Bitdefender Hypervisor Memory Introspection
|
Describe an agent running inside the guest. More...
#include <lixagent.h>
Data Fields | |
LIST_ENTRY | Link |
List entry element. More... | |
LIX_AGENT_TAG | Tag |
The internal tag. More... | |
DWORD | TagEx |
The tag provided by the integrator. More... | |
DWORD | Agid |
The agent ID. More... | |
LIX_AGENT_HYPERCALL | HypercallType |
The hypercall type. More... | |
LIX_AGENT_DATA | Data |
The data used by the agent. More... | |
LIX_AGENT_THREAD * | Thread |
A pointer to a agent-thread, if any. More... | |
CHAR | Name [IG_MAX_AGENT_NAME_LENGTH] |
The name of the agent. More... | |
struct { | |
PFUNC_AgentCallbackHypercall Hypercall | |
Hypercall callback. More... | |
PFUNC_AgentCallbackCompletion Completion | |
Completion callback. More... | |
} | Callback |
struct { | |
QWORD Address | |
Address of the detoured instruction. More... | |
BYTE Bytes [16] | |
Detoured instruction bytes. More... | |
BYTE Length | |
Detoured instruction length. More... | |
void * CloakHandle | |
Cloak handle used to hide the detoured instruction. More... | |
BOOLEAN Restored | |
True if the detours instruction has been restored. More... | |
} | Instruction |
Describe an agent running inside the guest.
Definition at line 149 of file lixagent.h.
QWORD _LIX_AGENT::Address |
Address of the detoured instruction.
Definition at line 172 of file lixagent.h.
Referenced by IntLixAgentActivatePendingAgent(), IntLixAgentCreate(), and IntLixAgentHandleInt3().
DWORD _LIX_AGENT::Agid |
The agent ID.
Definition at line 156 of file lixagent.h.
Referenced by IntLixAgentCreate(), and IntLixAgentThreadInject().
BYTE _LIX_AGENT::Bytes[16] |
Detoured instruction bytes.
Definition at line 174 of file lixagent.h.
Referenced by IntLixAgentActivatePendingAgent().
struct { ... } _LIX_AGENT::Callback |
Referenced by IntLixAgentCreate().
void* _LIX_AGENT::CloakHandle |
Cloak handle used to hide the detoured instruction.
Definition at line 177 of file lixagent.h.
Referenced by IntLixAgentActivatePendingAgent(), and IntLixAgentCreate().
PFUNC_AgentCallbackCompletion _LIX_AGENT::Completion |
LIX_AGENT_DATA _LIX_AGENT::Data |
The data used by the agent.
Definition at line 159 of file lixagent.h.
Referenced by IntLixAgentActivatePendingAgent(), IntLixAgentCreate(), and IntLixAgentHandleInt3().
PFUNC_AgentCallbackHypercall _LIX_AGENT::Hypercall |
LIX_AGENT_HYPERCALL _LIX_AGENT::HypercallType |
struct { ... } _LIX_AGENT::Instruction |
Referenced by IntLixAgentActivatePendingAgent(), IntLixAgentCreate(), and IntLixAgentHandleInt3().
BYTE _LIX_AGENT::Length |
Detoured instruction length.
Definition at line 175 of file lixagent.h.
Referenced by IntLixAgentActivatePendingAgent(), and IntLixAgentCreate().
LIST_ENTRY _LIX_AGENT::Link |
List entry element.
Definition at line 151 of file lixagent.h.
Referenced by IntLixAgentActivatePendingAgent(), IntLixAgentInject(), and IntLixAgentThreadInject().
CHAR _LIX_AGENT::Name[IG_MAX_AGENT_NAME_LENGTH] |
The name of the agent.
Definition at line 162 of file lixagent.h.
Referenced by IntLixAgentThreadInject().
BOOLEAN _LIX_AGENT::Restored |
True if the detours instruction has been restored.
Definition at line 179 of file lixagent.h.
Referenced by IntLixAgentActivatePendingAgent(), IntLixAgentCreate(), and IntLixAgentHandleInt3().
LIX_AGENT_TAG _LIX_AGENT::Tag |
The internal tag.
Definition at line 153 of file lixagent.h.
Referenced by IntLixAgentActivatePendingAgent(), IntLixAgentCreate(), and IntLixAgentGetState().
DWORD _LIX_AGENT::TagEx |
The tag provided by the integrator.
Definition at line 154 of file lixagent.h.
Referenced by IntLixAgentCreate(), and IntLixAgentThreadInject().
LIX_AGENT_THREAD* _LIX_AGENT::Thread |
A pointer to a agent-thread, if any.
Definition at line 160 of file lixagent.h.
Referenced by IntLixAgentHandleInt3(), and IntLixAgentThreadInject().