#include "introtypes.h"
#include "intrinsics.h"

Macros
#define	UNREFERENCED_PARAMETER(P) ((void)(P))

#define	UNREFERENCED_LOCAL_VARIABLE(V) ((void)(V))

#define	__FILENAME__ __FILE__

#define	_MM_HINT_T0 1

#define	_MM_HINT_T1 2

#define	_MM_HINT_T2 3

#define	_MM_HINT_NTA 0

#define	STATIC_ASSERT(Cond, Msg)

#define	ASSERT(x)

#define	TIMER_FRIENDLY

#define	__FILE_TAG__ 0xffffeeee

#define	ONE_KILOBYTE 1024ULL

#define	ONE_MEGABYTE (ONE_KILOBYTE * ONE_KILOBYTE)

#define	ONE_GIGABYTE (ONE_KILOBYTE * ONE_MEGABYTE)

#define	NSEC_PER_SEC (1000ULL * 1000ULL * 1000ULL)

#define	USEC_PER_SEC (1000ULL * 1000ULL)

#define	NSEC_PER_USEC 1000ULL

#define	NSEC_TO_SEC(nsec) ((nsec) / NSEC_PER_SEC)

#define	NSEC_TO_USEC(nsec) ((nsec) / NSEC_PER_USEC)

#define	ARRAYSIZE(A) (sizeof(A) / sizeof((A)[0]))

#define	CWSTRLEN(Wstring) ((sizeof(Wstring) - sizeof(WCHAR)) / sizeof(WCHAR))

#define	CSTRLEN(String) (sizeof(String) - sizeof(char))

#define	_PASTE(a, b) a##b

#define	PASTE(a, b) _PASTE(a,b)

#define	MIN(a, b)

#define	MAX(a, b)

#define	__ROUND_MASK(what, to) ((typeof(what))((to)-1))

#define	ROUND_UP(what, to) ((((what) - 1) \| __ROUND_MASK(what, to)) + 1)

#define	ROUND_DOWN(what, to) ((what) & ~__ROUND_MASK(what, to))

#define	__ALIGN(x, a) __ALIGN_MASK(x, (typeof(x))(a) - 1)

#define	__ALIGN_MASK(x, mask) (((x) + (mask)) & ~(mask))

#define	ALIGN_UP(x, a) __ALIGN((x), (a))

#define	ALIGN_DOWN(x, a) __ALIGN((x) - ((a) - 1), (a))

#define	IN_RANGE(x, start, end)

#define	IN_RANGE_INCLUSIVE(x, start, end)

#define	IN_RANGE_LEN(x, start, len)

#define	IN_RANGE_LEN_INCLUSIVE(x, start, len)

#define	RE32(x)

#define	SIGN_EX_8(x)

#define	SIGN_EX_16(x)

#define	SIGN_EX_32(x)

#define	SIGN_EX(sz, x)

#define	__unreachable __builtin_unreachable()

#define	__likely(x) __builtin_expect(!!(x), 1)

#define	__unlikely(x) __builtin_expect(!!(x), 0)

#define	BIT(x) (1ULL << (x))

#define	INITIAL_CRC_VALUE 0xFFFFFFFF

#define	BUG_ON_ALWAYS(cond)

#define	BUG_ON(cond)

#define	FIELD_OFFSET(type, field) ((SIZE_T)(&((type *)0)->field))

Macro Definition Documentation

◆ __ALIGN

#define __ALIGN	(	x,
		a
	)	__ALIGN_MASK(x, (typeof(x))(a) - 1)

Definition at line 161 of file introdefs.h.

◆ __ALIGN_MASK

#define __ALIGN_MASK	(	x,
		mask
	)	(((x) + (mask)) & ~(mask))

Definition at line 162 of file introdefs.h.

◆ __FILE_TAG__

#define __FILE_TAG__ 0xffffeeee

Definition at line 86 of file introdefs.h.

Referenced by DbgCrWriteTestCallback().

◆ FILENAME

#define __FILENAME__ __FILE__

Definition at line 33 of file introdefs.h.

◆ __likely

#define __likely ( x ) __builtin_expect(!!(x), 1)

Definition at line 211 of file introdefs.h.

◆ __ROUND_MASK

#define __ROUND_MASK	(	what,
		to
	)	((typeof(what))((to)-1))

Definition at line 156 of file introdefs.h.

◆ __unlikely

#define __unlikely ( x ) __builtin_expect(!!(x), 0)

Definition at line 212 of file introdefs.h.

◆ __unreachable

#define __unreachable __builtin_unreachable()

Definition at line 210 of file introdefs.h.

