introvirt::windows::nt::KDDEBUGGER_DATA64 Class Reference

#include <KDDEBUGGER_DATA64.hh>

Public Member Functions
virtual uint64_t	KernelBase () const =0
virtual uint32_t	ServicePackNumber () const =0
virtual uint64_t	PsLoadedModuleList () const =0
virtual uint64_t	PsActiveProcessHead () const =0
virtual const std::string &	NtBuildLab () const =0
virtual uint64_t	KiProcessorBlock () const =0
virtual uint64_t	ObpTypeObjectType () const =0
virtual uint64_t	ObpRootDirectoryObject () const =0
virtual uint16_t	SizeEThread () const =0
virtual uint64_t	PspCidTable () const =0
virtual bool	PaeEnabled () const =0
virtual	~KDDEBUGGER_DATA64 ()=default

Constructor & Destructor Documentation

~KDDEBUGGER_DATA64()

virtual introvirt::windows::nt::KDDEBUGGER_DATA64::~KDDEBUGGER_DATA64 ( )

virtualdefault

Member Function Documentation

KernelBase()

virtual uint64_t introvirt::windows::nt::KDDEBUGGER_DATA64::KernelBase ( ) const

pure virtual

Returns

The base address of the Windows kernel

KiProcessorBlock()

virtual uint64_t introvirt::windows::nt::KDDEBUGGER_DATA64::KiProcessorBlock ( ) const

pure virtual

Returns

The address of the KiProcessorBlock array

NtBuildLab()

virtual const std::string & introvirt::windows::nt::KDDEBUGGER_DATA64::NtBuildLab ( ) const

pure virtual

Returns

The NT build string

ObpRootDirectoryObject()

virtual uint64_t introvirt::windows::nt::KDDEBUGGER_DATA64::ObpRootDirectoryObject ( ) const

pure virtual

Returns

The root directory object

ObpTypeObjectType()

virtual uint64_t introvirt::windows::nt::KDDEBUGGER_DATA64::ObpTypeObjectType ( ) const

pure virtual

Returns

The root of the OBJECT_TYPE list

PaeEnabled()

virtual bool introvirt::windows::nt::KDDEBUGGER_DATA64::PaeEnabled ( ) const

pure virtual

Returns

True if the kernel has PAE enabled

PsActiveProcessHead()

virtual uint64_t introvirt::windows::nt::KDDEBUGGER_DATA64::PsActiveProcessHead ( ) const

pure virtual

Returns

The address of the active process list head

PsLoadedModuleList()

virtual uint64_t introvirt::windows::nt::KDDEBUGGER_DATA64::PsLoadedModuleList ( ) const

pure virtual

Returns

The address of PsLoadedModuleList, which lists loaded kernel modules

PspCidTable()

virtual uint64_t introvirt::windows::nt::KDDEBUGGER_DATA64::PspCidTable ( ) const

pure virtual

Returns

The address of the PspCidTable

ServicePackNumber()

virtual uint32_t introvirt::windows::nt::KDDEBUGGER_DATA64::ServicePackNumber ( ) const

pure virtual

Returns

The service pack number of the operating system

SizeEThread()

virtual uint16_t introvirt::windows::nt::KDDEBUGGER_DATA64::SizeEThread ( ) const

pure virtual

Returns

The size of the ETHREAD structure

---

The documentation for this class was generated from the following file:

• /home/runner/work/IntroVirt/IntroVirt/include/introvirt/windows/kernel/nt/types/KDDEBUGGER_DATA64.hh