUCT_MEMORY_REQUEST

#define SIZEOF_REVERSING_MACHINE_RECONSTRUCT_MEMORY_REQUEST sizeof(REVERSING_MACHINE_RECONSTRUCT_MEMORY_REQUEST)

137#define SIZEOF_REVERSING_MACHINE_RECONSTRUCT_MEMORY_REQUEST \

138 sizeof(REVERSING_MACHINE_RECONSTRUCT_MEMORY_REQUEST)

◆ SIZEOF_SMI_OPERATION_PACKETS

#define SIZEOF_SMI_OPERATION_PACKETS sizeof(SMI_OPERATION_PACKETS)

Debugger size of SMI_OPERATION_PACKETS.

1275#define SIZEOF_SMI_OPERATION_PACKETS \

1276 sizeof(SMI_OPERATION_PACKETS)

◆ SIZEOF_USERMODE_DEBUGGING_THREAD_OR_PROCESS_STATE_DETAILS

#define SIZEOF_USERMODE_DEBUGGING_THREAD_OR_PROCESS_STATE_DETAILS sizeof(USERMODE_DEBUGGING_THREAD_OR_PROCESS_STATE_DETAILS)

860#define SIZEOF_USERMODE_DEBUGGING_THREAD_OR_PROCESS_STATE_DETAILS \

861 sizeof(USERMODE_DEBUGGING_THREAD_OR_PROCESS_STATE_DETAILS)

Typedef Documentation

◆ DEBUGGEE_BP_LIST_OR_MODIFY_PACKET

typedef struct _DEBUGGEE_BP_LIST_OR_MODIFY_PACKET DEBUGGEE_BP_LIST_OR_MODIFY_PACKET

The structure of breakpoint modification requests packet in HyperDbg.

◆ DEBUGGEE_BP_PACKET

typedef struct _DEBUGGEE_BP_PACKET DEBUGGEE_BP_PACKET

The structure of bp command packet in HyperDbg.

◆ DEBUGGEE_BREAKPOINT_MODIFICATION_REQUEST

typedef enum _DEBUGGEE_BREAKPOINT_MODIFICATION_REQUEST DEBUGGEE_BREAKPOINT_MODIFICATION_REQUEST

breakpoint modification types

◆ DEBUGGEE_CHANGE_CORE_PACKET

typedef struct _DEBUGGEE_CHANGE_CORE_PACKET DEBUGGEE_CHANGE_CORE_PACKET

The structure of changing core packet in HyperDbg.

◆ DEBUGGEE_DETAILS_AND_SWITCH_PROCESS_PACKET

typedef struct _DEBUGGEE_DETAILS_AND_SWITCH_PROCESS_PACKET DEBUGGEE_DETAILS_AND_SWITCH_PROCESS_PACKET

The structure of changing process and show process packet in HyperDbg.

◆ DEBUGGEE_DETAILS_AND_SWITCH_PROCESS_TYPE

typedef enum _DEBUGGEE_DETAILS_AND_SWITCH_PROCESS_TYPE DEBUGGEE_DETAILS_AND_SWITCH_PROCESS_TYPE

Debugger process switch and process details.

◆ DEBUGGEE_DETAILS_AND_SWITCH_THREAD_PACKET

typedef struct _DEBUGGEE_DETAILS_AND_SWITCH_THREAD_PACKET DEBUGGEE_DETAILS_AND_SWITCH_THREAD_PACKET

The structure of changing thead and show thread packet in HyperDbg.

◆ DEBUGGEE_DETAILS_AND_SWITCH_THREAD_TYPE

typedef enum _DEBUGGEE_DETAILS_AND_SWITCH_THREAD_TYPE DEBUGGEE_DETAILS_AND_SWITCH_THREAD_TYPE

Debugger thread switch and thread details.

◆ DEBUGGEE_FORMATS_PACKET

typedef struct _DEBUGGEE_FORMATS_PACKET DEBUGGEE_FORMATS_PACKET

check so the INTERRUPT_DESCRIPTOR_TABLE_ENTRIES_PACKETS should be smaller than packet size

The structure of .formats result packet in HyperDbg

◆ DEBUGGEE_PCIDEVINFO_REQUEST_RESPONSE_PACKET

typedef struct _DEBUGGEE_PCIDEVINFO_REQUEST_RESPONSE_PACKET DEBUGGEE_PCIDEVINFO_REQUEST_RESPONSE_PACKET

PCI device info Request-Response Packet, used by !pcicam and future PCI-related commands. Represents a PCI device.

◆ DEBUGGEE_PCITREE_REQUEST_RESPONSE_PACKET

typedef struct _DEBUGGEE_PCITREE_REQUEST_RESPONSE_PACKET DEBUGGEE_PCITREE_REQUEST_RESPONSE_PACKET

Pcitree Request-Response Packet. Represents PCI device tree.

◆ DEBUGGEE_PROCESS_LIST_DETAILS_ENTRY

typedef struct _DEBUGGEE_PROCESS_LIST_DETAILS_ENTRY DEBUGGEE_PROCESS_LIST_DETAILS_ENTRY

The structure showing list of processes (details of each entry).

◆ DEBUGGEE_PROCESS_LIST_NEEDED_DETAILS

typedef struct _DEBUGGEE_PROCESS_LIST_NEEDED_DETAILS DEBUGGEE_PROCESS_LIST_NEEDED_DETAILS

The structure of needed information to get the details of the process from nt!_EPROCESS and location of needed variables.

◆ DEBUGGEE_REGISTER_READ_DESCRIPTION

typedef struct _DEBUGGEE_REGISTER_READ_DESCRIPTION DEBUGGEE_REGISTER_READ_DESCRIPTION

Register Descriptor Structure to use in r command.

◆ DEBUGGEE_REGISTER_WRITE_DESCRIPTION

typedef struct _DEBUGGEE_REGISTER_WRITE_DESCRIPTION DEBUGGEE_REGISTER_WRITE_DESCRIPTION

Register Descriptor Structure to write on registers.

