Bitdefender Hypervisor Memory Introspection
winbugcheck.h File Reference

Information about Windows kernel crashes. More...

#include "introtypes.h"

Go to the source code of this file.

Data Structures

union  _EFLAGS
 The layout of the EFLAGS register. More...
 

Macros

#define BUGCHECK_IRQL_NOT_LESS_OR_EQUAL   0x0000000A
 
#define BUGCHECK_BAD_POOL_HEADER   0x00000019
 
#define BUGCHECK_MEMORY_MANAGEMENT   0x0000001A
 
#define BUGCHECK_KMODE_EXCEPTION_NOT_HANDLED   0x0000001E
 
#define BUGCHECK_SYSTEM_SERVICE_EXCEPTION   0x0000003B
 
#define BUGCHECK_PFN_LIST_CORRUPT   0x0000004E
 
#define BUGCHECK_PAGE_FAULT_IN_NONPAGED_AREA   0x00000050
 
#define BUGCHECK_PROCESS_INITIALIZATION_FAILED   0x00000060
 
#define BUGCHECK_KERNEL_STACK_INPAGE_ERROR   0x00000077
 
#define BUGCHECK_KERNEL_DATA_INPAGE_ERROR   0x0000007A
 
#define BUGCHECK_INACCESSIBLE_BOOT_DEVICE   0x0000007C
 
#define BUGCHECK_SYSTEM_THREAD_EXCEPTION_NOT_HANDLED   0x0000007E
 
#define BUGCHECK_UNEXPECTED_KERNEL_MODE_TRAP   0x0000007F
 
#define BUGCHECK_KERNEL_MODE_EXCEPTION_NOT_HANDLED   0x0000008E
 
#define BUGCHECK_CRITICAL_PROCESS_DIED   0x000000EF
 
#define BUGCHEDCK_CRITICAL_STRUCTURE_CORRUPTION   0x00000109
 

Typedefs

typedef union _EFLAGS EFLAGS
 The layout of the EFLAGS register. More...
 
typedef union _EFLAGSPEFLAGS
 

Functions

INTSTATUS IntWinBcHandleBugCheck (void const *Detour)
 Handles a Windows OS crash.This is the detour handle for the KeBugCheck2 32-bit Windows kernel API and the KeBugCheckEx 64-bit Windows kernel API. This will log as much information as possible and will notify the integrator about the event. More...
 

Detailed Description

Information about Windows kernel crashes.

For more information about a specific bug check code see https://docs.microsoft.com/en-us/windows-hardware/drivers/debugger/bug-check-code-reference2

The codes defined in this file are the ones for which introcore tries to do some handling (usually, obtaining more information about the crash).

Definition in file winbugcheck.h.

Macro Definition Documentation

◆ BUGCHECK_BAD_POOL_HEADER

#define BUGCHECK_BAD_POOL_HEADER   0x00000019

Definition at line 23 of file winbugcheck.h.

Referenced by IntGetBugCheckLink(), and IntGetBugCheckName().

◆ BUGCHECK_CRITICAL_PROCESS_DIED

#define BUGCHECK_CRITICAL_PROCESS_DIED   0x000000EF

Definition at line 36 of file winbugcheck.h.

Referenced by IntGetBugCheckLink(), IntGetBugCheckName(), and IntWinBcLogBsodEvent().

◆ BUGCHECK_INACCESSIBLE_BOOT_DEVICE

#define BUGCHECK_INACCESSIBLE_BOOT_DEVICE   0x0000007C

Definition at line 32 of file winbugcheck.h.

Referenced by IntGetBugCheckLink(), and IntGetBugCheckName().

◆ BUGCHECK_IRQL_NOT_LESS_OR_EQUAL

#define BUGCHECK_IRQL_NOT_LESS_OR_EQUAL   0x0000000A

Definition at line 22 of file winbugcheck.h.

Referenced by IntGetBugCheckLink(), IntGetBugCheckName(), and IntWinBcLogBsodEvent().

