introvirt::windows::nt::TypeTable Class Reference

Class for managing NT object types. More...

#include <TypeTable.hh>

Public Member Functions
virtual ObjectType	normalize (uint32_t type) const =0
	Convert a native object type to our normalized representation.
virtual ObjectType	normalize (const guest_ptr< void > &address) const =0
	Get the type of object from the pointer to an OBJECT_TYPE.
virtual uint32_t	native (ObjectType type) const =0
	Convert a normalized ObjectType to it's native representation.
virtual	~TypeTable ()=default

Detailed Description

Class for managing NT object types.

Windows does not keep object types consistent between versions. Consequently, we normalize their values for consistency.

Constructor & Destructor Documentation

~TypeTable()

virtual introvirt::windows::nt::TypeTable::~TypeTable ( )

virtualdefault

Member Function Documentation

native()

virtual uint32_t introvirt::windows::nt::TypeTable::native ( ObjectType  type ) const

pure virtual

Convert a normalized ObjectType to it's native representation.

Parameters

type	The ObjectType to convert

Returns

The native

normalize() [1/2]

virtual ObjectType introvirt::windows::nt::TypeTable::normalize ( const guest_ptr< void > &  address ) const

pure virtual

Get the type of object from the pointer to an OBJECT_TYPE.

This is just used by XP, where objects don't contain an index. Instead, they contain a pointer to an OBJECT_TYPE.

Parameters

address

The address of the OBJECT_TYPE

Returns

The normalized object type

normalize() [2/2]

virtual ObjectType introvirt::windows::nt::TypeTable::normalize ( uint32_t  type ) const

pure virtual

Convert a native object type to our normalized representation.

Parameters

type	The native object type

Returns

The normalized ObjectType

---

The documentation for this class was generated from the following file:

• /home/runner/work/IntroVirt/IntroVirt/include/introvirt/windows/kernel/nt/TypeTable.hh