◆ DEBUGGEE_RESULT_OF_SEARCH_PACKET

typedef struct _DEBUGGEE_RESULT_OF_SEARCH_PACKET DEBUGGEE_RESULT_OF_SEARCH_PACKET

The structure of result of search packet in HyperDbg.

◆ DEBUGGEE_SCRIPT_PACKET

typedef struct _DEBUGGEE_SCRIPT_PACKET DEBUGGEE_SCRIPT_PACKET

The structure of script packet in HyperDbg.

◆ DEBUGGEE_SEND_GENERAL_PACKET_FROM_DEBUGGEE_TO_DEBUGGER

typedef struct _DEBUGGEE_SEND_GENERAL_PACKET_FROM_DEBUGGEE_TO_DEBUGGER DEBUGGEE_SEND_GENERAL_PACKET_FROM_DEBUGGEE_TO_DEBUGGER

request for send general packets from debuggee to debugger

◆ DEBUGGEE_STEP_PACKET

typedef struct _DEBUGGEE_STEP_PACKET DEBUGGEE_STEP_PACKET

The structure of stepping packet in HyperDbg.

◆ DEBUGGEE_SYMBOL_REQUEST_PACKET

typedef struct _DEBUGGEE_SYMBOL_REQUEST_PACKET DEBUGGEE_SYMBOL_REQUEST_PACKET

The structure of .sym reload packet in HyperDbg.

◆ DEBUGGEE_THREAD_LIST_DETAILS_ENTRY

typedef struct _DEBUGGEE_THREAD_LIST_DETAILS_ENTRY DEBUGGEE_THREAD_LIST_DETAILS_ENTRY

The structure showing list of threads (details of each entry).

◆ DEBUGGEE_THREAD_LIST_NEEDED_DETAILS

typedef struct _DEBUGGEE_THREAD_LIST_NEEDED_DETAILS DEBUGGEE_THREAD_LIST_NEEDED_DETAILS

The structure of needed information to get the details of the thread from nt!_ETHREAD and location of needed variables.

◆ DEBUGGER_APIC_REQUEST

typedef struct _DEBUGGER_APIC_REQUEST DEBUGGER_APIC_REQUEST

The structure of actions for APIC.

◆ DEBUGGER_APIC_REQUEST_TYPE

typedef enum _DEBUGGER_APIC_REQUEST_TYPE DEBUGGER_APIC_REQUEST_TYPE

Perform actions related to APIC.

◆ DEBUGGER_ATTACH_DETACH_USER_MODE_PROCESS

typedef struct _DEBUGGER_ATTACH_DETACH_USER_MODE_PROCESS DEBUGGER_ATTACH_DETACH_USER_MODE_PROCESS

request for attaching user-mode process

◆ DEBUGGER_ATTACH_DETACH_USER_MODE_PROCESS_ACTION_TYPE

typedef enum _DEBUGGER_ATTACH_DETACH_USER_MODE_PROCESS_ACTION_TYPE DEBUGGER_ATTACH_DETACH_USER_MODE_PROCESS_ACTION_TYPE

different actions of switchings

◆ DEBUGGER_CALLSTACK_DISPLAY_METHOD

typedef enum _DEBUGGER_CALLSTACK_DISPLAY_METHOD DEBUGGER_CALLSTACK_DISPLAY_METHOD

callstack showing method

◆ DEBUGGER_CALLSTACK_REQUEST

typedef struct _DEBUGGER_CALLSTACK_REQUEST DEBUGGER_CALLSTACK_REQUEST

request for callstack frames

◆ DEBUGGER_CONDITIONAL_JUMP_STATUS

typedef enum _DEBUGGER_CONDITIONAL_JUMP_STATUS DEBUGGER_CONDITIONAL_JUMP_STATUS

Whether a jump is taken or not taken.

◆ DEBUGGER_DEBUGGER_TEST_QUERY_BUFFER

typedef struct _DEBUGGER_DEBUGGER_TEST_QUERY_BUFFER DEBUGGER_DEBUGGER_TEST_QUERY_BUFFER

request for test query buffers

◆ DEBUGGER_DT_COMMAND_OPTIONS

typedef struct _DEBUGGER_DT_COMMAND_OPTIONS DEBUGGER_DT_COMMAND_OPTIONS

requests options for dt and struct command

◆ DEBUGGER_EDIT_MEMORY

typedef struct _DEBUGGER_EDIT_MEMORY DEBUGGER_EDIT_MEMORY

request for edit virtual and physical memory

◆ DEBUGGER_EDIT_MEMORY_BYTE_SIZE

typedef enum _DEBUGGER_EDIT_MEMORY_BYTE_SIZE DEBUGGER_EDIT_MEMORY_BYTE_SIZE

size of editing memory

◆ DEBUGGER_EDIT_MEMORY_TYPE

typedef enum _DEBUGGER_EDIT_MEMORY_TYPE DEBUGGER_EDIT_MEMORY_TYPE

different type of addresses for editing memory

◆ DEBUGGER_EVENT_ACTION_RUN_SCRIPT_CONFIGURATION

typedef struct _DEBUGGER_EVENT_ACTION_RUN_SCRIPT_CONFIGURATION DEBUGGER_EVENT_ACTION_RUN_SCRIPT_CONFIGURATION

Used for run the script.