◆ _MM_HINT_NTA

#define _MM_HINT_NTA 0

Definition at line 41 of file introdefs.h.

◆ _MM_HINT_T0

#define _MM_HINT_T0 1

Definition at line 38 of file introdefs.h.

◆ _MM_HINT_T1

#define _MM_HINT_T1 2

Definition at line 39 of file introdefs.h.

◆ _MM_HINT_T2

#define _MM_HINT_T2 3

Definition at line 40 of file introdefs.h.

◆ _PASTE

#define _PASTE	(	a,
		b
	)	a##b

Definition at line 108 of file introdefs.h.

◆ ALIGN_DOWN

#define ALIGN_DOWN	(	x,
		a
	)	__ALIGN((x) - ((a) - 1), (a))

Definition at line 165 of file introdefs.h.

Referenced by IntExceptGetVictimIntegrity(), IntKsymRelativeFindOffsetTableEnd(), IntPeGetRuntimeFunction(), IntPeGetRuntimeFunctionInBuffer(), IntPeParseUnwindData(), IntPeParseUnwindDataInBuffer(), IntWinGuestValidateKernel(), IntWinStackUserTrapFrameGet32(), and IntWinStackUserTrapFrameGet64().

◆ ALIGN_UP

#define ALIGN_UP	(	x,
		a
	)	__ALIGN((x), (a))

Definition at line 164 of file introdefs.h.

Referenced by IntDetSetHook(), IntKsymInit(), IntKsymRelativeFindOffsetTableEnd(), IntLixVdsoDynamicProtectNonRelocate(), IntPeGetSectionHeaderByRva(), IntThrSafeLixInspectWaitingThread(), and IntVirtMemMapMultiPage().

◆ ARRAYSIZE

#define ARRAYSIZE ( A ) (sizeof(A) / sizeof((A)[0]))

Definition at line 101 of file introdefs.h.

Referenced by DbgShowHelp(), IncStatsCallsCount(), IntAlertFillDriverObject(), IntAlertFillLixKmModule(), IntAlertFillLixProcess(), IntAlertFillWinKmModule(), IntAlertFillWinProcess(), IntAlertFillWinUmModule(), IntCamiLoadPatternSignatures(), IntCamiLoadWindows(), IntDbgEnterDebugger2(), IntDbgProcessCommand(), IntDetHandleWrite(), IntDriverCacheExportFind(), IntDriverCacheInv(), IntExceptDumpSignatures(), IntExceptLixKernelGetOriginator(), IntExceptLixKernelIsMemoryFunc(), IntExceptUserGetExecOriginator(), IntExceptUserHandleMemoryFunctions(), IntGlueInit(), IntGuestDetectOs(), IntHookGpaCommitHooks(), IntHookGpaIsPageHooked(), IntKsymFindIndexesTableStart(), IntLixAgentGetHandlerByTag(), IntLixApiHookAll(), IntLixCredAnalyzeStack(), IntLixDrvHandleWrite(), IntLixDrvIsActivePatch(), IntLixFileCachePathIsValid(), IntLixGuestResolveSymbols(), IntLixNetGetConnectionFromSocket(), IntLixPatchSwapgs(), IntLixTaskGuestTerminating(), IntLixVdsoDynamicProtectRelocate(), IntLixVdsoHandleWrite(), IntLixVdsoUnprotect(), IntLogCriticalStructureCoruption(), IntPhysMemFastMap(), IntThrSafeLixInspectRunningThreadOnCpu(), IntThrSafeWinInspectRunningThreadOnCpu(), IntWinApiUpdateHookDescriptor(), IntWinDagentIsInitialDll(), IntWinDpiCheckCreation(), IntWinDrvIsProtected(), IntWinDrvIsProtectedAv(), IntWinDrvObjIsProtected(), IntWinDrvObjIsProtectedAv(), IntWinDumpPrivilegesMask(), IntWinGuestFindDriversNamespace(), IntWinGuestFindDriversNamespaceNoBuffer(), IntWinModGetProtectionOptionForModule(), IntWinModHandleModulePathInMemory(), IntWinModulesChangeProtectionFlags(), IntWinNetCheckPartition(), IntWinNetGetTcpEndpoint(), IntWinNetGetTcpListener(), IntWinProcCreateProcessObject(), IntWinProcDumpEgFlags(), IntWinProcGetProtectedInfo(), IntWinProcGetProtectedInfoEx(), IntWinProcHandleCreate(), IntWinProcHandleInstrument(), IntWinProcMarkAsSystemProcess(), IntWinProcPrepareInstrument(), IntWinSudCheckIntegrity(), IntWinSudProtectIntegrity(), IntWinUmModMustCacheExports(), IntWinVadShortDump(), and utf16_for_log().

