SYMBOL INDEX (314 symbols across 28 files) FILE: scripts/context.js class Context (line 7) | class Context { method constructor (line 22) | constructor(driverName, distDir) { method all (line 42) | async all() { method purge (line 57) | async purge() { method purgeDir (line 67) | static async purgeDir(dir) { method generateCmakeFile (line 76) | async generateCmakeFile() { method templateToFile (line 86) | async templateToFile(src, dist, vars) { method compile (line 94) | async compile() { method createMakeCatFile (line 108) | async createMakeCatFile() { method makeCatFile (line 118) | async makeCatFile() { method signDriver (line 124) | async signDriver() { method execute (line 137) | async execute(cmd, cwd, params = []) { method createDriverDatFile (line 157) | async createDriverDatFile() { method install (line 167) | async install() { method clearBuildDir (line 190) | async clearBuildDir() { FILE: scripts/multibuilder.js function getRandomWord (line 11) | async function getRandomWord() { FILE: src/DBKDrvr.c type ULONG (line 45) | typedef ULONG (NTUSERSETWINDOWSHOOKEX)( type NTSTATUS (line 58) | typedef NTSTATUS (*ZWSUSPENDPROCESS) type NTSTATUS (line 81) | typedef NTSTATUS(*PSRCTNR)(__in PCREATE_THREAD_NOTIFY_ROUTINE NotifyRout... type NTSTATUS (line 84) | typedef NTSTATUS(*PSRLINR)(__in PLOAD_IMAGE_NOTIFY_ROUTINE NotifyRoutine); function hideme (line 92) | void hideme(PDRIVER_OBJECT DriverObject) function testfunction (line 118) | int testfunction(int p1,int p2) function VOID (line 133) | VOID TestPassive(UINT_PTR param) function VOID (line 139) | VOID TestDPC(IN struct _KDPC *Dpc, IN PVOID DeferredContext, IN PVOID ... function NTSTATUS (line 148) | NTSTATUS DriverEntry(IN PDRIVER_OBJECT DriverObject, function NTSTATUS (line 540) | NTSTATUS DispatchCreate(IN PDEVICE_OBJECT DeviceObject, function NTSTATUS (line 581) | NTSTATUS DispatchClose(IN PDEVICE_OBJECT DeviceObject, function UnloadDriver (line 595) | void UnloadDriver(PDRIVER_OBJECT DriverObject) FILE: src/DBKFunc.c function _enable (line 14) | void _enable() {} function _disable (line 15) | void _disable() {} function forEachCpuPassive (line 19) | void forEachCpuPassive(PF f, UINT_PTR param) function forOneCpu (line 95) | void forOneCpu(CCHAR cpunr, PKDEFERRED_ROUTINE dpcfunction, PVOID Deferr... function forEachCpu (line 112) | void forEachCpu(PKDEFERRED_ROUTINE dpcfunction, PVOID DeferredContext, ... function forEachCpuAsync (line 171) | void forEachCpuAsync(PKDEFERRED_ROUTINE dpcfunction, PVOID DeferredConte... function spinlock (line 231) | void spinlock(volatile LONG *lockvar) function csEnter (line 247) | void csEnter(PcriticalSection CS) function csLeave (line 268) | void csLeave(PcriticalSection CS) function getCpuCount (line 287) | int getCpuCount(void) function isPrefix (line 301) | int isPrefix(unsigned char b) function UINT64 (line 325) | UINT64 getDR7(void) function cpunr (line 331) | int cpunr(void) function EFLAGS (line 340) | EFLAGS getEflags(void) function UINT64 (line 347) | UINT64 readMSR(DWORD msr) function setCR0 (line 352) | void setCR0(UINT64 newcr0) function UINT64 (line 357) | UINT64 getCR0(void) function UINT64 (line 