Bitdefender Hypervisor Memory Introspection
|
#include <hook_object.h>
Data Fields | |
LIST_ENTRY | Link |
The list entry element. More... | |
LIST_HEAD | Regions |
LIST_HEAD | RemovedRegions |
All the removed regions are inserted here. The regions must be committed in the exact same order they were removed, otherwise, we may end up with inconsistent EPT rights. More... | |
DWORD | ObjectType |
One of the INTRO_OBJECT_TYPE values. More... | |
QWORD | Cr3 |
The CR3 of the object. If this is a kernel object, Cr3 must be 0. More... | |
DWORD | Flags |
Hook flags. More... | |
BOOLEAN | RegionsRemoved |
True if regions have been removed from this object (used by the commit function). More... | |
Describes an object. An object may contain multiple regions. The regions need not be contiguous or of the same type.
Definition at line 16 of file hook_object.h.
QWORD _HOOK_OBJECT_DESCRIPTOR::Cr3 |
The CR3 of the object. If this is a kernel object, Cr3 must be 0.
Definition at line 24 of file hook_object.h.
Referenced by IntHookObjectCreate(), and IntHookObjectDestroyAll().
DWORD _HOOK_OBJECT_DESCRIPTOR::Flags |
Hook flags.
Definition at line 25 of file hook_object.h.
Referenced by IntHookObjectCommit(), and IntHookObjectDestroyAll().
LIST_ENTRY _HOOK_OBJECT_DESCRIPTOR::Link |
The list entry element.
Definition at line 18 of file hook_object.h.
Referenced by IntHookObjectCommit(), and IntHookObjectCreate().
DWORD _HOOK_OBJECT_DESCRIPTOR::ObjectType |
One of the INTRO_OBJECT_TYPE values.
Definition at line 23 of file hook_object.h.
Referenced by IntHookObjectCreate(), and IntHookObjectDestroyAll().
LIST_HEAD _HOOK_OBJECT_DESCRIPTOR::Regions |
The list of hooked regions belonging to this object.
Definition at line 19 of file hook_object.h.
Referenced by IntHookObjectCreate(), IntHookObjectDestroyAll(), IntHookObjectFindRegion(), and IntHookObjectHookRegion().
BOOLEAN _HOOK_OBJECT_DESCRIPTOR::RegionsRemoved |
True if regions have been removed from this object (used by the commit function).
Definition at line 28 of file hook_object.h.
Referenced by IntHookObjectCommit(), IntHookObjectCreate(), and IntHookObjectDestroyAll().
LIST_HEAD _HOOK_OBJECT_DESCRIPTOR::RemovedRegions |
All the removed regions are inserted here. The regions must be committed in the exact same order they were removed, otherwise, we may end up with inconsistent EPT rights.
Definition at line 22 of file hook_object.h.
Referenced by IntHookObjectCommit(), and IntHookObjectCreate().