◆ DEBUGGER_EVENT_REQUEST_BUFFER

typedef struct _DEBUGGER_EVENT_REQUEST_BUFFER DEBUGGER_EVENT_REQUEST_BUFFER

used in the case of requesting a "request buffer"

◆ DEBUGGER_EVENT_REQUEST_CUSTOM_CODE

typedef struct _DEBUGGER_EVENT_REQUEST_CUSTOM_CODE DEBUGGER_EVENT_REQUEST_CUSTOM_CODE

used in the case of custom code requests to the debugger

◆ DEBUGGER_FLUSH_LOGGING_BUFFERS

typedef struct _DEBUGGER_FLUSH_LOGGING_BUFFERS DEBUGGER_FLUSH_LOGGING_BUFFERS

request for flushing buffers

◆ DEBUGGER_HIDE_AND_TRANSPARENT_DEBUGGER_MODE

typedef struct _DEBUGGER_HIDE_AND_TRANSPARENT_DEBUGGER_MODE DEBUGGER_HIDE_AND_TRANSPARENT_DEBUGGER_MODE

request for enable or disable transparent-mode

◆ DEBUGGER_INIT_HYPERTRACE_PACKET

typedef struct _DEBUGGER_INIT_HYPERTRACE_PACKET DEBUGGER_INIT_HYPERTRACE_PACKET

request for initializing HyperTrace

◆ DEBUGGER_INIT_VMM_PACKET

typedef struct _DEBUGGER_INIT_VMM_PACKET DEBUGGER_INIT_VMM_PACKET

request for initializing VMM

◆ DEBUGGER_MSR_ACTION_TYPE

typedef enum _DEBUGGER_MSR_ACTION_TYPE DEBUGGER_MSR_ACTION_TYPE

different types of actions on MSRs

◆ DEBUGGER_PAGE_IN_REQUEST

typedef struct _DEBUGGER_PAGE_IN_REQUEST DEBUGGER_PAGE_IN_REQUEST

requests for the '.pagein' command

◆ DEBUGGER_PERFORM_KERNEL_TESTS

typedef struct _DEBUGGER_PERFORM_KERNEL_TESTS DEBUGGER_PERFORM_KERNEL_TESTS

request performing kernel tests

◆ DEBUGGER_PREACTIVATE_COMMAND

typedef struct _DEBUGGER_PREACTIVATE_COMMAND DEBUGGER_PREACTIVATE_COMMAND

requests for the 'preactivate' command

◆ DEBUGGER_PREACTIVATE_COMMAND_TYPE

typedef enum _DEBUGGER_PREACTIVATE_COMMAND_TYPE DEBUGGER_PREACTIVATE_COMMAND_TYPE

different types of preactivate requests

◆ DEBUGGER_PREALLOC_COMMAND

typedef struct _DEBUGGER_PREALLOC_COMMAND DEBUGGER_PREALLOC_COMMAND

requests for the 'prealloc' command

◆ DEBUGGER_PREALLOC_COMMAND_TYPE

typedef enum _DEBUGGER_PREALLOC_COMMAND_TYPE DEBUGGER_PREALLOC_COMMAND_TYPE

different types of prealloc requests

◆ DEBUGGER_PREPARE_DEBUGGEE

typedef struct _DEBUGGER_PREPARE_DEBUGGEE DEBUGGER_PREPARE_DEBUGGEE

request to make this computer to a debuggee

◆ DEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS

typedef struct _DEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS DEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS

request for query count of active processes and threads

◆ DEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS_ACTIONS

typedef enum _DEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS_ACTIONS DEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS_ACTIONS

different actions on showing or querying list of process or threads

◆ DEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS_TYPES

typedef enum _DEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS_TYPES DEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS_TYPES

different type of process or thread queries

◆ DEBUGGER_READ_AND_WRITE_ON_MSR

typedef struct _DEBUGGER_READ_AND_WRITE_ON_MSR DEBUGGER_READ_AND_WRITE_ON_MSR

request to read or write on MSRs

◆ DEBUGGER_READ_MEMORY

typedef struct _DEBUGGER_READ_MEMORY DEBUGGER_READ_MEMORY

request for reading virtual and physical memory

◆ DEBUGGER_READ_MEMORY_ADDRESS_MODE

typedef enum _DEBUGGER_READ_MEMORY_ADDRESS_MODE DEBUGGER_READ_MEMORY_ADDRESS_MODE

different address mode

◆ DEBUGGER_READ_MEMORY_TYPE

typedef enum _DEBUGGER_READ_MEMORY_TYPE DEBUGGER_READ_MEMORY_TYPE

different type of addresses

◆ DEBUGGER_READ_PAGE_TABLE_ENTRIES_DETAILS

typedef struct _DEBUGGER_READ_PAGE_TABLE_ENTRIES_DETAILS DEBUGGER_READ_PAGE_TABLE_ENTRIES_DETAILS

request for !pte command

◆ DEBUGGER_READ_READING_TYPE

typedef enum _DEBUGGER_READ_READING_TYPE DEBUGGER_READ_READING_TYPE

different types of reading memory

◆ DEBUGGER_REMOTE_STEPPING_REQUEST

typedef enum _DEBUGGER_REMOTE_STEPPING_REQUEST DEBUGGER_REMOTE_STEPPING_REQUEST

stepping and tracking types

◆ DEBUGGER_SEARCH_MEMORY

typedef struct _DEBUGGER_SEARCH_MEMORY DEBUGGER_SEARCH_MEMORY

request for searching memory

◆ DEBUGGER_SEARCH_MEMORY_BYTE_SIZE

typedef enum _DEBUGGER_SEARCH_MEMORY_BYTE_SIZE DEBUGGER_SEARCH_MEMORY_BYTE_SIZE

different sizes on searching memory

◆ DEBUGGER_SEARCH_MEMORY_TYPE

typedef enum _DEBUGGER_SEARCH_MEMORY_TYPE DEBUGGER_SEARCH_MEMORY_TYPE

different types of address for searching on memory

◆ DEBUGGER_SEND_COMMAND_EXECUTION_FINISHED_SIGNAL

typedef struct _DEBUGGER_SEND_COMMAND_EXECUTION_FINISHED_SIGNAL DEBUGGER_SEND_COMMAND_EXECUTION_FINISHED_SIGNAL

request for send a signal that command execution finished

◆ DEBUGGER_SEND_USERMODE_MESSAGES_TO_DEBUGGER

typedef struct _DEBUGGER_SEND_USERMODE_MESSAGES_TO_DEBUGGER DEBUGGER_SEND_USERMODE_MESSAGES_TO_DEBUGGER

request for send a user-mode message to debugger

◆ DEBUGGER_SHOW_MEMORY_STYLE

typedef enum _DEBUGGER_SHOW_MEMORY_STYLE DEBUGGER_SHOW_MEMORY_STYLE

the way that debugger should show the details of memory or disassemble them

◆ DEBUGGER_SINGLE_CALLSTACK_FRAME

typedef struct _DEBUGGER_SINGLE_CALLSTACK_FRAME DEBUGGER_SINGLE_CALLSTACK_FRAME

The structure for saving the callstack frame of one parameter.

◆ DEBUGGER_TEST_QUERY_STATE

typedef enum _DEBUGGER_TEST_QUERY_STATE DEBUGGER_TEST_QUERY_STATE

test query used for test purposed

◆ DEBUGGER_UD_COMMAND_ACTION

typedef struct _DEBUGGER_UD_COMMAND_ACTION DEBUGGER_UD_COMMAND_ACTION

Description of user-mode debugging actions.

◆ DEBUGGER_UD_COMMAND_ACTION_TYPE

typedef enum _DEBUGGER_UD_COMMAND_ACTION_TYPE DEBUGGER_UD_COMMAND_ACTION_TYPE

User-mode debugging actions.

◆ DEBUGGER_UD_COMMAND_PACKET

typedef struct _DEBUGGER_UD_COMMAND_PACKET DEBUGGER_UD_COMMAND_PACKET

The structure of command packet in uHyperDbg.

◆ DEBUGGER_VA2PA_AND_PA2VA_COMMANDS

typedef struct _DEBUGGER_VA2PA_AND_PA2VA_COMMANDS DEBUGGER_VA2PA_AND_PA2VA_COMMANDS

requests for !va2pa and !pa2va commands

◆ HYPERTRACE_LBR_DUMP_PACKETS

typedef struct _HYPERTRACE_LBR_DUMP_PACKETS HYPERTRACE_LBR_DUMP_PACKETS

The structure of HyperTrace LBR dump result packet in HyperDbg.

◆ HYPERTRACE_LBR_OPERATION_PACKETS

typedef struct _HYPERTRACE_LBR_OPERATION_PACKETS HYPERTRACE_LBR_OPERATION_PACKETS

The structure of HyperTrace LBR result packet in HyperDbg.

◆ HYPERTRACE_LBR_OPERATION_REQUEST_TYPE

typedef enum _HYPERTRACE_LBR_OPERATION_REQUEST_TYPE HYPERTRACE_LBR_OPERATION_REQUEST_TYPE

Perform actions related to HyperTrace for LBR.

◆ HYPERTRACE_PT_MMAP_PACKETS

typedef struct _HYPERTRACE_PT_MMAP_PACKETS HYPERTRACE_PT_MMAP_PACKETS

Result packet for the HyperTrace PT mmap surface.

   On success KernelStatus is DEBUGGER_OPERATION_WAS_SUCCESSFUL,
   NumCpus gives the number of CPUs that were mapped, and
   Cpus[0..NumCpus) hand back a single { UserVa, Size } per CPU.
   Each Size covers the main output buffer immediately followed
   by the 4 KB overflow page as one contiguous byte stream.

   Mapping contract (cooperative single-process):
     - The IOCTL maps into the address space of the process that
       calls DeviceIoControl. The returned user VAs are not
       portable across processes.
     - Mapping is tied to the PT enable cycle. PT disable / flush
       tears the mapping down; the caller must not touch the
       user VAs afterwards.
     - Calling the IOCTL twice within the same enable cycle
       returns the existing mapping (idempotent).

◆ HYPERTRACE_PT_OPERATION_PACKETS

typedef struct _HYPERTRACE_PT_OPERATION_PACKETS HYPERTRACE_PT_OPERATION_PACKETS

The structure of HyperTrace PT result packet in HyperDbg.

   Configuration fields (TraceUser/TraceKernel/TargetCr3/BufferSize/
   NumAddrRanges/AddrRanges) are populated by the caller for ENABLE
   and FILTER operations. For other operations they are ignored.

   BufferSize must be a power of two multiple of 4 KB (4KB ... 128MB).
   Pass 0 to keep the existing per-CPU value (default 2 MB on first
   enable).

   For SIZE operations the kernel fills NumCpus and BytesPerCpu[]
   with each CPU's current PT output position, i.e. how many bytes
   of valid trace data are currently sitting in that CPU's main +
   overflow buffer; the rest of the packet is unused on output.

◆ HYPERTRACE_PT_OPERATION_REQUEST_TYPE

typedef enum _HYPERTRACE_PT_OPERATION_REQUEST_TYPE HYPERTRACE_PT_OPERATION_REQUEST_TYPE

Perform actions related to HyperTrace for PT.

◆ INTERRUPT_DESCRIPTOR_TABLE_ENTRIES_PACKETS

typedef struct _INTERRUPT_DESCRIPTOR_TABLE_ENTRIES_PACKETS INTERRUPT_DESCRIPTOR_TABLE_ENTRIES_PACKETS

The structure of IDT entries result packet in HyperDbg.

◆ IO_APIC_ENTRY_PACKETS

typedef struct _IO_APIC_ENTRY_PACKETS IO_APIC_ENTRY_PACKETS

The structure of I/O APIC result packet in HyperDbg.

◆ LAPIC_PAGE

typedef struct _LAPIC_PAGE LAPIC_PAGE

LAPIC structure and offsets.