362) | UINT64 getCR2(void) function setCR3 (line 369) | void setCR3(UINT64 newCR3) function UINT64 (line 374) | UINT64 getCR3(void) function setCR4 (line 381) | void setCR4(UINT64 newcr4) function UINT64 (line 386) | UINT64 getCR4(void) function GetIDT (line 391) | void GetIDT(PIDT pIdt) function UINT64 (line 414) | UINT64 getTSC(void) FILE: src/DBKFunc.h type VOID (line 20) | typedef VOID F(UINT_PTR param); type F (line 21) | typedef F *PF; type VOID (line 23) | typedef VOID PREDPC_CALLBACK(CCHAR cpunr, PKDEFERRED_ROUTINE Dpc, PVOID ... type PREDPC_CALLBACK (line 25) | typedef PREDPC_CALLBACK *PPREDPC_CALLBACK; type criticalSection (line 28) | typedef struct _criticalSection type KNORMAL_ROUTINE (line 51) | typedef KNORMAL_ROUTINE *PKNORMAL_ROUTINE; type KKERNEL_ROUTINE (line 67) | typedef KKERNEL_ROUTINE *PKKERNEL_ROUTINE; type KRUNDOWN_ROUTINE (line 80) | typedef KRUNDOWN_ROUTINE *PKRUNDOWN_ROUTINE; type _IRQL_requires_same_ (line 83) | typedef type KENUM_ROUTINE (line 93) | typedef KENUM_ROUTINE *PKENUM_ROUTINE; type KAPC_ENVIRONMENT (line 95) | typedef enum _KAPC_ENVIRONMENT { type PTEStruct (line 162) | struct PTEStruct type PTEStruct64 (line 183) | struct PTEStruct64 type Debugregs (line 205) | typedef struct tagDebugregs type EFLAGS (line 218) | typedef struct type DebugReg7 (line 250) | typedef struct tagDebugReg7 type DebugReg6 (line 283) | typedef struct DebugReg6 type GDT (line 307) | typedef struct tagGDT FILE: src/IOPLDispatcher.c type PCHAR (line 34) | typedef PCHAR (*GET_PROCESS_IMAGE_NAME) (PEPROCESS Process); function mykapc2 (line 60) | void mykapc2(PKAPC Apc, PKNORMAL_ROUTINE NormalRoutine, PVOID NormalCont... function nothing2 (line 81) | void nothing2(PVOID arg1, PVOID arg2, PVOID arg3) function mykapc (line 87) | void mykapc(PKAPC Apc, PKNORMAL_ROUTINE NormalRoutine, PVOID NormalConte... function nothing (line 126) | void nothing(PVOID arg1, PVOID arg2, PVOID arg3) function CreateRemoteAPC (line 132) | void CreateRemoteAPC(ULONG threadid,PVOID addresstoexecute) function OB_PREOP_CALLBACK_STATUS (line 174) | OB_PREOP_CALLBACK_STATUS ThreadPreCallback(PVOID RegistrationContext, PO... function VOID (line 216) | VOID ThreadPostCallback(PVOID RegistrationContext, POB_POST_OPERATION_IN... function OB_PREOP_CALLBACK_STATUS (line 222) | OB_PREOP_CALLBACK_STATUS ProcessPreCallback(PVOID RegistrationContext, P... function VOID (line 270) | VOID ProcessPostCallback(PVOID RegistrationContext, POB_POST_OPERATION_I... function BOOL (line 277) | BOOL DispatchIoctlDBVM(IN PDEVICE_OBJECT DeviceObject, ULONG IoControlCo... function NTSTATUS (line 306) | NTSTATUS DispatchIoctl(IN PDEVICE_OBJECT DeviceObject, IN PIRP Irp) FILE: src/debugger.c type SavedStack (line 83) | typedef struct _SavedStack function debugger_dr7_setGD (line 95) | void debugger_dr7_setGD(int state) function debugger_dr0_setValue (line 105) | void debugger_dr0_setValue(UINT_PTR value) function UINT_PTR (line 110) | UINT_PTR debugger_dr0_getValue(void) function debugger_dr1_setValue (line 115) | void debugger_dr1_setValue(UINT_PTR value) function UINT_PTR (line 120) | UINT_PTR debugger_dr1_getValue(void) function debugger_dr2_setValue (line 125) | void debugger_dr2_setValue(UINT_PTR value) function UINT_PTR (line 130) | UINT_PTR debugger_dr2_getValue(void) function debugger_dr3_setValue (line 135) | void debugger_dr3_setValue(UINT_PTR value) function UINT_PTR (line 140) | UINT_PTR debugger_dr3_getValue(void) function debugger_dr6_setValue (line 145) | void debugger_dr6_setValue(UINT_PTR value) function debugger_dr7_setValue (line 150) | void debugger_dr7_setValue(DebugReg7 value) function debugger_dr7_setValueDword (line 156) | void debugger_dr7_setValueDword(UINT_PTR value) function UINT_PTR (line 161) | UINT_PTR debugger_dr7_getValueDword(void) //I wonder why I couldn't just... function DebugReg7 (line 167) | DebugReg7 debugger_dr7_getValue(void) function UINT_PTR (line 173) | UINT_PTR debugger_dr6_getValueDword(void) function DebugReg6 (line 178) | DebugReg6 debugger_dr6_getValue(void) function debugger_touchDebugRegister (line 186) | void debugger_touchDebugRegister(UINT_PTR param) function debugger_initialize (line 195) | void debugger_initialize(void) function debugger_shutdown (line 219) | void debugger_shutdown(void) function debugger_growstack (line 238) | void debugger_growstack() function debugger_setInitialFakeState (line 283) | void debugger_setInitialFakeState(void) function VOID (line 294) | VOID debugger_initHookForCurrentCPU_DPC(IN struct _KDPC *Dpc, IN PVOID ... function debugger_removeHookForCurrentCPU (line 299) | int debugger_removeHookForCurrentCPU(UINT_PTR params) function debugger_initHookForCurrentCPU (line 305) | int debugger_initHookForCurrentCPU(void) function debugger_setStoreLBR (line 346) | void debugger_setStoreLBR(BOOL state) function debugger_setGlobalDebugState (line 388) | int debugger_setGlobalDebugState(BOOL state) function debugger_startDebugging (line 420) | int debugger_startDebugging(DWORD debuggedProcessID) function debugger_stopDebugging (line 439) | int debugger_stopDebugging(void) function debugger_unsetGDBreakpoint (line 470) | int debugger_unsetGDBreakpoint(int breakpointnr) function debugger_setGDBreakpoint (line 477) | int debugger_setGDBreakpoint(int breakpointnr, ULONG_PTR Address, BreakT... function NTSTATUS (line 490) | NTSTATUS debugger_waitForDebugEvent(ULONG timeout) function NTSTATUS (line 513) | NTSTATUS debugger_continueDebugEvent(BOOL handled) function UINT_PTR (line 526) | UINT_PTR *debugger_getLastStackPointer(void) function NTSTATUS (line 533) | NTSTATUS debugger_getDebuggerState(PDebugStackState state) function NTSTATUS (line 628) | NTSTATUS debugger_setDebuggerState(PDebugStackState state) function breakpointHandler_kernel (line 706) | int breakpointHandler_kernel(UINT_PTR *stackpointer, UINT_PTR *currentde... function interrupt1_handler (line 836) | int interrupt1_handler(UINT_PTR *stackpointer, UINT_PTR *currentdebugregs) function interrupt1_centry (line 1494) | int interrupt1_centry(UINT_PTR *stackpointer) //code segment 8 has a 32-... function interrupt1_asmentry (line 1762) | _declspec( naked ) void interrupt1_asmentry( void ) FILE: src/debugger.h type DebugStackState (line 8) | typedef struct { type BreakType (line 50) | typedef enum {bt_OnInstruction=0,bt_OnWrites=1, bt_OnIOAccess=2, bt_OnRe... type BreakLength (line 51) | typedef enum {bl_1byte=0, bl_2byte=1, bl_8byte=2/*Only when in 64-bit*/,... FILE: src/deepkernel.c function BOOLEAN (line 10) | BOOLEAN MakeWritableKM(PVOID StartAddress,UINT_PTR size) function BOOLEAN (line 58) | BOOLEAN MakeWritable(PVOID StartAddress,UINT_PTR size,BOOLEAN usecopyonw... function BOOLEAN (line 102) | BOOLEAN CheckImageName(IN PUNICODE_STRING FullImageName, IN char* List,i... function VOID (line 161) | VOID LoadImageNotifyRoutine(IN PUNICODE_STRING FullImageName, IN HANDLE... FILE: src/interruptHook.c function WORD (line 21) | WORD inthook_getOriginalCS(unsigned char intnr) function ULONG_PTR (line 26) | ULONG_PTR inthook_getOriginalEIP(unsigned char intnr) function inthook_isHooked (line 31) | int inthook_isHooked(unsigned char intnr) function inthook_isDBVMHook (line 40) | int inthook_isDBVMHook(unsigned char intnr) function inthook_UnhookInterrupt (line 45) | int inthook_UnhookInterrupt(unsigned char intnr) function inthook_HookInterrupt (line 105) | int inthook_HookInterrupt(unsigned char intnr, int newCS, ULONG_PTR newE... FILE: src/interruptHook.h type stackindex (line 8) | typedef enum {si_eax=0, si_ebx=1, si_ecx=2, si_edx=3, si_esi=4, si_edi=5... type stackindex (line 10) | typedef enum {si_gs=-12, si_fs=-11, si_es=-10, si_ds=-9, si_edi=-8, si_e... type INT_VECTOR (line 16) | typedef struct tagINT_VECTOR type IDT (line 39) | typedef struct tagIDT FILE: src/memscan.c function VirtualAddressToIndexes (line 20) | void VirtualAddressToIndexes(QWORD address, int *pml4index, int *pagedir... function QWORD (line 41) | QWORD IndexesToVirtualAddress(int pml4index, int pagedirptrindex, int pa... function VirtualAddressToPageEntries32 (line 74) | void VirtualAddressToPageEntries32(DWORD address, PPDE *pagedirentry, PP... function VirtualAddressToPageEntries64 (line 92) | void VirtualAddressToPageEntries64(QWORD address, PPDPTE_PAE *pml4entry,... function BOOLEAN (line 136) | BOOLEAN IsAddressSafe(UINT_PTR StartAddress) function UINT_PTR (line 250) | UINT_PTR getPEThread(UINT_PTR threadid) function BOOLEAN (line 267) | BOOLEAN WriteProcessMemory(DWORD PID,PEPROCESS PEProcess,PVOID Address,D... function BOOLEAN (line 381) | BOOLEAN ReadProcessMemory(DWORD PID,PEPROCESS PEProcess,PVOID Address,DW... function UINT64 (line 476) | UINT64 getMaxPhysAddress(void) function NTSTATUS (line 496) | NTSTATUS ReadPhysicalMemory(char *startaddress, UINT_PTR bytestoread, vo... function UINT_PTR (line 608) | UINT_PTR SignExtend(UINT_PTR a) function UINT_PTR (line 621) | UINT_PTR getPageTableBase() type PTEStruct (line 661) | struct PTEStruct function BOOL (line 662) | BOOL walkPagingLayout(PEPROCESS PEProcess, UINT_PTR MaxAddress, PRESENTP... function CleanAccessedList (line 785) | void CleanAccessedList() function StoreAccessedRanges (line 803) | void StoreAccessedRanges(UINT_PTR StartAddress, UINT_PTR EndAddress, str... function enumAllAccessedPages (line 827) | int enumAllAccessedPages(PEPROCESS PEProcess) function getAccessedPageList (line 846) | int getAccessedPageList(PPRANGE List, int ListSizeInBytes) function MarkPageAsNotAccessed (line 875) | void