Struct WindowsObjectType

pub struct WindowsObjectType<'a, Driver>
where
    Driver: VmiDriver,
    Driver::Architecture: Architecture + ArchAdapter<Driver>,
{ /* private fields */ }

A Windows object type object.

A type of kernel object managed by the Windows Object Manager.

Implementation Details

Corresponds to _OBJECT_TYPE.

Implementations

impl<'a, Driver> WindowsObjectType<'a, Driver>

where Driver: VmiDriver, Driver::Architecture: Architecture + ArchAdapter<Driver>,

pub fn new(vmi: VmiState<'a, Driver, WindowsOs<Driver>>, va: Va) -> Self

Creates a new Windows directory object.

pub fn name(&self) -> Result<String, VmiError>

Returns the name of the object type.

Notes

This method caches the object type name for this VA in the WindowsOs instance.

Implementation Details

Corresponds to _OBJECT_TYPE.Name.

pub fn kind(&self) -> Result<Option<WindowsObjectTypeKind>, VmiError>

Returns the kind of the object type.

Notes

This method caches the object type kind for this VA in the WindowsOs instance.

Trait Implementations

impl<'a, Driver> From<WindowsObjectType<'a, Driver>> for WindowsObject<'a, Driver>

where Driver: VmiDriver, Driver::Architecture: Architecture + ArchAdapter<Driver>,

fn from(value: WindowsObjectType<'a, Driver>) -> Self

Converts to this type from the input type.

impl<Driver> VmiVa for WindowsObjectType<'_, Driver>

where Driver: VmiDriver, Driver::Architecture: Architecture + ArchAdapter<Driver>,

fn va(&self) -> Va

Returns the virtual address.