Bitdefender Hypervisor Memory Introspection
winpower.h File Reference
#include "introtypes.h"

Go to the source code of this file.

Typedefs

typedef enum _INTRO_POWER_STATE INTRO_POWER_STATE
 Detected guest power states. More...
 
typedef enum _INTRO_POWER_STATEPINTRO_POWER_STATE
 

Enumerations

enum  _INTRO_POWER_STATE {
  intPowStateUnknown = 0, intPowStateSleeping, intPowStateHibernate, intPowStateReboot,
  intPowStateShutdown, intPowStateMaxState
}
 Detected guest power states. More...
 

Functions

INTSTATUS IntWinPowHandlePowerStateChange (void *Detour)
 Detour callback which is called whenever NtSetSystemPowerState is called, resulting in a hypercall to the introspection engine. More...
 
INTSTATUS IntWinPowEnableSpinWait (void)
 This function is called in order to re-enable spin waiting in the handler after it was previously disabled. More...
 
INTSTATUS IntWinPowDisableSpinWait (void)
 This function is called in order to disable spin waiting after everything we needed to be unloaded was done. More...
 

Typedef Documentation

◆ INTRO_POWER_STATE

Detected guest power states.

◆ PINTRO_POWER_STATE

Enumeration Type Documentation

◆ _INTRO_POWER_STATE

Detected guest power states.

Enumerator
intPowStateUnknown 

The state is not among the known combinations or it is unused by the introspection engine.

intPowStateSleeping 

The guest is about to enter a sleep state (S1, S2, S3).

intPowStateHibernate 

The guest is about to enter hibernate (S4).

intPowStateReboot 

The guest is about to reboot.

intPowStateShutdown 

The guest is about to shutdown.

intPowStateMaxState 

The maximum state, should never be used as it is just an indicator for sanity checks.

Definition at line 13 of file winpower.h.

Function Documentation

◆ IntWinPowDisableSpinWait()

INTSTATUS IntWinPowDisableSpinWait ( void  )

This function is called in order to disable spin waiting after everything we needed to be unloaded was done.

Returns
INT_STATUS_SUCCESS on success, or other error INTSTATUS values which may be returned by IntDetModifyPublicData.

Definition at line 170 of file winpower.c.

Referenced by IntPtCompleteUnloader(), and IntVeCompleteUnloader().

◆ IntWinPowEnableSpinWait()

INTSTATUS IntWinPowEnableSpinWait ( void  )

This function is called in order to re-enable spin waiting in the handler after it was previously disabled.

Returns
INT_STATUS_SUCCESS on success, or other error INTSTATUS values which may be returned by IntDetModifyPublicData.

Definition at line 137 of file winpower.c.

Referenced by IntWinPowHandleEventCommon().