Bitdefender Hypervisor Memory Introspection
_AGENT_COMMAND Struct Reference

#include <aghcall.h>

Data Fields

unsigned int Version
 Structure version. Check out AGENT_COMMAND_VERSION. More...
 
unsigned int Type
 The agent type. One of AGENT_TYPE. More...
 
unsigned int Pid
 The process PID from which to start a process agent. More...
 
unsigned int Synched
 Always FALSE for now. Will not wait for the process agent to finish. More...
 
unsigned int Size
 The size of the agent. More...
 
unsigned int Flags
 Note used. More...
 
unsigned long long Pointer
 A pointer to the agent contents in guest memory. More...
 
unsigned int Agid
 Internal use; IT'S NOT the agent tag. More...
 
char Name [AGENT_MAX_AGENT_NAME_LENGTH]
 The agent name. This will be the file name or the process name. More...
 
char Args [AGENT_MAX_COMMAND_LINE_LENGTH]
 Command line arguments used by the injected process. It is limited to AGENT_MAX_COMMAND_LINE_LENGTH bytes. More...
 

Detailed Description

Structure used by the introbootdrv to request a command from Introcore. The first hypercall issued by introbootdrv will request this data, which tells it what to do.

Definition at line 67 of file aghcall.h.

Field Documentation

◆ Agid

unsigned int _AGENT_COMMAND::Agid

Internal use; IT'S NOT the agent tag.

Definition at line 76 of file aghcall.h.

Referenced by IntWinAgentHandleDriverVmcall().

◆ Args

char _AGENT_COMMAND::Args[AGENT_MAX_COMMAND_LINE_LENGTH]

Command line arguments used by the injected process. It is limited to AGENT_MAX_COMMAND_LINE_LENGTH bytes.

Definition at line 82 of file aghcall.h.

Referenced by IntWinAgentHandleDriverVmcall().

◆ Flags

unsigned int _AGENT_COMMAND::Flags

Note used.

Definition at line 74 of file aghcall.h.

Referenced by IntWinAgentHandleDriverVmcall().

◆ Name

char _AGENT_COMMAND::Name[AGENT_MAX_AGENT_NAME_LENGTH]

The agent name. This will be the file name or the process name.

Definition at line 79 of file aghcall.h.

Referenced by IntWinAgentHandleDriverVmcall().

◆ Pid

unsigned int _AGENT_COMMAND::Pid

The process PID from which to start a process agent.

Definition at line 71 of file aghcall.h.

Referenced by IntWinAgentHandleDriverVmcall().

◆ Pointer

unsigned long long _AGENT_COMMAND::Pointer

A pointer to the agent contents in guest memory.

Definition at line 75 of file aghcall.h.

Referenced by IntWinAgentHandleDriverVmcall().

◆ Size

unsigned int _AGENT_COMMAND::Size

The size of the agent.

Definition at line 73 of file aghcall.h.

Referenced by IntWinAgentHandleDriverVmcall().

◆ Synched

unsigned int _AGENT_COMMAND::Synched

Always FALSE for now. Will not wait for the process agent to finish.

Definition at line 72 of file aghcall.h.

Referenced by IntWinAgentHandleDriverVmcall().

◆ Type

unsigned int _AGENT_COMMAND::Type

The agent type. One of AGENT_TYPE.

Definition at line 70 of file aghcall.h.

Referenced by IntWinAgentHandleDriverVmcall().

◆ Version

unsigned int _AGENT_COMMAND::Version

Structure version. Check out AGENT_COMMAND_VERSION.

Definition at line 69 of file aghcall.h.

Referenced by IntWinAgentHandleDriverVmcall().


The documentation for this struct was generated from the following file: