Struct WindowsDirectoryObject

pub struct WindowsDirectoryObject<'a, Driver>
where
    Driver: VmiDriver,
    Driver::Architecture: Architecture + ArchAdapter<Driver>,
{ /* private fields */ }

A Windows directory object.

A directory object is a kernel-managed container that stores named objects such as events, mutexes, symbolic links, and device objects.

Implementation Details

Corresponds to _OBJECT_DIRECTORY.

Implementations

impl<'a, Driver> WindowsDirectoryObject<'a, Driver>

where Driver: VmiDriver, Driver::Architecture: Architecture + ArchAdapter<Driver>,

pub fn new(vmi: VmiState<'a, Driver, WindowsOs<Driver>>, va: Va) -> Self

Creates a new Windows directory object.

pub fn iter( &self, ) -> Result<impl Iterator<Item = Result<WindowsObject<'a, Driver>, VmiError>>, VmiError>

Iterates over the objects in the directory.

pub fn lookup( &self, needle: impl AsRef<str>, ) -> Result<Option<WindowsObject<'a, Driver>>, VmiError>

Performs a lookup in the directory.

Trait Implementations

impl<'a, Driver> From<WindowsDirectoryObject<'a, Driver>> for WindowsObject<'a, Driver>

where Driver: VmiDriver, Driver::Architecture: Architecture + ArchAdapter<Driver>,

fn from(value: WindowsDirectoryObject<'a, Driver>) -> Self

Converts to this type from the input type.

impl<Driver> VmiVa for WindowsDirectoryObject<'_, Driver>

where Driver: VmiDriver, Driver::Architecture: Architecture + ArchAdapter<Driver>,

fn va(&self) -> Va

Returns the virtual address.