Bitdefender Hypervisor Memory Introspection
_HOOK_OBJECT_DESCRIPTOR Struct Reference

#include <hook_object.h>

Data Fields

LIST_ENTRY Link
 The list entry element. More...
 
LIST_HEAD Regions
 
LIST_HEAD RemovedRegions
 All the removed regions are inserted here. The regions must be committed in the exact same order they were removed, otherwise, we may end up with inconsistent EPT rights. More...
 
DWORD ObjectType
 One of the INTRO_OBJECT_TYPE values. More...
 
QWORD Cr3
 The CR3 of the object. If this is a kernel object, Cr3 must be 0. More...
 
DWORD Flags
 Hook flags. More...
 
BOOLEAN RegionsRemoved
 True if regions have been removed from this object (used by the commit function). More...
 

Detailed Description

Describes an object. An object may contain multiple regions. The regions need not be contiguous or of the same type.

Definition at line 16 of file hook_object.h.

Field Documentation

◆ Cr3

QWORD _HOOK_OBJECT_DESCRIPTOR::Cr3

The CR3 of the object. If this is a kernel object, Cr3 must be 0.

Definition at line 24 of file hook_object.h.

Referenced by IntHookObjectCreate(), and IntHookObjectDestroyAll().

◆ Flags

DWORD _HOOK_OBJECT_DESCRIPTOR::Flags

Hook flags.

Definition at line 25 of file hook_object.h.

Referenced by IntHookObjectCommit(), and IntHookObjectDestroyAll().

◆ Link

LIST_ENTRY _HOOK_OBJECT_DESCRIPTOR::Link

The list entry element.

Definition at line 18 of file hook_object.h.

Referenced by IntHookObjectCommit(), and IntHookObjectCreate().

◆ ObjectType

DWORD _HOOK_OBJECT_DESCRIPTOR::ObjectType

One of the INTRO_OBJECT_TYPE values.

Definition at line 23 of file hook_object.h.

Referenced by IntHookObjectCreate(), and IntHookObjectDestroyAll().

◆ Regions

LIST_HEAD _HOOK_OBJECT_DESCRIPTOR::Regions

The list of hooked regions belonging to this object.

Definition at line 19 of file hook_object.h.

Referenced by IntHookObjectCreate(), IntHookObjectDestroyAll(), IntHookObjectFindRegion(), and IntHookObjectHookRegion().

◆ RegionsRemoved

BOOLEAN _HOOK_OBJECT_DESCRIPTOR::RegionsRemoved

True if regions have been removed from this object (used by the commit function).

Definition at line 28 of file hook_object.h.

Referenced by IntHookObjectCommit(), IntHookObjectCreate(), and IntHookObjectDestroyAll().

◆ RemovedRegions

LIST_HEAD _HOOK_OBJECT_DESCRIPTOR::RemovedRegions

All the removed regions are inserted here. The regions must be committed in the exact same order they were removed, otherwise, we may end up with inconsistent EPT rights.

Definition at line 22 of file hook_object.h.

Referenced by IntHookObjectCommit(), and IntHookObjectCreate().


The documentation for this struct was generated from the following file: