- Generated by
1.8.13
|
Bitdefender Hypervisor Memory Introspection
|
#include <hook_pts.h>
Data Fields | |
| HOOK_HEADER | Header |
| Hook header - must be present for every hook. More... | |
| QWORD | Cr3 |
| Virtual address space where the address is monitored. More... | |
| QWORD | VirtualAddress |
| The monitored virtual address. More... | |
| QWORD | CurEntry |
| Current page-table entry. More... | |
| QWORD | OldEntry |
| Previous page-table entry. More... | |
| QWORD | CurPageSize |
| Current page size. More... | |
| QWORD | OldPageSize |
| Previous page size. More... | |
| LIST_ENTRY | Link |
| List element. More... | |
| LIST_ENTRY | PtsLink |
| Link inside the HooksPtsList. More... | |
| PHOOK_PTS_ENTRY | Parent |
| The leaf page-table entry hook associated with this address. More... | |
| PFUNC_SwapCallback | Callback |
| Swap callback. More... | |
| BOOLEAN | IntegrityCheckFailed |
| True if integrity checks failed on this translation. More... | |
A handle to a virtual address monitoring hook. Each hook placed on a virtual address will create such a structure. Placing multiple hooks on the same virtual address will result in multiple such structures being allocated, but the low-level hook structures (for example, HOOK_PTS_ENTRY) will remain the same. Removing one such hook will not affect other swap hooks set on the same virtual address.
Definition at line 85 of file hook_pts.h.
| PFUNC_SwapCallback _HOOK_PTS::Callback |
Swap callback.
Definition at line 97 of file hook_pts.h.
Referenced by IntHookPtsCloneCallbacks(), IntHookPtsDumpPtsEntry(), and IntHookPtsSetHook().
| QWORD _HOOK_PTS::Cr3 |
Virtual address space where the address is monitored.
Definition at line 88 of file hook_pts.h.
Referenced by IntHookPtsCheckIntegrity(), IntHookPtsSetHook(), and IntValidateTranslation().
| QWORD _HOOK_PTS::CurEntry |
Current page-table entry.
Definition at line 90 of file hook_pts.h.
Referenced by IntHookGvaSetHook(), IntHookPtsCheckIntegrity(), IntHookPtsCloneCallbacks(), and IntHookPtsSetHook().
| QWORD _HOOK_PTS::CurPageSize |
Current page size.
Definition at line 92 of file hook_pts.h.
Referenced by IntHookGvaSetHook(), IntHookPtsCheckIntegrity(), IntHookPtsCloneCallbacks(), and IntHookPtsSetHook().
| HOOK_HEADER _HOOK_PTS::Header |
Hook header - must be present for every hook.
Definition at line 87 of file hook_pts.h.
Referenced by IntHookAddCallbackToList(), IntHookPtsCheckIntegrity(), IntHookPtsCloneCallbacks(), IntHookPtsCommitHooks(), IntHookPtsDumpPtsEntry(), IntHookPtsInvokeCallbacks(), and IntHookPtsSetHook().
| BOOLEAN _HOOK_PTS::IntegrityCheckFailed |
True if integrity checks failed on this translation.
Definition at line 98 of file hook_pts.h.
Referenced by IntHookPtsCheckIntegrity().
| LIST_ENTRY _HOOK_PTS::Link |
List element.
Definition at line 94 of file hook_pts.h.
Referenced by IntHookPtsHandleModification(), and IntHookPtsMergeEntry().
| QWORD _HOOK_PTS::OldEntry |
Previous page-table entry.
Definition at line 91 of file hook_pts.h.
Referenced by IntHookPtsCloneCallbacks(), and IntHookPtsSetHook().
| QWORD _HOOK_PTS::OldPageSize |
Previous page size.
Definition at line 93 of file hook_pts.h.
Referenced by IntHookPtsCloneCallbacks(), and IntHookPtsSetHook().
| PHOOK_PTS_ENTRY _HOOK_PTS::Parent |
The leaf page-table entry hook associated with this address.
Definition at line 96 of file hook_pts.h.
Referenced by IntHookPtsCloneCallbacks(), IntHookPtsHandleModification(), IntHookPtsMergeEntry(), IntHookPtsSetHook(), and IntValidateTranslation().
| LIST_ENTRY _HOOK_PTS::PtsLink |
Link inside the HooksPtsList.
Definition at line 95 of file hook_pts.h.
Referenced by IntHookPtsSetHook().
| QWORD _HOOK_PTS::VirtualAddress |
The monitored virtual address.
Definition at line 89 of file hook_pts.h.
Referenced by IntHookPtsCheckIntegrity(), IntHookPtsCloneCallbacks(), IntHookPtsDumpPtsEntry(), IntHookPtsHandleModification(), and IntHookPtsSetHook().
1.8.13