_HOOK_PTM Struct Reference

#include <hook_ptm.h>

Data Fields
HOOK_HEADER	Header
	Hook header - used by all memory hooks. More...
LIST_ENTRY	Link
	List entry link. More...
QWORD	Address
	Guest physical address of the monitored page-table entry. More...
PHOOK_PTM_TABLE	PtHook
PFUNC_EptViolationCallback	Callback
	Modification callback, called whenever an entry inside this page-table is modified. More...

Detailed Description

Public handle for the page-table hooks. Each call to IntHookPtmSetHook will return a freshly allocated HOOK_PTM structure. However, only a single HOOK_PTM_TABLE will be allocated for each distinct page-table. Therefore, removing a HOOK_PTM will only decrement the reference count of the associated HOOK_PTM_TABLE hook, which will be removed only when the last pointing HOOK_PTM is removed.

Definition at line 37 of file hook_ptm.h.

Field Documentation

Address

QWORD _HOOK_PTM::Address

Guest physical address of the monitored page-table entry.

Definition at line 41 of file hook_ptm.h.

Referenced by IntHookPtmCommitHooks(), and IntHookPtmSetHook().

Callback

PFUNC_EptViolationCallback _HOOK_PTM::Callback

Modification callback, called whenever an entry inside this page-table is modified.

Definition at line 44 of file hook_ptm.h.

Referenced by IntHookPtmSetHook(), and IntHookPtmWriteCallback().

Header

HOOK_HEADER _HOOK_PTM::Header

Hook header - used by all memory hooks.

Definition at line 39 of file hook_ptm.h.

Referenced by IntHookPtmCommitHooks(), IntHookPtmSetHook(), and IntHookPtmWriteCallback().

Link

LIST_ENTRY _HOOK_PTM::Link

List entry link.

Definition at line 40 of file hook_ptm.h.

Referenced by IntHookPtmSetHook().

PtHook

PHOOK_PTM_TABLE _HOOK_PTM::PtHook

The actual page-table hook.

Definition at line 42 of file hook_ptm.h.

Referenced by IntHookPtmSetHook().

---

The documentation for this struct was generated from the following file:

• introcore/include/hook_ptm.h