MarkPageAsNotAccessed(UINT_PTR StartAddress, UINT_PTR EndAddress, s... function NTSTATUS (line 880) | NTSTATUS markAllPagesAsNeverAccessed(PEPROCESS PEProcess) function BOOLEAN (line 1280) | BOOLEAN GetMemoryRegionData(DWORD PID,PEPROCESS PEProcess, PVOID mempoin... FILE: src/memscan.h type ADDRESSENTRY (line 10) | typedef struct _ADDRESSENTRY { type MEMREGION (line 17) | typedef struct _MEMREGION //only holds regions that are allowed type MEMSCANOPTIONS (line 24) | typedef struct _MEMSCANOPTIONS type SCANDATA (line 38) | typedef struct _SCANDATA { type PRANGE (line 53) | typedef struct type PENTRY (line 59) | typedef struct FILE: src/noexceptions.c function KeQueryActiveProcessorCount (line 17) | int KeQueryActiveProcessorCount(PVOID x) function BOOL (line 34) | BOOL NoExceptions_Enter() function NoExceptions_CopyMemory (line 158) | int NoExceptions_CopyMemory(PVOID Destination, PVOID Source, int size) function NoExceptions_Leave (line 185) | void NoExceptions_Leave() function NoExceptions_Cleanup (line 202) | void NoExceptions_Cleanup() FILE: src/noexceptions.h type CPUSTATE (line 15) | typedef struct FILE: src/processlist.c function RTL_GENERIC_COMPARE_RESULTS (line 17) | RTL_GENERIC_COMPARE_RESULTS NTAPI ProcessListCompare(__in struct _RTL_GE... function PVOID (line 32) | PVOID NTAPI ProcessListAlloc(__in struct _RTL_GENERIC_TABLE *Table, __in... function VOID (line 41) | VOID NTAPI ProcessListDealloc(__in struct _RTL_GENERIC_TABLE *Table, __i... function VOID (line 48) | VOID GetThreadData(IN PDEVICE_OBJECT DeviceObject, IN PVOID Context) function VOID (line 94) | VOID CreateThreadNotifyRoutine(IN HANDLE ProcessId,IN HANDLE ThreadId,... function VOID (line 127) | VOID CreateProcessNotifyRoutine(IN HANDLE ParentId, IN HANDLE ProcessI... function VOID (line 372) | VOID CreateProcessNotifyRoutineEx(IN HANDLE ParentId, IN HANDLE Proces... function HANDLE (line 378) | HANDLE GetHandleForProcessID(IN HANDLE ProcessID) function VOID (line 396) | VOID CleanProcessList() FILE: src/processlist.h type ThreadData (line 9) | struct ThreadData type ProcessListData (line 20) | typedef struct type ProcessData (line 29) | struct ProcessData type ProcessEventdta (line 38) | typedef struct tagProcessEventData type ThreadEventDta (line 54) | typedef struct tagThreadEventData FILE: src/threads.c type ThreadData (line 16) | struct ThreadData type ProcessData (line 18) | struct ProcessData type ThreadData (line 19) | struct ThreadData function Ignore (line 40) | void Ignore(PKAPC Apc, PKNORMAL_ROUTINE NormalRoutine, PVOID NormalConte... function SuspendThreadAPCRoutine (line 46) | void SuspendThreadAPCRoutine(PVOID arg1, PVOID arg2, PVOID arg3) function DBKSuspendThread (line 65) | void DBKSuspendThread(ULONG ThreadID) function DBKResumeThread (line 111) | void DBKResumeThread(ULONG ThreadID) function DBKSuspendProcess (line 142) | void DBKSuspendProcess(ULONG ProcessID) function DBKResumeProcess (line 206) | void DBKResumeProcess(ULONG ProcessID) FILE: src/ultimap.c type _DataBlock (line 37) | typedef struct function ultimap_flushBuffers_all (line 77) | void ultimap_flushBuffers_all(UINT_PTR param) function ultimap_flushBuffers (line 87) | void ultimap_flushBuffers(void) function NTSTATUS (line 115) | NTSTATUS ultimap_continue(PULTIMAPDATAEVENT data) function NTSTATUS (line 136) | NTSTATUS ultimap_waitForData(ULONG timeout, PULTIMAPDATAEVENT data) function ultimap_cleanstate (line 218) | void ultimap_cleanstate() function perfmon_interrupt_centry (line 223) | int perfmon_interrupt_centry(void) function ultimap_pause (line 417) | void ultimap_pause(void) function VOID (line 422) | VOID ultimap_resume_dpc(IN struct _KDPC *Dpc, IN PVOID DeferredContext, ... function ultimap_resume (line 427) | void ultimap_resume(void) function VOID (line 432) | VOID ultimap_disable_dpc(IN struct _KDPC *Dpc, IN PVOID DeferredContext,... function ultimap_disable (line 451) | void ultimap_disable(void) function VOID (line 493) | VOID ultimap_setup_dpc(IN struct _KDPC *Dpc, IN PVOID DeferredContext, ... function ultimapapc (line 585) | void ultimapapc(PKAPC Apc, PKNORMAL_ROUTINE NormalRoutine, PVOID NormalC... function ultimapapcnormal (line 594) | void ultimapapcnormal(PVOID arg1, PVOID arg2, PVOID arg3) function perfmon_hook (line 608) | void perfmon_hook(__in struct _KINTERRUPT *Interrupt, __in PVOID Service... function NTSTATUS (line 653) | NTSTATUS ultimap(UINT64 cr3, UINT64 dbgctl_msr, int _DS_AREA_SIZE, BOOL ... FILE: src/ultimap.h type UINT64 (line 7) | typedef UINT64 QWORD; type DS_AREA_MANAGEMENT64 (line 28) | typedef struct type BTS (line 44) | typedef struct type DS_AREA_MANAGEMENT64 (line 54) | typedef DS_AREA_MANAGEMENT64 DS_AREA_MANAGEMENT; type PDS_AREA_MANAGEMENT64 (line 55) | typedef PDS_AREA_MANAGEMENT64 PDS_AREA_MANAGEMENT; type ULTIMAPEVENT (line 61) | typedef struct type ULTIMAPDATAEVENT (line 67) | typedef struct FILE: src/ultimap2.c function KeQueryMaximumProcessorCount (line 42) | unsigned int KeQueryMaximumProcessorCount() type ProcessorInfo (line 63) | typedef struct function suspendThread (line 115) | void suspendThread(PVOID StartContext) function NTSTATUS (line 147) | NTSTATUS ultimap2_continue(int cpunr) function NTSTATUS (line 179) | NTSTATUS ultimap2_waitForData(ULONG timeout, PULTIMAP2DATAEVENT data) function createUltimap2OutputFile (line 263) | void createUltimap2OutputFile(int cpunr) function WriteThreadForSpecificCPU (line 297) | void WriteThreadForSpecificCPU(PVOID StartContext) function ultimap2_LockFile (line 408) | void ultimap2_LockFile(int cpunr) function ultimap2_ReleaseFile (line 432) | void ultimap2_ReleaseFile(int cpunr) function UINT64 (line 445) | UINT64 ultimap2_GetTraceFileSize() function ultimap2_ResetTraceFileSize (line 460) | void ultimap2_ResetTraceFileSize() function SwitchToPABuffer (line 471) | void SwitchToPABuffer(struct _KDPC *Dpc, PVOID DeferredContext, PVOID Sy... function WaitForWriteToFinishAndSwapWriteBuffers (line 586) | void WaitForWriteToFinishAndSwapWriteBuffers(BOOL interruptedOnly) function bufferWriterThread (line 607) | void bufferWriterThread(PVOID StartContext) function NTSTATUS (line 713) | NTSTATUS ultimap2_flushBuffers() function RTIT_DPC_Handler (line 758) | void RTIT_DPC_Handler(__in struct _KDPC *Dpc, __in_opt PVOID DeferredCon... function PMI (line 766) | void