Bitdefender Hypervisor Memory Introspection
|
#include <hook_gpa.h>
Data Fields | |
LIST_HEAD | GpaHooksWrite [GPA_HOOK_TABLE_SIZE] |
Hash table of write hooks. More... | |
LIST_HEAD | GpaHooksRead [GPA_HOOK_TABLE_SIZE] |
Hash table of read hooks. More... | |
LIST_HEAD | GpaHooksExecute [GPA_HOOK_TABLE_SIZE] |
Hash table of execute hooks. More... | |
QUEUE_HEAD | RemovedHooksWrite |
List of removed write hooks. More... | |
QUEUE_HEAD | RemovedHooksRead |
List of removed read hooks. More... | |
QUEUE_HEAD | RemovedHooksExecute |
List of removed execute hooks. More... | |
LIST_HEAD | EptEntries [GPA_EPT_TABLE_SIZE] |
Hash table containing the EPT entries elements (HOOK_EPT_ENTRY). More... | |
INT64 | HooksCount |
Total number of hooks set. More... | |
BOOLEAN | HooksRemoved |
True if hooks were removed, and we must do the cleanup.. More... | |
BOOLEAN | VeEnabled |
True if VE filtering is enabled. More... | |
BOOLEAN | PtCacheEnabled |
True if the PT cache is active inside the guest. More... | |
BOOLEAN | SppEnabled |
True if SPP support is present and enabled. More... | |
Global GPA hooks state.
Definition at line 104 of file hook_gpa.h.
LIST_HEAD _HOOK_GPA_STATE::EptEntries[GPA_EPT_TABLE_SIZE] |
Hash table containing the EPT entries elements (HOOK_EPT_ENTRY).
Definition at line 115 of file hook_gpa.h.
Referenced by IntHookGpaEnableDisablePtCache(), IntHookGpaEnableDisableVe(), IntHookGpaFindConvertible(), IntHookGpaGetEptEntry(), IntHookGpaGetExistingEptEntry(), and IntHookGpaInit().
LIST_HEAD _HOOK_GPA_STATE::GpaHooksExecute[GPA_HOOK_TABLE_SIZE] |
Hash table of execute hooks.
Definition at line 108 of file hook_gpa.h.
Referenced by IntDbgCheckHooks(), IntHandleMemAccess(), IntHookGpaDump(), IntHookGpaInit(), IntHookGpaIsPageHooked(), IntHookGpaSetHook(), and IntVeInit().
LIST_HEAD _HOOK_GPA_STATE::GpaHooksRead[GPA_HOOK_TABLE_SIZE] |
Hash table of read hooks.
Definition at line 107 of file hook_gpa.h.
Referenced by IntDbgCheckHooks(), IntHandleMemAccess(), IntHookGpaDump(), IntHookGpaInit(), IntHookGpaIsPageHooked(), IntHookGpaSetHook(), and IntVeInit().
LIST_HEAD _HOOK_GPA_STATE::GpaHooksWrite[GPA_HOOK_TABLE_SIZE] |
Hash table of write hooks.
Definition at line 106 of file hook_gpa.h.
Referenced by IntDbgCheckHooks(), IntHandleMemAccess(), IntHookGpaDump(), IntHookGpaInit(), IntHookGpaIsPageHooked(), IntHookGpaSetHook(), and IntVeInit().
INT64 _HOOK_GPA_STATE::HooksCount |
Total number of hooks set.
Definition at line 117 of file hook_gpa.h.
Referenced by IntHookGpaDeleteHookInternal(), and IntHookGpaSetHook().
BOOLEAN _HOOK_GPA_STATE::HooksRemoved |
True if hooks were removed, and we must do the cleanup..
Definition at line 119 of file hook_gpa.h.
Referenced by IntHookCommitAllHooks(), IntHookGpaCommitHooks(), and IntHookGpaRemoveHookInternal().
BOOLEAN _HOOK_GPA_STATE::PtCacheEnabled |
True if the PT cache is active inside the guest.
Definition at line 121 of file hook_gpa.h.
Referenced by IntHookGpaEnableDisablePtCache(), IntHookGpaSetHook(), and IntHookGpaSetNewPageProtection().
QUEUE_HEAD _HOOK_GPA_STATE::RemovedHooksExecute |
List of removed execute hooks.
Definition at line 112 of file hook_gpa.h.
Referenced by IntHookGpaCommitHooks(), IntHookGpaDump(), IntHookGpaInit(), and IntHookGpaRemoveHookInternal().
QUEUE_HEAD _HOOK_GPA_STATE::RemovedHooksRead |
List of removed read hooks.
Definition at line 111 of file hook_gpa.h.
Referenced by IntHookGpaCommitHooks(), IntHookGpaDump(), IntHookGpaInit(), and IntHookGpaRemoveHookInternal().
QUEUE_HEAD _HOOK_GPA_STATE::RemovedHooksWrite |
List of removed write hooks.
Definition at line 110 of file hook_gpa.h.
Referenced by IntHookGpaCommitHooks(), IntHookGpaDump(), IntHookGpaInit(), and IntHookGpaRemoveHookInternal().
BOOLEAN _HOOK_GPA_STATE::SppEnabled |
True if SPP support is present and enabled.
Definition at line 122 of file hook_gpa.h.
Referenced by IntHookGpaInit(), IntHookGpaSetHook(), and IntHookGpaSetNewPageProtection().
BOOLEAN _HOOK_GPA_STATE::VeEnabled |
True if VE filtering is enabled.
Definition at line 120 of file hook_gpa.h.
Referenced by IntHookGpaEnableDisableVe(), IntHookGpaSetHook(), and IntHookGpaSetNewPageProtection().