◆ PDEBUGGEE_BP_LIST_OR_MODIFY_PACKET

typedef struct _DEBUGGEE_BP_LIST_OR_MODIFY_PACKET * PDEBUGGEE_BP_LIST_OR_MODIFY_PACKET

◆ PDEBUGGEE_BP_PACKET

typedef struct _DEBUGGEE_BP_PACKET * PDEBUGGEE_BP_PACKET

◆ PDEBUGGEE_CHANGE_CORE_PACKET

typedef struct _DEBUGGEE_CHANGE_CORE_PACKET * PDEBUGGEE_CHANGE_CORE_PACKET

◆ PDEBUGGEE_DETAILS_AND_SWITCH_PROCESS_PACKET

typedef struct _DEBUGGEE_DETAILS_AND_SWITCH_PROCESS_PACKET * PDEBUGGEE_DETAILS_AND_SWITCH_PROCESS_PACKET

◆ PDEBUGGEE_DETAILS_AND_SWITCH_THREAD_PACKET

typedef struct _DEBUGGEE_DETAILS_AND_SWITCH_THREAD_PACKET * PDEBUGGEE_DETAILS_AND_SWITCH_THREAD_PACKET

◆ PDEBUGGEE_FORMATS_PACKET

typedef struct _DEBUGGEE_FORMATS_PACKET * PDEBUGGEE_FORMATS_PACKET

◆ PDEBUGGEE_PCIDEVINFO_REQUEST_RESPONSE_PACKET

typedef struct _DEBUGGEE_PCIDEVINFO_REQUEST_RESPONSE_PACKET * PDEBUGGEE_PCIDEVINFO_REQUEST_RESPONSE_PACKET

◆ PDEBUGGEE_PCITREE_REQUEST_RESPONSE_PACKET

typedef struct _DEBUGGEE_PCITREE_REQUEST_RESPONSE_PACKET * PDEBUGGEE_PCITREE_REQUEST_RESPONSE_PACKET

◆ PDEBUGGEE_PROCESS_LIST_DETAILS_ENTRY

typedef struct _DEBUGGEE_PROCESS_LIST_DETAILS_ENTRY * PDEBUGGEE_PROCESS_LIST_DETAILS_ENTRY

◆ PDEBUGGEE_PROCESS_LIST_NEEDED_DETAILS

typedef struct _DEBUGGEE_PROCESS_LIST_NEEDED_DETAILS * PDEBUGGEE_PROCESS_LIST_NEEDED_DETAILS

◆ PDEBUGGEE_REGISTER_READ_DESCRIPTION

typedef struct _DEBUGGEE_REGISTER_READ_DESCRIPTION * PDEBUGGEE_REGISTER_READ_DESCRIPTION

◆ PDEBUGGEE_REGISTER_WRITE_DESCRIPTION

typedef struct _DEBUGGEE_REGISTER_WRITE_DESCRIPTION * PDEBUGGEE_REGISTER_WRITE_DESCRIPTION

◆ PDEBUGGEE_RESULT_OF_SEARCH_PACKET

typedef struct _DEBUGGEE_RESULT_OF_SEARCH_PACKET * PDEBUGGEE_RESULT_OF_SEARCH_PACKET

◆ PDEBUGGEE_SCRIPT_PACKET

typedef struct _DEBUGGEE_SCRIPT_PACKET * PDEBUGGEE_SCRIPT_PACKET

◆ PDEBUGGEE_SEND_GENERAL_PACKET_FROM_DEBUGGEE_TO_DEBUGGER

typedef struct _DEBUGGEE_SEND_GENERAL_PACKET_FROM_DEBUGGEE_TO_DEBUGGER * PDEBUGGEE_SEND_GENERAL_PACKET_FROM_DEBUGGEE_TO_DEBUGGER

