#include <hook_ptwh.h>

Data Fields
QWORD	CurEntry
	Current page-table entry value. More...

QWORD	IntEntry

DWORD	WrittenMask: 8
	Bit mask indicating which bytes inside the page-table entry have been written. More...

DWORD	LastWriteRip: 23
	Last RIP that wrote this entry (low 23 bits only). More...

DWORD	LastWriteSize: 1
	The size of the last write (1 == 8 bytes, 0 == 4 bytes). More...

Detailed Description

Page Table Entry Write State. Whenever processing a page-table write, this structure keeps the intermediate state, as a page-table write may only modify a partial chunk of the entry. We call the swap callbacks only when the entire page-table entry has been written.

Definition at line 18 of file hook_ptwh.h.

Field Documentation

◆ CurEntry

QWORD _HOOK_PTEWS::CurEntry

Current page-table entry value.

Definition at line 20 of file hook_ptwh.h.

Referenced by IntHookPtsCloneCallbacks(), IntHookPtsCreateEntry(), IntHookPtsHandleModification(), IntHookPtsSetHook(), and IntVasHookTables().

◆ IntEntry

QWORD _HOOK_PTEWS::IntEntry

Intermediate page-table entry value.

Definition at line 21 of file hook_ptwh.h.

Referenced by IntHookPtsCreateEntry(), IntValidateTranslation(), and IntVasHookTables().

◆ LastWriteRip

DWORD _HOOK_PTEWS::LastWriteRip

Last RIP that wrote this entry (low 23 bits only).

Definition at line 24 of file hook_ptwh.h.

◆ LastWriteSize

DWORD _HOOK_PTEWS::LastWriteSize

The size of the last write (1 == 8 bytes, 0 == 4 bytes).

Definition at line 25 of file hook_ptwh.h.

◆ WrittenMask

DWORD _HOOK_PTEWS::WrittenMask

Bit mask indicating which bytes inside the page-table entry have been written.

Definition at line 23 of file hook_ptwh.h.

Referenced by IntHookPtsCreateEntry(), and IntValidateTranslation().

The documentation for this struct was generated from the following file:

introcore/include/hook_ptwh.h