winpfn.h

Go to the documentation of this file.

/*
 * Copyright (c) 2020 Bitdefender
 * SPDX-License-Identifier: Apache-2.0
 */
#ifndef _WINPFN_H_
#define _WINPFN_H_

#include "introtypes.h"

#define WIN_PFN_INC_VALUE   0xbd

#define WIN_PFN_REF_MAX     0xffff

typedef struct _WIN_PFN_LOCK
{
    LIST_ENTRY      Link;
    QWORD           Page;
    QWORD           GpaPage;

    void            *SwapHook;

    WORD            RefCount;
    BOOLEAN         Present;
    BOOLEAN         LargePage;
} WIN_PFN_LOCK, *PWIN_PFN_LOCK;

#define WIN_PFN_GET_STRUCT_VA(MmPfn, Gpa)                               \
    ((MmPfn) +                                                          \
     ((((gGuest.Guest64 || !gGuest.PaeEnabled)) ?                       \
       WIN_KM_FIELD(Mmpfn, Size) : WIN_KM_FIELD(Mmpfn, PaeSize)) * ((Gpa) >> 12)))

typedef enum
{
    WinPfnZeroPage = 0,         
    WinPfnFreePage,             
    WinPfnStandbyPage,          
    WinPfnModifiedPage,         
    WinPfnModifiedNowritePage,  
    WinPfnBadPage,              
    WinPfnActivePage,           
    WinPfnTransitionPage,       
} WIN_PFN_PAGE_LOCATION;

INTSTATUS
IntWinPfnIsMmPfnDatabase(
    _In_ QWORD MmPfnDatabase
    );

INTSTATUS
IntWinPfnLockGva(
    _In_ QWORD Gva,
    _Out_opt_ WIN_PFN_LOCK **PfnLock
    );

INTSTATUS
IntWinPfnLockGpa(
    _In_ QWORD Gpa,
    _Out_opt_ WIN_PFN_LOCK **PfnLock
    );

INTSTATUS
IntWinPfnRemoveLock(
    _Inout_ WIN_PFN_LOCK *PfnLock,
    _In_ BOOLEAN Force
    );

void
IntWinPfnDump(
    void
    );

void
IntWinPfnUnInit(
    void
    );

#endif