◆ PDEBUGGEE_STEP_PACKET

typedef struct _DEBUGGEE_STEP_PACKET * PDEBUGGEE_STEP_PACKET

◆ PDEBUGGEE_SYMBOL_REQUEST_PACKET

typedef struct _DEBUGGEE_SYMBOL_REQUEST_PACKET * PDEBUGGEE_SYMBOL_REQUEST_PACKET

◆ PDEBUGGEE_THREAD_LIST_DETAILS_ENTRY

typedef struct _DEBUGGEE_THREAD_LIST_DETAILS_ENTRY * PDEBUGGEE_THREAD_LIST_DETAILS_ENTRY

◆ PDEBUGGEE_THREAD_LIST_NEEDED_DETAILS

typedef struct _DEBUGGEE_THREAD_LIST_NEEDED_DETAILS * PDEBUGGEE_THREAD_LIST_NEEDED_DETAILS

◆ PDEBUGGER_APIC_REQUEST

typedef struct _DEBUGGER_APIC_REQUEST * PDEBUGGER_APIC_REQUEST

◆ PDEBUGGER_ATTACH_DETACH_USER_MODE_PROCESS

typedef struct _DEBUGGER_ATTACH_DETACH_USER_MODE_PROCESS * PDEBUGGER_ATTACH_DETACH_USER_MODE_PROCESS

◆ PDEBUGGER_CALLSTACK_REQUEST

typedef struct _DEBUGGER_CALLSTACK_REQUEST * PDEBUGGER_CALLSTACK_REQUEST

◆ PDEBUGGER_DEBUGGER_TEST_QUERY_BUFFER

typedef struct _DEBUGGER_DEBUGGER_TEST_QUERY_BUFFER * PDEBUGGER_DEBUGGER_TEST_QUERY_BUFFER

◆ PDEBUGGER_DT_COMMAND_OPTIONS

typedef struct _DEBUGGER_DT_COMMAND_OPTIONS * PDEBUGGER_DT_COMMAND_OPTIONS

◆ PDEBUGGER_EDIT_MEMORY

typedef struct _DEBUGGER_EDIT_MEMORY * PDEBUGGER_EDIT_MEMORY

◆ PDEBUGGER_EVENT_ACTION_RUN_SCRIPT_CONFIGURATION

typedef struct _DEBUGGER_EVENT_ACTION_RUN_SCRIPT_CONFIGURATION * PDEBUGGER_EVENT_ACTION_RUN_SCRIPT_CONFIGURATION

◆ PDEBUGGER_EVENT_REQUEST_BUFFER

typedef struct _DEBUGGER_EVENT_REQUEST_BUFFER * PDEBUGGER_EVENT_REQUEST_BUFFER

◆ PDEBUGGER_EVENT_REQUEST_CUSTOM_CODE

typedef struct _DEBUGGER_EVENT_REQUEST_CUSTOM_CODE * PDEBUGGER_EVENT_REQUEST_CUSTOM_CODE

◆ PDEBUGGER_FLUSH_LOGGING_BUFFERS

typedef struct _DEBUGGER_FLUSH_LOGGING_BUFFERS * PDEBUGGER_FLUSH_LOGGING_BUFFERS

◆ PDEBUGGER_HIDE_AND_TRANSPARENT_DEBUGGER_MODE

typedef struct _DEBUGGER_HIDE_AND_TRANSPARENT_DEBUGGER_MODE * PDEBUGGER_HIDE_AND_TRANSPARENT_DEBUGGER_MODE

◆ PDEBUGGER_INIT_HYPERTRACE_PACKET

typedef struct _DEBUGGER_INIT_HYPERTRACE_PACKET * PDEBUGGER_INIT_HYPERTRACE_PACKET

◆ PDEBUGGER_INIT_VMM_PACKET

typedef struct _DEBUGGER_INIT_VMM_PACKET * PDEBUGGER_INIT_VMM_PACKET

◆ PDEBUGGER_PAGE_IN_REQUEST

typedef struct _DEBUGGER_PAGE_IN_REQUEST * PDEBUGGER_PAGE_IN_REQUEST

◆ PDEBUGGER_PERFORM_KERNEL_TESTS

typedef struct _DEBUGGER_PERFORM_KERNEL_TESTS * PDEBUGGER_PERFORM_KERNEL_TESTS

◆ PDEBUGGER_PREACTIVATE_COMMAND

typedef struct _DEBUGGER_PREACTIVATE_COMMAND * PDEBUGGER_PREACTIVATE_COMMAND

◆ PDEBUGGER_PREALLOC_COMMAND

typedef struct _DEBUGGER_PREALLOC_COMMAND * PDEBUGGER_PREALLOC_COMMAND

◆ PDEBUGGER_PREPARE_DEBUGGEE

typedef struct _DEBUGGER_PREPARE_DEBUGGEE * PDEBUGGER_PREPARE_DEBUGGEE

◆ PDEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS

typedef struct _DEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS * PDEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS

◆ PDEBUGGER_READ_AND_WRITE_ON_MSR

typedef struct _DEBUGGER_READ_AND_WRITE_ON_MSR * PDEBUGGER_READ_AND_WRITE_ON_MSR

◆ PDEBUGGER_READ_MEMORY

typedef struct _DEBUGGER_READ_MEMORY * PDEBUGGER_READ_MEMORY

◆ PDEBUGGER_READ_PAGE_TABLE_ENTRIES_DETAILS

typedef struct _DEBUGGER_READ_PAGE_TABLE_ENTRIES_DETAILS * PDEBUGGER_READ_PAGE_TABLE_ENTRIES_DETAILS

◆ PDEBUGGER_SEARCH_MEMORY

typedef struct _DEBUGGER_SEARCH_MEMORY * PDEBUGGER_SEARCH_MEMORY

◆ PDEBUGGER_SEND_COMMAND_EXECUTION_FINISHED_SIGNAL

typedef struct _DEBUGGER_SEND_COMMAND_EXECUTION_FINISHED_SIGNAL * PDEBUGGER_SEND_COMMAND_EXECUTION_FINISHED_SIGNAL

◆ PDEBUGGER_SEND_USERMODE_MESSAGES_TO_DEBUGGER

typedef struct _DEBUGGER_SEND_USERMODE_MESSAGES_TO_DEBUGGER * PDEBUGGER_SEND_USERMODE_MESSAGES_TO_DEBUGGER

◆ PDEBUGGER_SINGLE_CALLSTACK_FRAME

typedef struct _DEBUGGER_SINGLE_CALLSTACK_FRAME * PDEBUGGER_SINGLE_CALLSTACK_FRAME

◆ PDEBUGGER_UD_COMMAND_ACTION

typedef struct _DEBUGGER_UD_COMMAND_ACTION * PDEBUGGER_UD_COMMAND_ACTION

◆ PDEBUGGER_UD_COMMAND_PACKET

typedef struct _DEBUGGER_UD_COMMAND_PACKET * PDEBUGGER_UD_COMMAND_PACKET

◆ PDEBUGGER_VA2PA_AND_PA2VA_COMMANDS

typedef struct _DEBUGGER_VA2PA_AND_PA2VA_COMMANDS * PDEBUGGER_VA2PA_AND_PA2VA_COMMANDS

◆ PHYPERTRACE_LBR_DUMP_PACKETS

typedef struct _HYPERTRACE_LBR_DUMP_PACKETS * PHYPERTRACE_LBR_DUMP_PACKETS

◆ PHYPERTRACE_LBR_OPERATION_PACKETS

typedef struct _HYPERTRACE_LBR_OPERATION_PACKETS * PHYPERTRACE_LBR_OPERATION_PACKETS

◆ PHYPERTRACE_PT_MMAP_PACKETS

typedef struct _HYPERTRACE_PT_MMAP_PACKETS * PHYPERTRACE_PT_MMAP_PACKETS

◆ PHYPERTRACE_PT_OPERATION_PACKETS

typedef struct _HYPERTRACE_PT_OPERATION_PACKETS * PHYPERTRACE_PT_OPERATION_PACKETS

◆ PINTERRUPT_DESCRIPTOR_TABLE_ENTRIES_PACKETS

typedef struct _INTERRUPT_DESCRIPTOR_TABLE_ENTRIES_PACKETS * PINTERRUPT_DESCRIPTOR_TABLE_ENTRIES_PACKETS

◆ PIO_APIC_ENTRY_PACKETS

typedef struct _IO_APIC_ENTRY_PACKETS * PIO_APIC_ENTRY_PACKETS

◆ PLAPIC_PAGE

typedef struct _LAPIC_PAGE * PLAPIC_PAGE

◆ PREVERSING_MACHINE_RECONSTRUCT_MEMORY_REQUEST

typedef struct _REVERSING_MACHINE_RECONSTRUCT_MEMORY_REQUEST * PREVERSING_MACHINE_RECONSTRUCT_MEMORY_REQUEST

◆ PSMI_OPERATION_PACKETS

typedef struct _SMI_OPERATION_PACKETS * PSMI_OPERATION_PACKETS

◆ PSYSTEM_CALL_NUMBERS_INFORMATION

typedef struct _SYSTEM_CALL_NUMBERS_INFORMATION * PSYSTEM_CALL_NUMBERS_INFORMATION

◆ PUSERMODE_DEBUGGING_THREAD_OR_PROCESS_STATE_DETAILS

typedef struct _USERMODE_DEBUGGING_THREAD_OR_PROCESS_STATE_DETAILS * PUSERMODE_DEBUGGING_THREAD_OR_PROCESS_STATE_DETAILS

◆ REVERSING_MACHINE_RECONSTRUCT_MEMORY_MODE

typedef enum _REVERSING_MACHINE_RECONSTRUCT_MEMORY_MODE REVERSING_MACHINE_RECONSTRUCT_MEMORY_MODE

different modes of reconstruct requests

◆ REVERSING_MACHINE_RECONSTRUCT_MEMORY_REQUEST

typedef struct _REVERSING_MACHINE_RECONSTRUCT_MEMORY_REQUEST REVERSING_MACHINE_RECONSTRUCT_MEMORY_REQUEST

requests for !rev command

◆ REVERSING_MACHINE_RECONSTRUCT_MEMORY_TYPE

typedef enum _REVERSING_MACHINE_RECONSTRUCT_MEMORY_TYPE REVERSING_MACHINE_RECONSTRUCT_MEMORY_TYPE

different types of reconstruct requests

◆ SMI_OPERATION_PACKETS

typedef struct _SMI_OPERATION_PACKETS SMI_OPERATION_PACKETS

The structure of I/O APIC result packet in HyperDbg.

◆ SMI_OPERATION_REQUEST_TYPE

typedef enum _SMI_OPERATION_REQUEST_TYPE SMI_OPERATION_REQUEST_TYPE

check so the IO_APIC_ENTRY_PACKETS should be smaller than packet size

Perform actions related to SMIs

◆ SYSTEM_CALL_NUMBERS_INFORMATION

typedef struct _SYSTEM_CALL_NUMBERS_INFORMATION SYSTEM_CALL_NUMBERS_INFORMATION

Windows System call values that are intercepted by transparency mode.

NOTE: Windows system calls can change values on each version This structure is used to keep track of the system call numbers based on the current running Windows version

◆ USERMODE_DEBUGGING_THREAD_OR_PROCESS_STATE_DETAILS

typedef struct _USERMODE_DEBUGGING_THREAD_OR_PROCESS_STATE_DETAILS USERMODE_DEBUGGING_THREAD_OR_PROCESS_STATE_DETAILS

Enumeration Type Documentation

◆ _DEBUGGEE_BREAKPOINT_MODIFICATION_REQUEST

enum _DEBUGGEE_BREAKPOINT_MODIFICATION_REQUEST

breakpoint modification types

Enumerator
DEBUGGEE_BREAKPOINT_MODIFICATION_REQUEST_LIST_BREAKPOINTS
DEBUGGEE_BREAKPOINT_MODIFICATION_REQUEST_ENABLE
DEBUGGEE_BREAKPOINT_MODIFICATION_REQUEST_DISABLE
DEBUGGEE_BREAKPOINT_MODIFICATION_REQUEST_CLEAR

{
 
    DEBUGGEE_BREAKPOINT_MODIFICATION_REQUEST_LIST_BREAKPOINTS,
    DEBUGGEE_BREAKPOINT_MODIFICATION_REQUEST_ENABLE,
    DEBUGGEE_BREAKPOINT_MODIFICATION_REQUEST_DISABLE,
    DEBUGGEE_BREAKPOINT_MODIFICATION_REQUEST_CLEAR,
 
} DEBUGGEE_BREAKPOINT_MODIFICATION_REQUEST;

◆ _DEBUGGEE_DETAILS_AND_SWITCH_PROCESS_TYPE

enum _DEBUGGEE_DETAILS_AND_SWITCH_PROCESS_TYPE

Debugger process switch and process details.

Enumerator
DEBUGGEE_DETAILS_AND_SWITCH_PROCESS_GET_PROCESS_DETAILS
DEBUGGEE_DETAILS_AND_SWITCH_PROCESS_GET_PROCESS_LIST
DEBUGGEE_DETAILS_AND_SWITCH_PROCESS_PERFORM_SWITCH

{
 
    DEBUGGEE_DETAILS_AND_SWITCH_PROCESS_GET_PROCESS_DETAILS,
    DEBUGGEE_DETAILS_AND_SWITCH_PROCESS_GET_PROCESS_LIST,
    DEBUGGEE_DETAILS_AND_SWITCH_PROCESS_PERFORM_SWITCH,
 
} DEBUGGEE_DETAILS_AND_SWITCH_PROCESS_TYPE;

◆ _DEBUGGEE_DETAILS_AND_SWITCH_THREAD_TYPE

enum _DEBUGGEE_DETAILS_AND_SWITCH_THREAD_TYPE

Debugger thread switch and thread details.

Enumerator
DEBUGGEE_DETAILS_AND_SWITCH_THREAD_PERFORM_SWITCH
DEBUGGEE_DETAILS_AND_SWITCH_THREAD_GET_THREAD_DETAILS
DEBUGGEE_DETAILS_AND_SWITCH_THREAD_GET_THREAD_LIST

{
 
    DEBUGGEE_DETAILS_AND_SWITCH_THREAD_PERFORM_SWITCH,
    DEBUGGEE_DETAILS_AND_SWITCH_THREAD_GET_THREAD_DETAILS,
    DEBUGGEE_DETAILS_AND_SWITCH_THREAD_GET_THREAD_LIST,
 
} DEBUGGEE_DETAILS_AND_SWITCH_THREAD_TYPE;

◆ _DEBUGGER_APIC_REQUEST_TYPE

enum _DEBUGGER_APIC_REQUEST_TYPE

Perform actions related to APIC.