PMI(__in struct _KINTERRUPT *Interrupt, __in PVOID ServiceContext) function ultimap2_disable_dpc (line 816) | void ultimap2_disable_dpc(struct _KDPC *Dpc, PVOID DeferredContext, PVOI... function ultimap2_setup_dpc (line 848) | void ultimap2_setup_dpc(struct _KDPC *Dpc, PVOID DeferredContext, PVOID ... function getToPAHeaderCount (line 974) | int getToPAHeaderCount(ULONG _BufferSize) function getToPAHeaderSize (line 979) | int getToPAHeaderSize(ULONG _BufferSize) function RTL_GENERIC_COMPARE_RESULTS (line 986) | RTL_GENERIC_COMPARE_RESULTS NTAPI ToPACompare(__in struct _RTL_GENERIC_T... function PVOID (line 1001) | PVOID NTAPI ToPAAlloc(__in struct _RTL_GENERIC_TABLE *Table, __in CLONG ... function VOID (line 1006) | VOID NTAPI ToPADealloc(__in struct _RTL_GENERIC_TABLE *Table, __in __drv... function NTSTATUS (line 1297) | NTSTATUS ultimap2_pause() function NTSTATUS (line 1314) | NTSTATUS ultimap2_resume() function SetupUltimap2 (line 1326) | void SetupUltimap2(UINT32 PID, UINT32 BufferSize, WCHAR *Path, int range... function UnregisterUltimapPMI (line 1533) | void UnregisterUltimapPMI() function DisableUltimap2 (line 1562) | void DisableUltimap2(void) FILE: src/ultimap2.h type URANGE (line 26) | typedef struct type RTIT_CTL (line 35) | typedef union { type RTIT_STATUS (line 67) | typedef union { type ToPA_ENTRY (line 80) | typedef union { type ToPA_LOOKUP (line 95) | typedef struct{ type ULTIMAP2DATAEVENT (line 100) | typedef struct type NTSTATUS (line 125) | typedef NTSTATUS(*PSSUSPENDPROCESS)(PEPROCESS p); FILE: src/ultimap2/apic.c function apic_clearPerfmon (line 18) | void apic_clearPerfmon() function setup_APIC_BASE (line 42) | void setup_APIC_BASE(void) function clean_APIC_BASE (line 62) | void clean_APIC_BASE(void) FILE: src/ultimap2/apic.h type UINT128 (line 7) | typedef struct { type APIC (line 14) | typedef volatile struct { FILE: src/vmxhelper.c function vmx_hasredirectedint1 (line 50) | int vmx_hasredirectedint1() function vmx_getversion (line 65) | unsigned int vmx_getversion() function vmx_getRealCR0 (line 86) | unsigned int vmx_getRealCR0() function UINT_PTR (line 102) | UINT_PTR vmx_getRealCR3() function vmx_getRealCR4 (line 118) | unsigned int vmx_getRealCR4() function vmx_redirect_interrupt1 (line 134) | unsigned int vmx_redirect_interrupt1(VMXInterruptRedirectType redirectty... function vmx_redirect_interrupt3 (line 161) | unsigned int vmx_redirect_interrupt3(VMXInterruptRedirectType redirectty... function vmx_redirect_interrupt14 (line 189) | unsigned int vmx_redirect_interrupt14(VMXInterruptRedirectType redirectt... function vmx_register_cr3_callback (line 216) | unsigned int vmx_register_cr3_callback(unsigned int cs, unsigned int eip... function vmx_exit_cr3_callback (line 244) | unsigned int vmx_exit_cr3_callback(unsigned int newcr3) function vmx_watch_pagewrites (line 267) | unsigned int vmx_watch_pagewrites(UINT64 PhysicalAddress, int Size, int ... function vmx_watch_pageaccess (line 306) | unsigned int vmx_watch_pageaccess(UINT64 PhysicalAddress, int Size, int ... function vmx_watch_retreivelog (line 345) | unsigned int vmx_watch_retreivelog(int ID, PPageEventListDescriptor