◆ BUGCHECK_KERNEL_DATA_INPAGE_ERROR

#define BUGCHECK_KERNEL_DATA_INPAGE_ERROR   0x0000007A

Definition at line 31 of file winbugcheck.h.

Referenced by IntGetBugCheckLink(), and IntGetBugCheckName().

◆ BUGCHECK_KERNEL_MODE_EXCEPTION_NOT_HANDLED

#define BUGCHECK_KERNEL_MODE_EXCEPTION_NOT_HANDLED   0x0000008E

Definition at line 35 of file winbugcheck.h.

Referenced by IntGetBugCheckLink(), IntGetBugCheckName(), and IntWinBcLogBsodEvent().

◆ BUGCHECK_KERNEL_STACK_INPAGE_ERROR

#define BUGCHECK_KERNEL_STACK_INPAGE_ERROR   0x00000077

Definition at line 30 of file winbugcheck.h.

Referenced by IntGetBugCheckLink(), and IntGetBugCheckName().

◆ BUGCHECK_KMODE_EXCEPTION_NOT_HANDLED

#define BUGCHECK_KMODE_EXCEPTION_NOT_HANDLED   0x0000001E

Definition at line 25 of file winbugcheck.h.

Referenced by IntGetBugCheckLink(), and IntGetBugCheckName().

◆ BUGCHECK_MEMORY_MANAGEMENT

#define BUGCHECK_MEMORY_MANAGEMENT   0x0000001A

Definition at line 24 of file winbugcheck.h.

Referenced by IntGetBugCheckLink(), and IntGetBugCheckName().

◆ BUGCHECK_PAGE_FAULT_IN_NONPAGED_AREA

#define BUGCHECK_PAGE_FAULT_IN_NONPAGED_AREA   0x00000050

Definition at line 28 of file winbugcheck.h.

Referenced by IntGetBugCheckLink(), and IntGetBugCheckName().

◆ BUGCHECK_PFN_LIST_CORRUPT

#define BUGCHECK_PFN_LIST_CORRUPT   0x0000004E

Definition at line 27 of file winbugcheck.h.

Referenced by IntGetBugCheckLink(), and IntGetBugCheckName().

◆ BUGCHECK_PROCESS_INITIALIZATION_FAILED

#define BUGCHECK_PROCESS_INITIALIZATION_FAILED   0x00000060

Definition at line 29 of file winbugcheck.h.

Referenced by IntGetBugCheckLink(), and IntGetBugCheckName().

◆ BUGCHECK_SYSTEM_SERVICE_EXCEPTION

#define BUGCHECK_SYSTEM_SERVICE_EXCEPTION   0x0000003B

Definition at line 26 of file winbugcheck.h.

Referenced by IntGetBugCheckLink(), IntGetBugCheckName(), and IntWinBcLogBsodEvent().

◆ BUGCHECK_SYSTEM_THREAD_EXCEPTION_NOT_HANDLED

#define BUGCHECK_SYSTEM_THREAD_EXCEPTION_NOT_HANDLED   0x0000007E

Definition at line 33 of file winbugcheck.h.

Referenced by IntGetBugCheckLink(), IntGetBugCheckName(), and IntWinBcLogBsodEvent().

◆ BUGCHECK_UNEXPECTED_KERNEL_MODE_TRAP

#define BUGCHECK_UNEXPECTED_KERNEL_MODE_TRAP   0x0000007F

Definition at line 34 of file winbugcheck.h.

Referenced by IntGetBugCheckLink(), IntGetBugCheckName(), and IntWinBcLogBsodEvent().

◆ BUGCHEDCK_CRITICAL_STRUCTURE_CORRUPTION

#define BUGCHEDCK_CRITICAL_STRUCTURE_CORRUPTION   0x00000109

Definition at line 37 of file winbugcheck.h.

Referenced by IntGetBugCheckLink(), IntGetBugCheckName(), and IntWinBcLogBsodEvent().

Typedef Documentation

◆ EFLAGS

typedef union _EFLAGS EFLAGS

The layout of the EFLAGS register.

◆ PEFLAGS

typedef union _EFLAGS * PEFLAGS