◆ ASSERT

#define ASSERT ( x )

Definition at line 62 of file introdefs.h.

Referenced by IntCamiClearUpdateBuffer(), and IntCamiLoadLinux().

◆ BIT

#define BIT ( x ) (1ULL << (x))

Definition at line 217 of file introdefs.h.

◆ BUG_ON

#define BUG_ON ( cond )

Definition at line 236 of file introdefs.h.

Referenced by IntDetHandleWrite(), IntHookGpaEnableDisableVe(), IntHookGpaSetNewPageProtection(), IntKsymFindByName(), IntKsymInit(), IntLixNetIterateTaskConnections(), and IntLixNetSendGuestConnections().

◆ BUG_ON_ALWAYS

#define BUG_ON_ALWAYS ( cond )

Value:

do {                                                            \
        if (__unlikely((cond))) {                                   \
            IntBugCheck();                                          \
        }                                                           \
    } while (0)

Definition at line 224 of file introdefs.h.

◆ CSTRLEN

#define CSTRLEN ( String ) (sizeof(String) - sizeof(char))

Definition at line 105 of file introdefs.h.

Referenced by IntLixFileGetPath(), IntLixGuestFindKernelVersionAndRo(), and IntWinProcCreateProcessObject().

◆ CWSTRLEN

#define CWSTRLEN ( Wstring ) ((sizeof(Wstring) - sizeof(WCHAR)) / sizeof(WCHAR))

Definition at line 104 of file introdefs.h.

Referenced by IntAlertGetHashForWindowsName(), IntWinModHandleModulePathInMemory(), and IntWinObjParseDriverDirectory().

◆ FIELD_OFFSET

#define FIELD_OFFSET	(	type,
		field
	)	((SIZE_T)(&((type *)0)->field))

Definition at line 239 of file introdefs.h.

Referenced by IntExceptGetOriginatorFromModification(), IntWinGetPrcoCmdLineHandleUserParamsInMemory(), IntWinProcReadCommandLine(), and IntWinReadSid().

◆ IN_RANGE

#define IN_RANGE	(	x,
		start,
		end
	)

Value:

({ __auto_type x_ir_ = (x); \

((x_ir_ >= (start)) && (x_ir_ < (end))); })

Definition at line 167 of file introdefs.h.

Referenced by IntDetSetHook(), IntExceptLixGetVictimDriver(), IntLixDrvGetSecName(), IntLixDrvValidate(), IntLixDumpStacktrace(), IntLixGuestAllocateFill(), IntLixHookKernelRead(), IntLixMmFindVmaInLinkedList(), IntLixVdsoIsInitWrite(), and IntThrSafeWinInspectRunningThreadOnCpu().

◆ IN_RANGE_INCLUSIVE

#define IN_RANGE_INCLUSIVE	(	x,
		start,
		end
	)

Value:

({ __auto_type x_ir_ = (x); \

((x_ir_ >= (start)) && (x_ir_ <= (end))); })

Definition at line 171 of file introdefs.h.

Referenced by IntGetVersionStringLinux(), and IntLixTaskIsUserStackPivoted().

◆ IN_RANGE_LEN

#define IN_RANGE_LEN	(	x,
		start,
		len
	)

Value:

({ __auto_type x_ir_ = (x);                                         \
        __auto_type start_ir_ = (start);                                \
        __auto_type len_ir_ = (len);                                    \
        ((x_ir_ >= start_ir_) && (x_ir_ < start_ir_ + len_ir_)); })

Definition at line 175 of file introdefs.h.

Referenced by IntDetCallCallback(), IntDetIsPtrInHandler(), IntDisasmBuffer(), IntDisasmGva(), IntDriverCacheInv(), IntDriverFindByAddress(), IntExceptInvCbCacheByGva(), IntExceptLixGetVictimDriver(), IntHookObjectFindRegion(), IntLixAgentHandleInt3(), IntLixDrvGetSecName(), IntLixDrvIsActivePatch(), IntLixDrvIsLegitimateTextPoke(), IntLixDumpStacktrace(), IntLixKernelHandleRead(), IntPeGetRuntimeFunctionInBuffer(), IntWinDrvHeadersInMemory(), and IntWinUmModFindByAddress().

◆ IN_RANGE_LEN_INCLUSIVE

#define IN_RANGE_LEN_INCLUSIVE	(	x,
		start,
		len
	)

Value:

({ __auto_type x_ir_ = (x);                                         \
        __auto_type start_ir_ = (start);                                \
        __auto_type len_ir_ = (len);                                    \
        ((x_ir_ >= start_ir_) && (x_ir_ <= start_ir_ + len_ir_)); })

Definition at line 181 of file introdefs.h.