Enumerator
DEBUGGER_APIC_REQUEST_TYPE_READ_LOCAL_APIC
DEBUGGER_APIC_REQUEST_TYPE_READ_IO_APIC

{
    DEBUGGER_APIC_REQUEST_TYPE_READ_LOCAL_APIC,
    DEBUGGER_APIC_REQUEST_TYPE_READ_IO_APIC,
 
} DEBUGGER_APIC_REQUEST_TYPE;

◆ _DEBUGGER_ATTACH_DETACH_USER_MODE_PROCESS_ACTION_TYPE

enum _DEBUGGER_ATTACH_DETACH_USER_MODE_PROCESS_ACTION_TYPE

different actions of switchings

Enumerator
DEBUGGER_ATTACH_DETACH_USER_MODE_PROCESS_ACTION_ATTACH
DEBUGGER_ATTACH_DETACH_USER_MODE_PROCESS_ACTION_DETACH
DEBUGGER_ATTACH_DETACH_USER_MODE_PROCESS_ACTION_REMOVE_HOOKS
DEBUGGER_ATTACH_DETACH_USER_MODE_PROCESS_ACTION_KILL_PROCESS
DEBUGGER_ATTACH_DETACH_USER_MODE_PROCESS_ACTION_CONTINUE_PROCESS
DEBUGGER_ATTACH_DETACH_USER_MODE_PROCESS_ACTION_PAUSE_PROCESS
DEBUGGER_ATTACH_DETACH_USER_MODE_PROCESS_ACTION_SWITCH_BY_PROCESS_OR_THREAD
DEBUGGER_ATTACH_DETACH_USER_MODE_PROCESS_ACTION_QUERY_COUNT_OF_ACTIVE_DEBUGGING_THREADS

{
    DEBUGGER_ATTACH_DETACH_USER_MODE_PROCESS_ACTION_ATTACH,
    DEBUGGER_ATTACH_DETACH_USER_MODE_PROCESS_ACTION_DETACH,
    DEBUGGER_ATTACH_DETACH_USER_MODE_PROCESS_ACTION_REMOVE_HOOKS,
    DEBUGGER_ATTACH_DETACH_USER_MODE_PROCESS_ACTION_KILL_PROCESS,
    DEBUGGER_ATTACH_DETACH_USER_MODE_PROCESS_ACTION_CONTINUE_PROCESS,
    DEBUGGER_ATTACH_DETACH_USER_MODE_PROCESS_ACTION_PAUSE_PROCESS,
    DEBUGGER_ATTACH_DETACH_USER_MODE_PROCESS_ACTION_SWITCH_BY_PROCESS_OR_THREAD,
    DEBUGGER_ATTACH_DETACH_USER_MODE_PROCESS_ACTION_QUERY_COUNT_OF_ACTIVE_DEBUGGING_THREADS,
 
} DEBUGGER_ATTACH_DETACH_USER_MODE_PROCESS_ACTION_TYPE;

◆ _DEBUGGER_CALLSTACK_DISPLAY_METHOD

enum _DEBUGGER_CALLSTACK_DISPLAY_METHOD

callstack showing method

Enumerator
DEBUGGER_CALLSTACK_DISPLAY_METHOD_WITHOUT_PARAMS
DEBUGGER_CALLSTACK_DISPLAY_METHOD_WITH_PARAMS

{
    DEBUGGER_CALLSTACK_DISPLAY_METHOD_WITHOUT_PARAMS,
    DEBUGGER_CALLSTACK_DISPLAY_METHOD_WITH_PARAMS,
 
} DEBUGGER_CALLSTACK_DISPLAY_METHOD;

◆ _DEBUGGER_CONDITIONAL_JUMP_STATUS

enum _DEBUGGER_CONDITIONAL_JUMP_STATUS

Whether a jump is taken or not taken.

Enumerator
DEBUGGER_CONDITIONAL_JUMP_STATUS_ERROR
DEBUGGER_CONDITIONAL_JUMP_STATUS_NOT_CONDITIONAL_JUMP
DEBUGGER_CONDITIONAL_JUMP_STATUS_JUMP_IS_TAKEN
DEBUGGER_CONDITIONAL_JUMP_STATUS_JUMP_IS_NOT_TAKEN

{
 
    DEBUGGER_CONDITIONAL_JUMP_STATUS_ERROR = 0,
    DEBUGGER_CONDITIONAL_JUMP_STATUS_NOT_CONDITIONAL_JUMP,
    DEBUGGER_CONDITIONAL_JUMP_STATUS_JUMP_IS_TAKEN,
    DEBUGGER_CONDITIONAL_JUMP_STATUS_JUMP_IS_NOT_TAKEN,
 
} DEBUGGER_CONDITIONAL_JUMP_STATUS;

◆ _DEBUGGER_EDIT_MEMORY_BYTE_SIZE

enum _DEBUGGER_EDIT_MEMORY_BYTE_SIZE

size of editing memory

Enumerator
EDIT_BYTE
EDIT_DWORD
EDIT_QWORD

{
    EDIT_BYTE,
    EDIT_DWORD,
    EDIT_QWORD
} DEBUGGER_EDIT_MEMORY_BYTE_SIZE;

◆ _DEBUGGER_EDIT_MEMORY_TYPE

enum _DEBUGGER_EDIT_MEMORY_TYPE

different type of addresses for editing memory

Enumerator
EDIT_VIRTUAL_MEMORY
EDIT_PHYSICAL_MEMORY

{
    EDIT_VIRTUAL_MEMORY,
    EDIT_PHYSICAL_MEMORY
} DEBUGGER_EDIT_MEMORY_TYPE;

◆ _DEBUGGER_MSR_ACTION_TYPE

enum _DEBUGGER_MSR_ACTION_TYPE