swapmem.h

Go to the documentation of this file.

/*
 * Copyright (c) 2020 Bitdefender
 * SPDX-License-Identifier: Apache-2.0
 */
#ifndef _SWAPMEM_H_
#define _SWAPMEM_H_

#include "introtypes.h"

#define SWAPMEM_FLAG_ASYNC_CALL         0x00000001
#define SWAPMEM_FLAG_ENTRY_XD           0x00000002


#define SWAPMEM_OPT_NO_FAULT            0x00000001
#define SWAPMEM_OPT_UM_FAULT            0x00000002
#define SWAPMEM_OPT_KM_FAULT            0x00000004
#define SWAPMEM_OPT_BP_FAULT            0x00000010
#define SWAPMEM_OPT_RW_FAULT            0x00000020
#define SWAPMEM_OPT_NO_DUPS             0x80000000



typedef INTSTATUS
(*PFUNC_PagesReadCallback)(
    _In_ void *Context,
    _In_ QWORD Cr3,
    _In_ QWORD VirtualAddress,
    _In_ QWORD PhysicalAddress,
    _In_reads_bytes_(DataSize) void *Data,
    _In_ DWORD DataSize,
    _In_ DWORD Flags
    );


typedef INTSTATUS
(*PFUNC_PreInjectCallback)(
    _In_ void *Context,
    _In_ QWORD Cr3,
    _In_ QWORD VirtualAddress
    );


//
// API
//
INTSTATUS
IntSwapMemReadData(
    _In_ QWORD Cr3,
    _In_ QWORD VirtualAddress,
    _In_ DWORD Length,
    _In_ DWORD Options,
    _In_opt_ void *Context,
    _In_opt_ DWORD ContextTag,
    _In_opt_ PFUNC_PagesReadCallback Callback,
    _In_opt_ PFUNC_PreInjectCallback PreInject,
    _Out_opt_ void **SwapHandle
    );

INTSTATUS
IntSwapMemInjectPendingPF(
    void
    );

void
IntSwapMemCancelPendingPF(
    _In_ QWORD VirtualAddress
    );

void
IntSwapMemReinjectFailedPF(
    void
    );

INTSTATUS
IntSwapMemRemoveTransaction(
    _In_ void *Transaction
    );

INTSTATUS
IntSwapMemRemoveTransactionsForVaSpace(
    _In_ QWORD Cr3
    );

INTSTATUS
IntSwapMemInit(
    void
    );

INTSTATUS
IntSwapMemUnInit(
    void
    );

void
IntSwapMemDump(
    void
    );

#endif // _SWAPMEM_H_