◆ INITIAL_CRC_VALUE

#define INITIAL_CRC_VALUE 0xFFFFFFFF

Definition at line 221 of file introdefs.h.

Referenced by IntAlertCreateEptException(), IntAlertCreateInjectionException(), IntAlertCreateIntegrityException(), IntAlertCreateModuleLoadException(), IntAlertCreateProcessCreationException(), IntAlertEptFillFromVictimZone(), IntAlertFillCodeBlocks(), IntAlertGetHashForLinuxName(), IntAlertGetHashForWindowsName(), IntExceptGetOriginatorFromModification(), IntExceptKernel(), IntExceptKernelLogWindowsInformation(), IntExceptKernelUser(), IntExceptLixKernelGetOriginator(), IntExceptPrintWinModInfo(), IntExceptUser(), IntExceptUserGetExecOriginator(), IntExceptUserGetOriginator(), IntExceptVerifyValueSig(), IntExceptWinKernelGetOriginator(), IntFragExtractCodeBlocks(), IntFragLogCodeBlocks(), IntIntegrityAddRegion(), IntIntegrityCheckAll(), IntIntegrityRecalculate(), IntLixApiCmpFunctionNameWithHash(), IntLixCredCalculateChecksum(), IntLixDrvCreateDriverObject(), IntLixDrvCreateKernel(), IntLixTaskCreate(), IntLixTaskCreateInitTask(), IntLixTaskHandleExec(), IntSerializeCodeBlocksPattern(), IntVeInit(), IntWinApiUpdateHookDescriptor(), IntWinDrvCreateFromAddress(), IntWinDrvObjCreateFromAddress(), IntWinModCacheFixNamePointers(), IntWinModFillDriverInjectionData(), IntWinProcCreateProcessObject(), IntWinProcHandleCopyMemory(), IntWinSDCheckAclIntegrity(), IntWinSDCheckSecDescIntegrity(), IntWinSudHandleFieldModification(), IntWinThrHandleQueueApc(), IntWinThrHandleThreadHijack(), IntWinTokenPrivsCheckIntegrityOnProcess(), and IntWinUmPathCreate().

◆ MAX

#define MAX	(	a,
		b
	)

Value:

({ __auto_type a_max_ = (a);                \
        __auto_type b_max_ = (b);               \
        (a_max_ > b_max_) ? a_max_ : b_max_; })

Definition at line 151 of file introdefs.h.

Referenced by IntAlertCreateCbSignature(), IntDetGetArguments(), IntExceptKernelLogLinuxInformation(), IntExceptKernelLogWindowsInformation(), IntExceptUserLogLinuxInformation(), IntExceptUserLogWindowsInformation(), IntHandleMemAccess(), IntLixTaskFetchCmdLine(), IntLixVdsoDynamicProtect(), IntWinDpiCheckCreation(), IntWinModBlockHandleExecution(), IntWinVadAdjustRange(), and IntWinVadHandleProtectGeneric().

◆ MIN

#define MIN	(	a,
		b
	)

Value:

({ __auto_type a_min_ = (a);                \
        __auto_type b_min_ = (b);               \
        (a_min_ < b_min_) ? a_min_ : b_min_; })

Definition at line 146 of file introdefs.h.