resu... function vmx_watch_delete (line 376) | unsigned int vmx_watch_delete(int ID) function vmx_cloak_activate (line 398) | unsigned int vmx_cloak_activate(QWORD physicalPage) function vmx_cloak_deactivate (line 437) | unsigned int vmx_cloak_deactivate(QWORD physicalPage) function vmx_cloak_readOriginal (line 457) | unsigned int vmx_cloak_readOriginal(QWORD physicalPage, void *destination) function vmx_cloak_writeOriginal (line 482) | unsigned int vmx_cloak_writeOriginal(QWORD physicalPage, void *source) function vmx_changeregonbp (line 507) | unsigned int vmx_changeregonbp(QWORD physicalAddress, CHANGEREGONBPINFO ... function vmx_ultimap_getDebugInfo (line 540) | unsigned int vmx_ultimap_getDebugInfo(PULTIMAPDEBUGINFO debuginfo) function vmx_ultimap (line 564) | unsigned int vmx_ultimap(UINT_PTR cr3towatch, UINT64 debugctl_value, voi... function vmx_ultimap_disable (line 591) | unsigned int vmx_ultimap_disable() function vmx_ultimap_pause (line 609) | unsigned int vmx_ultimap_pause() function vmx_ultimap_resume (line 627) | unsigned int vmx_ultimap_resume() function vmx_disable_dataPageFaults (line 645) | unsigned int vmx_disable_dataPageFaults() function vmx_enable_dataPageFaults (line 663) | unsigned int vmx_enable_dataPageFaults() function UINT_PTR (line 681) | UINT_PTR vmx_getLastSkippedPageFault() function vmx_add_memory (line 699) | unsigned int vmx_add_memory(UINT64 *list, int count) function vmx_causedCurrentDebugBreak (line 754) | int vmx_causedCurrentDebugBreak() function vmx_init_dovmcall (line 772) | void vmx_init_dovmcall(int isIntel) FILE: src/vmxhelper.h type UINT64 (line 66) | typedef UINT64 QWORD; type CHANGEREGONBPINFO (line 68) | typedef struct _CHANGEREGONBPINFO type PageEventBasic (line 124) | typedef struct _pageevent_basic type FXSAVE64 (line 158) | typedef struct _fxsave64 type PageEventExtended (line 231) | typedef struct _pageevent_extended type PageEventBasicWithStack (line 237) | typedef struct _pageevent_basic_withstack type PageEventExtendedWithStack (line 243) | typedef struct _pageevent_extended_withstack type PageEventListDescriptor (line 250) | typedef struct _pageeventlistdescriptor type VMXInterruptRedirectType (line 268) | typedef enum {virt_differentInterrupt=0, virt_emulateInterrupt=1} VMXInt... type ULTIMAPDEBUGINFO (line 270) | typedef struct FILE: src/vmxoffload.c type INITVARS (line 35) | typedef struct _INITVARS type OriginalState (line 48) | typedef struct function cleanupDBVM (line 223) | void cleanupDBVM() { function initializeDBVM (line 266) | void initializeDBVM(PCWSTR dbvmimgpath) function vmxoffload_override (line 963) | void vmxoffload_override(CCHAR cpunr, PKDEFERRED_ROUTINE Dpc, PVOID Defe... function __drv_maxIRQL (line 1002) | __drv_functionClass(KDEFERRED_ROUTINE) FILE: src/vmxoffload.h type DBVMOffloadMemInfo (line 17) | typedef struct _DBVMOffloadMemInfo type _PTE (line 24) | struct _PTE type _PDE (line 41) | struct _PDE type _PDE2MB (line 58) | struct _PDE2MB type PTE_PAE (line 77) | typedef struct _PTE_PAE type PDE_PAE (line 95) | typedef struct _PDE_PAE type _PDE2MB_PAE (line 113) | struct _PDE2MB_PAE type _PDPTE_PAE (line 134) | struct _PDPTE_PAE