aghcall.h

Go to the documentation of this file.

/*
 * Copyright (c) 2020 Bitdefender
 * SPDX-License-Identifier: Apache-2.0
 */
#ifndef _AGHCALL_H_
#define _AGHCALL_H_


#define AGENT_HCALL_FETCH_CMD       1   
#define AGENT_HCALL_FETCH_CHUNK     2   
#define AGENT_HCALL_MOD_BASE        3   
#define AGENT_HCALL_OWN_BASE        4   
#define AGENT_HCALL_VE              5   
#define AGENT_HCALL_PT              6   
#define AGENT_HCALL_VCPUID          7   
#define AGENT_HCALL_SYS_LNK         9   


#define AGENT_HCALL_ERROR           ((DWORD)-1)

#define AGENT_MAX_COMMAND_LINE_LENGTH  1024
#define AGENT_MAX_AGENT_NAME_LENGTH    32

typedef enum _AGENT_TYPE
{
    AGENT_TYPE_FILE,            
    AGENT_TYPE_PROCESS,         
    AGENT_TYPE_LIBRARY,         
    AGENT_TYPE_BINARY,          
    AGENT_TYPE_DRIVER,          
    AGENT_TYPE_BREAKPOINT,      
    AGENT_TYPE_VE_LOADER,       
    AGENT_TYPE_VE_UNLOADER,     
    AGENT_TYPE_PT_LOADER,       
    AGENT_TYPE_PT_UNLOADER,     
} AGENT_TYPE;


#define AGENT_COMMAND_VERSION       3


typedef struct _AGENT_COMMAND
{
    unsigned int        Version;    
    unsigned int        Type;       
    unsigned int        Pid;        
    unsigned int        Synched;    
    unsigned int        Size;       
    unsigned int        Flags;      
    unsigned long long  Pointer;    
    unsigned int        Agid;       

    char                Name[AGENT_MAX_AGENT_NAME_LENGTH];

    char                Args[AGENT_MAX_COMMAND_LINE_LENGTH];
} AGENT_COMMAND, *PAGENT_COMMAND;

#endif // _AGHCALL_H_