Referenced by IntAlertCreateCbSignature(), IntAlertEptFillFromVictimZone(), IntAlertFillDpiExtraInfo(), IntAlertFillReadInfo(), IntAlertFillWriteInfo(), IntCamiLoadPatternSignatures(), IntCamiLoadWindows(), IntDetGetArguments(), IntDetSendIntegrityAlert(), IntExceptKernel(), IntExceptKernelLogLinuxInformation(), IntExceptKernelLogWindowsInformation(), IntExceptKernelUser(), IntExceptUser(), IntExceptUserLogLinuxInformation(), IntExceptUserLogWindowsInformation(), IntExceptVerifyValueCodeSig(), IntGlueInit(), IntHandleEptViolation(), IntHookObjectHookRegion(), IntIntegrityAddRegion(), IntIntegrityCheckAll(), IntIntegrityRecalculate(), IntLixAgentNameIsRunning(), IntLixDentryGetName(), IntLixDrvCreateFromAddress(), IntLixGuestClearGuestMemory(), IntLixGuestInitAgentCompletion(), IntLixNetIterateTaskConnections(), IntLixTaskAddProtected(), IntLogExceptionRecord(), IntMemClkCloakRegion(), IntMemClkHandleRead(), IntMemClkHandleSwap(), IntMemClkHashRegion(), IntPeFindExportByName(), IntPeFindExportByRva(), IntPeFindExportByRvaInBuffer(), IntPeGetSectionHeadersByName(), IntPhysMemReadWriteAnySize(), IntSerializeDpiWinPivotedStack(), IntSerializeExtractCodeBlocks(), IntSerializeReadInfo(), IntSerializeWriteInfo(), IntSwapMemPageSwappedIn(), IntSwapMemReadData(), IntThrGetStackSize(), IntThrSafeIsStackPtrInIntro(), IntThrSafeMoveReturn(), IntUpdateAddUserExceptionGlob(), IntVirtMemFetchString(), IntVirtMemReadWrite(), IntVirtMemSafeWrite(), IntVirtMemSet(), IntWinAgentHandleDriverVmcall(), IntWinAgentInject(), IntWinApiUpdateHookDescriptor(), IntWinGetPrcoCmdLineHandleCmdLineInMemory(), IntWinHalHandleHalHeapExec(), IntWinIdtProtectOnCpuEpt(), IntWinIdtProtectOnCpuIntegrity(), IntWinModComparePaths(), IntWinModHandleExportsInMemory(), IntWinProcHandleCopyMemory(), IntWinReadSid(), IntWinSDSendAclIntegrityViolation(), IntWinSDSendSecDescIntViolation(), IntWinStackTraceGetUser(), IntWinSudHandleFieldModification(), IntWinThrHandleQueueApc(), IntWinThrHandleThreadHijack(), IntWinVadAdjustRange(), and IntWinVadHandleProtectGeneric().

◆ NSEC_PER_SEC

#define NSEC_PER_SEC (1000ULL * 1000ULL * 1000ULL)

Definition at line 93 of file introdefs.h.

Referenced by AddToTime(), DiffTime(), IntLixTaskCreate(), IntStatsDumpAll(), and IntStatStop().

◆ NSEC_PER_USEC

#define NSEC_PER_USEC 1000ULL

Definition at line 95 of file introdefs.h.

◆ NSEC_TO_SEC

#define NSEC_TO_SEC ( nsec ) ((nsec) / NSEC_PER_SEC)

Definition at line 97 of file introdefs.h.

Referenced by IntLixCrashDumpDmesg(), and IntStatsDumpAll().

◆ NSEC_TO_USEC

#define NSEC_TO_USEC ( nsec ) ((nsec) / NSEC_PER_USEC)

Definition at line 98 of file introdefs.h.

Referenced by IntLixCrashDumpDmesg().

◆ ONE_GIGABYTE

#define ONE_GIGABYTE (ONE_KILOBYTE * ONE_MEGABYTE)

Definition at line 91 of file introdefs.h.

Referenced by GlueIsScanEnginesApiAvailable(), IntHookObjectHookRegion(), IntLixTaskFetchCmdLine(), IntLixVmaProtect(), IntWinGuestIsIncreasedUserVa(), and IntWinVadFetchVadFromMemory().

◆ ONE_KILOBYTE

#define ONE_KILOBYTE 1024ULL

Definition at line 89 of file introdefs.h.

Referenced by IntLixGuestInit(), IntLixTaskAddProtected(), IntPeValidateHeader(), and utf16_for_log().

◆ ONE_MEGABYTE

#define ONE_MEGABYTE (ONE_KILOBYTE * ONE_KILOBYTE)

Definition at line 90 of file introdefs.h.

Referenced by DbgIterateVaSpace(), IntWinGuestFindKernel(), IntWinGuestValidateKernel(), IntWinHalFindHalHeapAndInterruptController(), IntWinHalFindInterruptController(), IntWinModHookPoly(), IntWinPfnIsMmPfnDatabase(), and IntWinUmModCacheFillExports().

◆ PASTE

#define PASTE	(	a,
		b
	)	_PASTE(a,b)

Definition at line 109 of file introdefs.h.

◆ RE32

#define RE32 ( x )

Value:

({ __auto_type x_re32_ = (x);                                       \
        (((x_re32_ & 0xFF) << 24) | \
         ((x_re32_ & 0xFF00) << 8) | \
        ((x_re32_ & 0xFF0000) >> 8) | \
        ((x_re32_ & 0xFF000000) >> 24)) })

Definition at line 187 of file introdefs.h.

◆ ROUND_DOWN

#define ROUND_DOWN	(	what,
		to
	)	((what) & ~__ROUND_MASK(what, to))

Definition at line 159 of file introdefs.h.

Referenced by IntHookGpaSetHook(), IntHookGpaSetNewPageProtection(), IntWinNetFillTcpStruct(), IntWinNetFindTcpPartition(), IntWinNetGetAddrFam(), and IntWinNetGetTcpPortPoolFromCompartment().

◆ ROUND_UP

#define ROUND_UP	(	what,
		to
	)	((((what) - 1) \| __ROUND_MASK(what, to)) + 1)

◆ SIGN_EX

#define SIGN_EX	(	sz,
		x
	)

Value:

({ __auto_type x_se_ = (x); \

((sz) == 1 ? SIGN_EX_8(x_se_) : (sz) == 2 ? SIGN_EX_16(x_se_) : (sz) == 4 ? SIGN_EX_32(x_se_) : x_se_); })

SIGN_EX_16

#define SIGN_EX_16(x)

Definition: introdefs.h:198

SIGN_EX_32

#define SIGN_EX_32(x)

Definition: introdefs.h:202

SIGN_EX_8

#define SIGN_EX_8(x)

Definition: introdefs.h:194

Definition at line 206 of file introdefs.h.

Referenced by IntDetRelocate(), IntDetSetHook(), and IntVeFindKernelKvaShadowAndKernelExit().

◆ SIGN_EX_16

#define SIGN_EX_16 ( x )

Value:

({ __auto_type x_se16_ = (x); \

((x_se16_ & 0x00008000) ? (0xFFFFFFFFFFFF0000 | x_se16_) : x_se16_); })

Definition at line 198 of file introdefs.h.

◆ SIGN_EX_32

#define SIGN_EX_32 ( x )

Value:

({ __auto_type x_se32_ = (x); \

((x_se32_ & 0x80000000) ? (0xFFFFFFFF00000000 | x_se32_) : x_se32_); })

Definition at line 202 of file introdefs.h.

Referenced by IntDetSetHook(), IntDetSetLixHook(), IntLixGuestResolveExTableLimits(), and IntLixVdsoResolveImageAddress().

◆ SIGN_EX_8

#define SIGN_EX_8 ( x )

Value:

({ __auto_type x_se8_ = (x); \

((x_se8_ & 0x00000080) ? (0xFFFFFFFFFFFFFF00 | x_se8_) : x_se8_); })

Definition at line 194 of file introdefs.h.

◆ STATIC_ASSERT

#define STATIC_ASSERT	(	Cond,
		Msg
	)

Definition at line 50 of file introdefs.h.

Referenced by IntLixGuestResolveSymbols(), and IntWinProcCreateProcessObject().

◆ TIMER_FRIENDLY

#define TIMER_FRIENDLY

Definition at line 83 of file introdefs.h.

Referenced by IntDisasmGva(), IntDumpArchRegs(), IntDumpBuffer(), IntDumpGvaEx(), IntIntegrityDeleteRegion(), IntWinProcProtect(), IntWinSDCheckAclIntegrity(), IntWinSelfMapHandleCr3SelfMapWrite(), IntWinSudHandleFieldModification(), and IntWinTokenPrivsCheckIntegrityOnProcess().

◆ UNREFERENCED_LOCAL_VARIABLE

#define UNREFERENCED_LOCAL_VARIABLE ( V ) ((void)(V))

Definition at line 30 of file introdefs.h.

Referenced by DbgMitigateSwapgs(), IntLixAgentFindInstruction(), IntLixDrvHandleWrite(), IntSerializeDump(), and IntWinAgentFindInstruction().

◆ UNREFERENCED_PARAMETER

#define UNREFERENCED_PARAMETER ( P ) ((void)(P))

Definition at line 29 of file introdefs.h.

Referenced by DbgCrWriteTestCallback(), DbgLogFilePath(), DbgSwapCallback(), DbgVaModificationHandler(), DbgVaSpaceIterationCallbackCount(), IntAbortEnableIntro(), IntAgentHandleLogGatherVmcall(), IntAgentHandleRemediationVmcall(), IntAlertCreateCrException(), IntAlertCreateEptException(), IntAlertCreateInjectionException(), IntAlertCreateModuleLoadException(), IntAlertCreateMsrException(), IntAlertCreateProcessCreationException(), IntCrLixHandleWrite(), IntCrWinHandleWrite(), IntDecDecodeAccessSize(), IntDecDecodeOperandSize(), IntDetPatchFunction(), IntDisableIntro(), IntDriverLoadHandler(), IntDriverUnloadHandler(), IntDtrHandleWrite(), IntExcept(), IntExceptKernelUserVerifyExtra(), IntExceptKernelVerifyExtra(), IntExceptVerifyExportSig(), IntExceptVerifyIdtSignature(), IntExceptVerifyProcessCreationSignature(), IntExceptVerifyValueSig(), IntExceptVerifyVersionIntroSignature(), IntExceptVerifyVersionOsSignature(), IntGuestHandleCr3Write(), IntGuestUninitOnBugcheck(), IntHandleBreakpoint(), IntHandleEventInjection(), IntHookGpaDeleteHook(), IntHookGpaDeleteHookInternal(), IntHookGvaDeleteHook(), IntHookGvaDeleteHookInternal(), IntHookGvaHandleSwap(), IntHookObjectDeleteRegion(), IntHookObjectRemoveRegionInternal(), IntHookPtmDeleteHook(), IntHookPtmDeleteHookInternal(), IntHookPtmDeleteTableHook(), IntHookPtmWriteCallback(), IntHookPtsControlEntry(), IntHookPtsDisableEntry(), IntHookPtsWriteCallback(), IntIcInvdEntry(), IntIcSwapHandler(), IntIcWriteHandler(), IntInjectFileAgentInGuest(), IntInjectProcessAgentInGuest(), IntLixAccessRemoteVmHandler(), IntLixCommitCredsHandle(), IntLixCrashHandle(), IntLixCrashPanicHandler(), IntLixDrvInitVfreeHandler(), IntLixGuestAgentContentHandler(), IntLixGuestDetourDataHandler(), IntLixGuestInitAgentCompletion(), IntLixGuestInitAgentHypercall(), IntLixIdtWriteHandler(), IntLixJumpLabelHandler(), IntLixMsrHandleWrite(), IntLixPatchHandler(), IntLixProcGetProtOption(), IntLixStackTraceGet(), IntLixTaskHandleDoExit(), IntLixTaskHandleExec(), IntLixTaskHandleFork(), IntLixVmaAdjust(), IntLixVmaChangeProtection(), IntLixVmaExpandDownwards(), IntLixVmaHandlePageExecution(), IntLixVmaInsert(), IntLixVmaRemove(), IntModBlockHandleBlockModHeadersInMemory(), IntModBlockHandlePreInjection(), IntNotifyGuestPowerStateChange(), IntPtCompleteUnloader(), IntPtiCompleteLoader(), IntPtiDeliverDriverForLoad(), IntPtiDeliverDriverForUnload(), IntPtiDeployLoader(), IntPtiDeployUnloader(), IntPtiHandleExecute(), IntPtiHandleWrite(), IntPtiRbTreeNodeFree(), IntSerializeDpiWinDebug(), IntSerializeDpiWinHeapSpray(), IntSerializeDpiWinPivotedStack(), IntSerializeDpiWinStolenToken(), IntSerializeDpiWinThreadStart(), IntSerializeDpiWinTokenPrivs(), IntSerializeKmMisc(), IntSerializeLixKmOriginator(), IntSerializeLixKmVictim(), IntSerializeLixUmMisc(), IntSerializeLixUmOriginator(), IntSerializeLixUmVictim(), IntSerializeWinKmOriginator(), IntSerializeWinKmVictim(), IntSerializeWinUmMisc(), IntSerializeWinUmOriginator(), IntSerializeWinUmVictim(), IntShcIsSuspiciousCode(), IntStatStart(), IntSwapMemCleanupCallback(), IntSwapMemHandleBreakpointAgent(), IntSwapMemPageSwappedIn(), IntUnmapGpaForTranslation(), IntUnpPageExecuteCallback(), IntUnpPageWriteCallback(), IntUpdateLoadExceptions(), IntVasDeleteTable(), IntVasPageTableWriteCallback(), IntVeCompleteLoader(), IntVeCompleteUnloader(), IntVeDeliverDriverForLoad(), IntVeDeliverDriverForUnload(), IntVeDeployLoader(), IntVeDeployUnloader(), IntVeHandleAccess(), IntVeHandleSwap(), IntVirtMemMap(), IntWinAgentFree(), IntWinAgentHandleAppVmcall(), IntWinAgentHandleInt3(), IntWinAgentInject(), IntWinAgentInjectBreakpoint(), IntWinDagentCheckNativeSubsystem(), IntWinDagentHandleSlackWritable(), IntWinDagentHandleSuspModExecution(), IntWinDagentHandleVerifierReason(), IntWinDepComplete(), IntWinDepDeploy(), IntWinDpiForceFeedbackIfNeeded(), IntWinDpiGetViolationAddress(), IntWinDrvFreeEntry(), IntWinDrvHandleDriverEntry(), IntWinDrvHandleWrite(), IntWinDrvHeadersInMemory(), IntWinGetPrcoCmdLineHandleCmdLineInMemory(), IntWinGetPrcoCmdLineHandleUserParamsInMemory(), IntWinGetProcCmdLineHandleBufferInMemory(), IntWinGuestKernelHeadersInMemory(), IntWinGuestSectionInMemory(), IntWinHalHandleHalHeapExec(), IntWinHalHeadersInMemory(), IntWinHalSectionInMemory(), IntWinIdtWriteHandler(), IntWinInfHookHandleSiloFirstWrite(), IntWinInfHookSppViolationCallbackWmiPtrChanged(), IntWinInfHookSppWmiSiloStatsCallback(), IntWinInfHookWmiGetCpuClockSppCallback(), IntWinInfHookWmiGetCpuClockSppStatsCallback(), IntWinModBlockHandleExecution(), IntWinModCacheExportNodeFree(), IntWinModHandleExportsInMemory(), IntWinModHandleMainModuleInMemory(), IntWinModHandleModuleHeadersInMemory(), IntWinModHandlePreInjection(), IntWinModWriteValidHandler(), IntWinMsrHandleWrite(), IntWinNetDumpConnection(), IntWinObjHandleDirectoryEntryInMemory(), IntWinObjHandleDriverDirectoryEntryInMemory(), IntWinObjHandleObjectInMemory(), IntWinObjHandleRootDirTagInMemory(), IntWinObjParseDriverDirectory(), IntWinPatchVadHandleCommit(), IntWinPfnHandleTranslationChange(), IntWinPowHandlePowerStateChange(), IntWinProcAdd(), IntWinProcPatchCopyMemoryDetour(), IntWinProcPatchPspInsertProcess86(), IntWinProcPatchSwapOut32(), IntWinProcPatchSwapOut64(), IntWinProcPrepareInstrument(), IntWinProcRbTreeNodeFree(), IntWinStackTraceGet32(), IntWinSudHandleSudExec(), IntWinThrHandleThreadHijack(), IntWinThrPatchThreadHijackHandler(), IntWinThrPrepareApcHandler(), IntWinTokenPrivsHandleWrite(), IntWinUmPathRbTreeNodeFree(), IntWinVadDump(), IntWinVadHandleFilePathInMemory(), IntWinVadHandlePageExecution(), IntWinVadPatchDeleteVaRange(), IntWinVadPatchFinishVadDeletion(), IntWinVadPatchInsert(), IntWinVadPatchInsertMap(), IntWinVadPatchInsertPrivate(), IntWinVadPatchVirtualProtect(), IntWinVadRemoveRanges(), IntWinVadShortDump(), IntWinVadStaticInsertNodeIntoProcess(), and nd_vsnprintf_s().

