2021-11-23 03:28:57 +03:30
|
|
|
/**
|
|
|
|
|
* @file Process.h
|
2022-01-18 22:38:56 +03:30
|
|
|
* @author Sina Karvandi (sina@hyperdbg.org)
|
2021-11-23 03:28:57 +03:30
|
|
|
* @brief Header for kernel debugger functions for processes
|
|
|
|
|
* @details
|
2022-10-17 16:04:19 +09:00
|
|
|
*
|
2021-11-23 03:28:57 +03:30
|
|
|
* @version 0.1
|
|
|
|
|
* @date 2021-11-23
|
2022-10-17 16:04:19 +09:00
|
|
|
*
|
2021-11-23 03:28:57 +03:30
|
|
|
* @copyright This project is released under the GNU Public License v3.
|
2022-10-17 16:04:19 +09:00
|
|
|
*
|
2021-11-23 03:28:57 +03:30
|
|
|
*/
|
|
|
|
|
#pragma once
|
|
|
|
|
|
|
|
|
|
//////////////////////////////////////////////////
|
|
|
|
|
// Functions //
|
|
|
|
|
//////////////////////////////////////////////////
|
|
|
|
|
|
2022-05-04 21:43:25 +04:30
|
|
|
VOID
|
2022-12-09 18:26:38 +09:00
|
|
|
ProcessEnableOrDisableThreadChangeMonitor(PROCESSOR_DEBUGGING_STATE * DbgState,
|
2023-10-15 19:08:59 +09:00
|
|
|
BOOLEAN Enable,
|
|
|
|
|
BOOLEAN IsSwitchByClockIntrrupt);
|
2022-05-04 21:43:25 +04:30
|
|
|
|
2023-01-08 03:59:10 +09:00
|
|
|
VOID
|
|
|
|
|
ProcessTriggerCr3ProcessChange(UINT32 CoreId);
|
|
|
|
|
|
2021-11-28 19:25:54 +03:30
|
|
|
BOOLEAN
|
2023-01-08 03:59:10 +09:00
|
|
|
ProcessHandleProcessChange(PROCESSOR_DEBUGGING_STATE * DbgState);
|
2021-11-23 03:28:57 +03:30
|
|
|
|
|
|
|
|
BOOLEAN
|
2023-10-15 19:08:59 +09:00
|
|
|
ProcessInterpretProcess(PROCESSOR_DEBUGGING_STATE * DbgState, PDEBUGGEE_DETAILS_AND_SWITCH_PROCESS_PACKET PidRequest);
|
2021-11-27 21:15:19 +03:30
|
|
|
|
|
|
|
|
BOOLEAN
|
2022-04-13 12:45:39 +04:30
|
|
|
ProcessCheckIfEprocessIsValid(UINT64 Eprocess, UINT64 ActiveProcessHead, ULONG ActiveProcessLinksOffset);
|
2021-11-28 15:08:43 +03:30
|
|
|
|
2022-05-04 21:43:25 +04:30
|
|
|
BOOLEAN
|
|
|
|
|
ProcessQueryCount(PDEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS DebuggerUsermodeProcessOrThreadQueryRequest);
|
2022-05-16 00:17:21 +04:30
|
|
|
|
|
|
|
|
BOOLEAN
|
|
|
|
|
ProcessQueryList(PDEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS DebuggerUsermodeProcessOrThreadQueryRequest,
|
|
|
|
|
PVOID AddressToSaveDetail,
|
|
|
|
|
UINT32 BufferSize);
|
2022-05-17 00:30:49 +04:30
|
|
|
|
|
|
|
|
BOOLEAN
|
|
|
|
|
ProcessQueryDetails(PDEBUGGEE_DETAILS_AND_SWITCH_PROCESS_PACKET GetInformationProcessRequest);
|