Bitdefender Hypervisor Memory Introspection
|
#include <hook_pts.h>
Data Fields | |
HOOK_HEADER | Header |
Hook header - must be present for every hook. More... | |
QWORD | Cr3 |
Virtual address space where the address is monitored. More... | |
QWORD | VirtualAddress |
The monitored virtual address. More... | |
QWORD | CurEntry |
Current page-table entry. More... | |
QWORD | OldEntry |
Previous page-table entry. More... | |
QWORD | CurPageSize |
Current page size. More... | |
QWORD | OldPageSize |
Previous page size. More... | |
LIST_ENTRY | Link |
List element. More... | |
LIST_ENTRY | PtsLink |
Link inside the HooksPtsList. More... | |
PHOOK_PTS_ENTRY | Parent |
The leaf page-table entry hook associated with this address. More... | |
PFUNC_SwapCallback | Callback |
Swap callback. More... | |
BOOLEAN | IntegrityCheckFailed |
True if integrity checks failed on this translation. More... | |
A handle to a virtual address monitoring hook. Each hook placed on a virtual address will create such a structure. Placing multiple hooks on the same virtual address will result in multiple such structures being allocated, but the low-level hook structures (for example, HOOK_PTS_ENTRY) will remain the same. Removing one such hook will not affect other swap hooks set on the same virtual address.
Definition at line 85 of file hook_pts.h.
PFUNC_SwapCallback _HOOK_PTS::Callback |
Swap callback.
Definition at line 97 of file hook_pts.h.
Referenced by IntHookPtsCloneCallbacks(), IntHookPtsDumpPtsEntry(), and IntHookPtsSetHook().
QWORD _HOOK_PTS::Cr3 |
Virtual address space where the address is monitored.
Definition at line 88 of file hook_pts.h.
Referenced by IntHookPtsCheckIntegrity(), IntHookPtsSetHook(), and IntValidateTranslation().
QWORD _HOOK_PTS::CurEntry |
Current page-table entry.
Definition at line 90 of file hook_pts.h.
Referenced by IntHookGvaSetHook(), IntHookPtsCheckIntegrity(), IntHookPtsCloneCallbacks(), and IntHookPtsSetHook().
QWORD _HOOK_PTS::CurPageSize |
Current page size.
Definition at line 92 of file hook_pts.h.
Referenced by IntHookGvaSetHook(), IntHookPtsCheckIntegrity(), IntHookPtsCloneCallbacks(), and IntHookPtsSetHook().
HOOK_HEADER _HOOK_PTS::Header |
Hook header - must be present for every hook.
Definition at line 87 of file hook_pts.h.
Referenced by IntHookAddCallbackToList(), IntHookPtsCheckIntegrity(), IntHookPtsCloneCallbacks(), IntHookPtsCommitHooks(), IntHookPtsDumpPtsEntry(), IntHookPtsInvokeCallbacks(), and IntHookPtsSetHook().
BOOLEAN _HOOK_PTS::IntegrityCheckFailed |
True if integrity checks failed on this translation.
Definition at line 98 of file hook_pts.h.
Referenced by IntHookPtsCheckIntegrity().
LIST_ENTRY _HOOK_PTS::Link |
List element.
Definition at line 94 of file hook_pts.h.
Referenced by IntHookPtsHandleModification(), and IntHookPtsMergeEntry().
QWORD _HOOK_PTS::OldEntry |
Previous page-table entry.
Definition at line 91 of file hook_pts.h.
Referenced by IntHookPtsCloneCallbacks(), and IntHookPtsSetHook().
QWORD _HOOK_PTS::OldPageSize |
Previous page size.
Definition at line 93 of file hook_pts.h.
Referenced by IntHookPtsCloneCallbacks(), and IntHookPtsSetHook().
PHOOK_PTS_ENTRY _HOOK_PTS::Parent |
The leaf page-table entry hook associated with this address.
Definition at line 96 of file hook_pts.h.
Referenced by IntHookPtsCloneCallbacks(), IntHookPtsHandleModification(), IntHookPtsMergeEntry(), IntHookPtsSetHook(), and IntValidateTranslation().
LIST_ENTRY _HOOK_PTS::PtsLink |
Link inside the HooksPtsList.
Definition at line 95 of file hook_pts.h.
Referenced by IntHookPtsSetHook().
QWORD _HOOK_PTS::VirtualAddress |
The monitored virtual address.
Definition at line 89 of file hook_pts.h.
Referenced by IntHookPtsCheckIntegrity(), IntHookPtsCloneCallbacks(), IntHookPtsDumpPtsEntry(), IntHookPtsHandleModification(), and IntHookPtsSetHook().