◆ USEC_PER_SEC

#define USEC_PER_SEC (1000ULL * 1000ULL)

Definition at line 94 of file introdefs.h.

Macros

Macro Definition Documentation

◆ __ALIGN

◆ __ALIGN_MASK

◆ __FILE_TAG__

◆ __FILENAME__

◆ __likely

◆ __ROUND_MASK

◆ __unlikely

◆ __unreachable

◆ _MM_HINT_NTA

◆ _MM_HINT_T0

◆ _MM_HINT_T1

◆ _MM_HINT_T2

◆ _PASTE

◆ ALIGN_DOWN

◆ ALIGN_UP

◆ ARRAYSIZE

◆ ASSERT

◆ BIT

◆ BUG_ON

◆ BUG_ON_ALWAYS

◆ CSTRLEN

◆ CWSTRLEN

◆ FIELD_OFFSET

◆ IN_RANGE

◆ IN_RANGE_INCLUSIVE

◆ IN_RANGE_LEN

◆ IN_RANGE_LEN_INCLUSIVE

◆ INITIAL_CRC_VALUE

◆ MAX

◆ MIN

◆ NSEC_PER_SEC

◆ NSEC_PER_USEC

◆ NSEC_TO_SEC

◆ NSEC_TO_USEC

◆ ONE_GIGABYTE

◆ ONE_KILOBYTE

◆ ONE_MEGABYTE

◆ PASTE

◆ RE32

◆ ROUND_DOWN

◆ ROUND_UP

◆ SIGN_EX

◆ SIGN_EX_16

◆ SIGN_EX_32

◆ SIGN_EX_8

◆ STATIC_ASSERT

◆ TIMER_FRIENDLY

◆ UNREFERENCED_LOCAL_VARIABLE

◆ UNREFERENCED_PARAMETER

◆ USEC_PER_SEC

◆ FILENAME