ModeBasedExecHook.h

Go to the documentation of this file.

 
#pragma once
 
//                  Definitions                 //
 
#define MAX_PHYSICAL_RAM_RANGE_COUNT 32
 
//                  Structures                  //
 
typedef struct MODE_BASED_RAM_REGIONS
{
    UINT64 RamPhysicalAddress;
    UINT64 RamSize;
 
} MODE_BASED_RAM_REGIONS, *PMODE_BASED_RAM_REGIONS;
 
//                   Globals                    //
 
MODE_BASED_RAM_REGIONS PhysicalRamRegions[MAX_PHYSICAL_RAM_RANGE_COUNT];
 
//                    Functions                 //
 
VOID
ModeBasedExecHookEnableOrDisable(VIRTUAL_MACHINE_STATE * VCpu, UINT32 State);
 
VOID
ModeBasedExecHookUninitialize();
 
BOOLEAN
ModeBasedExecHookInitialize();
 
BOOLEAN
ModeBasedExecHookDisableUserModeExecution(PVMM_EPT_PAGE_TABLE EptTable);
 
BOOLEAN
ModeBasedExecHookDisableKernelModeExecution(PVMM_EPT_PAGE_TABLE EptTable);