Bitdefender Hypervisor Memory Introspection
|
Go to the source code of this file.
Variables | |
BYTE | gTrampolineAgentx64 [15] |
BYTE | gTrampolineAgentx86 [15] |
BYTE | gWindowsBootstrapAgentx64 [0x180] |
BYTE | gWindowsBootstrapAgentx86 [0x120] |
#define OFFSET_WIN_X64_AGENT_EP 0x150 |
Definition at line 89 of file winstubs.h.
Referenced by IntWinAgentInject().
#define OFFSET_WIN_X64_AGENT_SIZE 0x148 |
Definition at line 87 of file winstubs.h.
Referenced by IntWinAgentInject().
#define OFFSET_WIN_X64_AGENT_TAG 0x14C |
Definition at line 88 of file winstubs.h.
Referenced by IntWinAgentInject().
#define OFFSET_WIN_X64_ALLOC 0x130 |
Definition at line 84 of file winstubs.h.
Referenced by IntWinAgentInject().
#define OFFSET_WIN_X64_FREE 0x138 |
Definition at line 85 of file winstubs.h.
Referenced by IntWinAgentInject().
#define OFFSET_WIN_X64_JUMPBACK 0x170 |
Definition at line 94 of file winstubs.h.
Referenced by IntWinAgentInject().
#define OFFSET_WIN_X64_SEMAPHORE 0x154 |
Definition at line 90 of file winstubs.h.
Referenced by IntWinAgentRestoreState64().
#define OFFSET_WIN_X64_THREAD 0x140 |
Definition at line 86 of file winstubs.h.
Referenced by IntWinAgentInject().
#define OFFSET_WIN_X64_TOKEN1 0x158 |
Definition at line 91 of file winstubs.h.
Referenced by IntWinAgentInject().
#define OFFSET_WIN_X64_TOKEN2 0x160 |
Definition at line 92 of file winstubs.h.
Referenced by IntWinAgentInject().
#define OFFSET_WIN_X64_TOKEN3 0x168 |
Definition at line 93 of file winstubs.h.
Referenced by IntWinAgentInject().
#define OFFSET_WIN_X86_AGENT_EP 0x104 |
Definition at line 129 of file winstubs.h.
Referenced by IntWinAgentInject().
#define OFFSET_WIN_X86_AGENT_SIZE 0xFC |
Definition at line 127 of file winstubs.h.
Referenced by IntWinAgentInject().
#define OFFSET_WIN_X86_AGENT_TAG 0x100 |
Definition at line 128 of file winstubs.h.
Referenced by IntWinAgentInject().
#define OFFSET_WIN_X86_ALLOC 0xF0 |
Definition at line 124 of file winstubs.h.
Referenced by IntWinAgentInject().
#define OFFSET_WIN_X86_FREE 0xF4 |
Definition at line 125 of file winstubs.h.
Referenced by IntWinAgentInject().
#define OFFSET_WIN_X86_JUMPBACK 0x118 |
Definition at line 134 of file winstubs.h.
Referenced by IntWinAgentInject().
#define OFFSET_WIN_X86_RELOC 0x002 |
Definition at line 123 of file winstubs.h.
Referenced by IntWinAgentActivatePendingAgent().
#define OFFSET_WIN_X86_SEMAPHORE 0x108 |
Definition at line 130 of file winstubs.h.
Referenced by IntWinAgentRestoreState32().
#define OFFSET_WIN_X86_THREAD 0xF8 |
Definition at line 126 of file winstubs.h.
Referenced by IntWinAgentInject().
#define OFFSET_WIN_X86_TOKEN1 0x10C |
Definition at line 131 of file winstubs.h.
Referenced by IntWinAgentInject().
#define OFFSET_WIN_X86_TOKEN2 0x110 |
Definition at line 132 of file winstubs.h.
Referenced by IntWinAgentInject().
#define OFFSET_WIN_X86_TOKEN3 0x114 |
Definition at line 133 of file winstubs.h.
Referenced by IntWinAgentInject().
#define TRAMP_X64_STOP 11 |
Definition at line 27 of file winstubs.h.
Referenced by IntWinAgentInjectTrampoline().
#define TRAMP_X64_VMCALL1 1 |
Definition at line 28 of file winstubs.h.
Referenced by IntWinAgentInjectTrampoline().
#define TRAMP_X64_VMCALL2 11 |
Definition at line 29 of file winstubs.h.
Referenced by IntWinAgentInjectTrampoline().
#define TRAMP_X86_STOP 11 |
Definition at line 46 of file winstubs.h.
Referenced by IntWinAgentInjectTrampoline().
#define TRAMP_X86_VMCALL1 1 |
Definition at line 47 of file winstubs.h.
Referenced by IntWinAgentInjectTrampoline().
#define TRAMP_X86_VMCALL2 11 |
Definition at line 48 of file winstubs.h.
Referenced by IntWinAgentInjectTrampoline().
#define TRAMPOLINE_MAX_SIZE (sizeof(gTrampolineAgentx64) > sizeof(gTrampolineAgentx86)) ? sizeof(gTrampolineAgentx64) : sizeof(gTrampolineAgentx86) |
Definition at line 50 of file winstubs.h.
Referenced by IntWinAgentInjectTrampoline().
BYTE gTrampolineAgentx64[15] |
Definition at line 13 of file winstubs.h.
BYTE gTrampolineAgentx86[15] |
Definition at line 32 of file winstubs.h.
BYTE gWindowsBootstrapAgentx64[0x180] |
Definition at line 56 of file winstubs.h.
Referenced by IntWinAgentInject().
BYTE gWindowsBootstrapAgentx86[0x120] |
Definition at line 101 of file winstubs.h.
Referenced by IntWinAgentInject().